Privacy Policy

What We Collect & Why

Account Info

What: Email, name, hashed password.

Why: To create and secure your account, communicate about service activity, support your account, prevent abuse, and comply with legal or billing obligations.

Phone Number

What: Phone number, verification status, and related security metadata.

Why: To support account security, authentication, fraud and abuse prevention, account recovery, and service-critical communications.

Property & Goal Inputs

What: Addresses, asking price, income and expense assumptions, financing terms, target returns, your goals, and other property or investment assumptions you enter or approve.

Why: To generate the 3Y Estimate™, the 3Y Location Score™, goal-supported headroom where applicable, deal metrics, multi-horizon projections, reports, exports, and related platform outputs; to save and retrieve analyses; to support your account; to secure, maintain, test, evaluate, develop, and improve the platform, including features and models; and to maintain service quality.

Analysis Results

What: The 3Y Estimate™, the 3Y Location Score™, goal-supported headroom where applicable, deal metrics, projections, location intelligence, market pulse signals, report history, and exports.

Why: To show and save your reports, power your history and exports, support your account, secure and maintain the service, monitor quality, debug issues, test, evaluate, develop, and improve the platform, including features and models.

Usage & Device Basics

What: Log and event data, app version, browser/device, IP address, approximate location, request metadata, usage activity, and diagnostic information.

Why: To keep the service reliable, secure, performant, abuse-resistant, and easier to improve.

Partner or Affiliate Offer Activity

What: Offer views, clicks, quote requests, referral activity, transaction status, and limited contact or request information when you choose to interact with a partner or affiliate offer.

Why: To present relevant offers, connect you with providers you choose to contact, measure performance, prevent fraud, support billing or referral arrangements, and comply with law.

Customer Deal Data

Customer deal data includes customer-specific property addresses, deal assumptions, analyses, reports, exports, report history, and report activity tied to an account.

We use customer deal data to provide, save, secure, support, maintain, personalize, analyze, test, evaluate, develop, and improve 3Y, including platform features, quality assurance, model evaluation, model development, and service operations.

We do not sell, rent, or disclose customer-specific property addresses, deal assumptions, analyses, reports, exports, report history, or report activity as lead lists, deal lists, or property-acquisition data feeds.

We do not use customer-submitted property data to identify, bid on, purchase, or help another party acquire properties customers are analyzing.

Security & Fraud Prevention Data

What We Collect

Limited account-related data, such as email or phone, transformed into a pseudonymous digital fingerprint using a one-way, salted hash function. This can’t be reversed or used to contact you.

Basic diagnostic reports and anonymized session interaction data when an error occurs—typically a message, timestamp, environment, page path, and a visual reconstruction of the UI leading up to the crash—to help us improve stability. We utilize strict client-side masking so these reports do not collect or transmit the actual text of your property data, financial details, or form inputs.

Why We Collect It

• To prevent repeated free-tier sign-ups and maintain fair-use limits.
• To protect our systems from automated or abusive behavior.
• To detect and troubleshoot app errors efficiently.
• To protect users, 3Y, vendors, partners, and affiliates from fraud, misuse, or unauthorized activity.

How We Use It

These identifiers are used only for platform security and abuse prevention—not for analytics, marketing, or personalization. We retain them only as long as needed to prevent recurring abuse, and keep short-term diagnostic logs, usually under 90 days, for troubleshooting.

What We Don’t Do

• Sell your personal data for money. We may share limited information with service providers, partners, or affiliates as described in this Policy to operate the service, present offers you may choose to explore, measure performance, prevent fraud, process transactions, or comply with law.
• Sell, rent, or disclose customer-specific property addresses, deal assumptions, analyses, reports, exports, report history, or report activity as lead lists, deal lists, or property-acquisition data feeds.
• Use customer-submitted property data to identify, bid on, purchase, or help another party acquire properties customers are analyzing.
• Share your specific analyses or reports with other customers.
• Use your phone number for promotional marketing calls or texts unless you separately provide any legally required consent.
• Retain your personal data after you delete your account except where limited retention is required or permitted for legal, tax, billing, security, fraud-prevention, dispute-resolution, or compliance purposes.

Communications

Service Communications Required

Account verification, password resets, security alerts, plan limits, invoices and receipts, account notices, and essential service updates. You cannot opt out of these messages because they are necessary to run and secure your account.

Product, Educational & Promotional Communications Optional

Feature announcements, product updates, educational content, research, surveys, promotions, and relevant offers. These communications may include offers from 3Y or from partners or affiliates whose products or services may be relevant to real estate investors, such as financing, insurance, property services, or related tools.

You can unsubscribe from promotional emails at any time using the link in every message. Unsubscribing does not affect service communications.

Phone Communications

If you provide a phone number, we use it for account security, authentication, fraud and abuse prevention, account recovery, and service-critical communications. We do not use your phone number for promotional marketing calls or texts unless you separately provide any legally required consent.

Message and data rates may apply. Message frequency varies based on your account activity and security needs. Some security, verification, or account-recovery messages may be required to use certain features.

Partners, Affiliates, and Offers

We may display or send offers from 3Y partners or affiliates, such as financing, insurance, property services, or related tools. Some offers may be sponsored, affiliate, or referral-based, and 3Y may receive compensation if you click, request information, obtain a quote, or purchase a third-party product or service.

If you choose to interact with a partner or affiliate offer, we may share the information needed to process your request, connect you with that provider, measure performance, prevent fraud, support billing or referral arrangements, or comply with law.

Third-party providers use your information under their own terms and privacy policies. 3Y is not responsible for third-party pricing, quotes, underwriting decisions, approvals, denials, claims, eligibility decisions, or privacy practices.

Your Data & Ownership

• You own the specific analyses, reports, and exports tied to your account.
• We own the 3Y platform, models, software, systems, and underlying methodology.
• You grant 3Y a limited license to process your inputs and results to operate, secure, support, maintain, personalize, analyze, test, evaluate, develop, and improve the service, including platform features and models, subject to this Policy and the customer deal data commitments above.

Data Sources We Use

We pull data from trusted sources, including U.S. Census Bureau, BLS, FEMA, FHFA, FBI, NOAA, the Federal Reserve, Realtor.com® Economic Research, Google Maps, and other reputable third-party providers. We strive for accuracy but can’t guarantee it; you should validate assumptions for your use case.

Vendors & Where Data Lives

• Stripe – payment processing. We don’t store full card numbers.
• Firebase – authentication services.
• AWS – secure hosting and storage.
• Google Maps – geocoding and maps.
• Sentry – crash reporting and application monitoring.
• Partners and affiliates – only when needed to present or process offers you choose to explore, measure performance, prevent fraud, or comply with law.

These providers act as processors, service providers, independent businesses, or partners where applicable and have their own privacy terms. We share only what’s needed to provide, secure, support, measure, or improve the service, or to process requests you choose to make.

Security

We apply technical and organizational safeguards designed to protect customer data, including encryption in transit, encryption at rest where supported by our infrastructure, access controls, backups, monitoring, and limited internal access based on business need.

These safeguards are designed to protect the service while still allowing 3Y to provide support, generate and maintain reports, investigate issues, prevent abuse, satisfy legal obligations, and improve the platform. 3Y is not a zero-knowledge storage service, and authorized 3Y personnel or service providers may access information only when needed for legitimate business purposes described in this Policy.

No online service is 100% secure. Protect your account with a strong, unique password and don’t share login credentials.

Your Rights & Controls

• Access your data and download reports.
• Delete individual analyses or your entire account.
• Change email preferences; unsubscribe from promotions anytime.
• Choose whether to interact with partner or affiliate offers.
• Request a copy or deletion of your data by emailing hello@3ynow.com.

Data Retention

We retain account data while your account is active. If you delete your account, we delete associated personal data within a reasonable period, except for limited records we must keep for legal, tax, billing, security, fraud-prevention, dispute resolution, or compliance purposes.

Aggregated & anonymized data. We generate aggregated and anonymized statistics from platform activity—for example, daily and monthly report volume, feature usage counts, and market-level analytics. Once data has been aggregated or anonymized such that it cannot reasonably be linked back to you or any individual user, it no longer constitutes your personal data and is not deleted when you close your account. We retain and use this aggregated data indefinitely to operate, improve, and report on the service.

Children

3Y is for adults 18 and older. We don’t knowingly collect personal data from children.

Changes to This Policy

If we make material changes, we’ll notify you in-app or by email. Continued use after changes means you accept the updated policy.

Contact

Questions or requests? Email hello@3ynow.com.