1. Introduction
Appraisal Host ("we", "our", or "us") is committed to protecting your privacy and the security of your data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our appraisal management software services.
As a provider of appraisal management software, we handle sensitive financial and personal information related to real estate appraisals. We take this responsibility seriously and have implemented enterprise-grade security measures to protect your data.
2. Information We Collect
2.1 Information You Provide Directly
We collect information that you provide directly to us, including:
- Account Information: Name, email address, phone number, company name, job title, and password when you create an account.
- Appraisal Order Data: Property addresses, borrower names, loan numbers, appraisal fees, and order details entered into the platform.
- Appraiser Information: Appraiser credentials, license numbers, coverage areas, and contact information.
- Payment Information: Billing addresses and payment details processed through secure third-party payment processors.
- Communication Data: Information from your interactions with us, including support requests, emails, and phone calls.
2.2 Information Collected Automatically
When you use our services, we automatically collect:
- Usage Data: Information about how you use our platform, including features accessed, time spent, and actions taken.
- Device Information: IP address, browser type, operating system, and device identifiers.
- Log Data: Server logs, error reports, and system activity for security and performance monitoring.
- Cookies and Tracking: Data collected through cookies and similar technologies (see Section 8).
2.3 Information from Third Parties
We may receive information from:
- LOS Integrations: Loan data from integrated loan origination systems (Encompass, Calyx Point, BytePro, etc.).
- GSE Portals: Submission confirmations from Fannie Mae, Freddie Mac, and FHA portals through Veros and Bradford Technologies.
- Payment Processors: Transaction confirmations from Paygasus and other payment partners.
3. How We Use Your Information
We use the information we collect to:
- Provide Services: Deliver appraisal management software functionality, including order management, appraiser assignment, and reporting.
- Process Transactions: Handle billing, invoicing, and payment processing for appraisal orders.
- Ensure Compliance: Maintain AIR (Appraiser Independence Requirements) compliance, USPAP standards, and Dodd-Frank regulations.
- Improve Platform: Analyze usage patterns to enhance features, performance, and user experience.
- Provide Support: Respond to your questions, troubleshoot issues, and provide technical assistance.
- Send Communications: Deliver order notifications, status updates, system alerts, and platform announcements.
- Maintain Security: Detect, prevent, and address security threats, fraud, and technical issues.
- Legal Compliance: Meet regulatory requirements and respond to legal requests.
4. Information Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
- Service Providers: With third-party vendors who perform services on our behalf, including AWS (hosting), payment processors, email services, and analytics providers. These vendors are contractually obligated to protect your data.
- Integration Partners: With your LOS provider, GSE portals, or other integrated systems as necessary to provide the requested functionality.
- Business Partners: With appraisers, AMCs, lenders, or other parties involved in the appraisal transaction, as necessary to fulfill the order.
- Legal Requirements: When required by law, subpoena, court order, or government request, or to protect our rights and safety.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users.
- With Your Consent: When you have given us explicit permission to share specific information.
5. Data Security
We implement enterprise-grade security measures to protect your personal and appraisal data:
- Encryption: All data is encrypted in transit using TLS 1.2+ and at rest using 256-bit AES encryption.
- AWS Infrastructure: Our platform runs on Amazon Web Services (AWS) with SOC 2 Type II compliance and 99.99% uptime.
- Access Controls: Role-based permissions ensure users can only access data appropriate to their role.
- Multi-Factor Authentication: Optional MFA for enhanced account security.
- Security Monitoring: 24/7 monitoring for suspicious activity, intrusion attempts, and security threats.
- Regular Audits: Periodic security assessments and penetration testing.
- Data Backup: Daily automated backups with disaster recovery capabilities.
- Founder Expertise: Our founder held CISSP certification and brings 30 years of enterprise security experience.
While we implement robust security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data using industry best practices.
6. Data Retention
We retain your information for as long as necessary to provide our services and comply with legal obligations:
- Account Data: Retained while your account is active and for a reasonable period after account closure to comply with legal requirements.
- Appraisal Records: Retained for at least 5 years to comply with Dodd-Frank and USPAP record-keeping requirements.
- Financial Records: Retained for 7 years to comply with tax and accounting regulations.
- Audit Logs: Retained for 3 years for security and compliance purposes.
- Marketing Data: Retained until you opt out or request deletion.
You may request deletion of your personal information at any time, subject to legal retention requirements.
7. Your Rights and Choices
You have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information, subject to legal retention requirements.
- Data Portability: Request export of your data in a machine-readable format.
- Restriction: Request restriction of certain processing activities.
- Objection: Object to processing of your information for certain purposes.
- Opt-Out: Unsubscribe from marketing communications at any time.
- Withdraw Consent: Withdraw previously given consent for data processing.
To exercise these rights, contact us at . We will respond to your request within 30 days.
9. Third-Party Services
Our platform integrates with third-party services that have their own privacy policies:
- AWS (Amazon Web Services): Hosting and infrastructure services.
- LOS Platforms: Encompass, Calyx Point, BytePro, and other loan origination systems.
- GSE Portals: Veros and Bradford Technologies for Fannie Mae, Freddie Mac, and FHA submissions.
- Payment Processors: Paygasus and other payment partners for direct deposit and billing.
- Analytics Providers: Google Analytics for usage tracking and performance monitoring.
We are not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies.
10. GDPR and CCPA Compliance
10.1 GDPR (European Users)
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
- Right to lodge a complaint with a supervisory authority
10.2 CCPA (California Users)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected, used, shared, or sold
- Right to delete personal information held by businesses
- Right to opt-out of sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising CCPA rights
To exercise GDPR or CCPA rights, contact us at .
11. Children's Privacy
Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Posting the updated Privacy Policy on this page
- Updating the "Last Updated" date at the top of this page
- Sending an email notification to registered users for significant changes
- Displaying a prominent notice on our platform
Your continued use of our services after such changes constitutes acceptance of the updated Privacy Policy.
13. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how we handle your data, please contact us:
Appraisal Host
Address:
,
Response Time: We will respond to privacy requests within 30 days.