Privacy Policy

Last Updated: December 27, 2025

This Privacy Policy describes how Homeflip.ai, operated by Whitebox Academy, LLC, a Delaware limited liability company ("Company," "we," "us," or "our"), collects, uses, and shares information about you when you use our website, platform, and services (collectively, the "Services"). By using our Services, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide to Us

We collect information you provide directly to us, including:

• Account Information: When you create an account or join our waitlist, we collect your name, email address, phone number, and the geographic markets (counties) you are interested in.
• Payment Information: When you make a purchase, our third-party payment processor collects your payment card information, billing address, and other financial data necessary to process your transaction. We do not store complete payment card numbers on our servers.
• Communications: When you contact us, participate in coaching calls, or communicate through our platform, we may collect the contents of those communications.
• Business Information: Information about your real estate investing business, strategies, and goals that you share with us during onboarding or coaching sessions.

1.2 Information We Collect Automatically

When you access or use our Services, we automatically collect certain information, including:

• Device and Usage Information: We collect information about the device you use to access our Services, including hardware model, operating system, browser type, IP address, and device identifiers.
• Log Information: We collect log information about your use of the Services, including access times, pages viewed, features used, and the page you visited before navigating to our Services.
• Cookies and Similar Technologies: We use cookies, pixels, and similar technologies to collect information about your browsing activities. See Section 6 for more details.

1.3 Information from Third-Party Sources

We may obtain information about you from third-party sources, including:

• Public Records: Our Services involve aggregating publicly available information from county court records, property records, and other government sources to provide probate lead information.
• Data Providers: We may obtain property ownership data, contact information, and other real estate-related data from third-party data providers.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Process transactions and send related information, including confirmations and invoices
• Send you technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Communicate with you about products, services, offers, and events
• Personalize your experience and deliver content relevant to your interests
• Monitor and analyze trends, usage, and activities in connection with our Services
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Comply with legal obligations

3. How We Share Your Information

We may share information about you as follows:

• Service Providers: We share information with vendors, consultants, and other service providers who need access to such information to carry out work on our behalf, including payment processing, data analysis, email delivery, hosting, customer service, and marketing.
• Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
• Legal Requirements: We may disclose your information if we believe disclosure is necessary to comply with any applicable law, regulation, legal process, or governmental request.
• Protection of Rights: We may disclose information to protect the rights, property, and safety of Homeflip.ai, our users, or others.
• With Your Consent: We may share information with your consent or at your direction.

We do not sell your personal information to third parties.

4. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The retention period may vary depending on the context of the processing and our legal obligations.

When you close your account, we will delete or anonymize your personal information within 90 days, unless we are required to retain it for legal purposes or have a legitimate business need to do so.

5. Data Security

We implement appropriate technical and organizational measures designed to protect the security of your personal information. However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

Our security measures include:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Regular security assessments and updates
• Access controls limiting employee access to personal data
• Secure data centers with physical security measures

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information and to improve and analyze our Services. Cookies are small data files stored on your device.

Types of Cookies We Use:

• Essential Cookies: Required for the operation of our Services. They enable basic functions like page navigation and access to secure areas.
• Analytics Cookies: Help us understand how visitors interact with our Services by collecting and reporting information anonymously.
• Marketing Cookies: Used to track visitors across websites to display relevant advertisements.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Services.

7. Your Privacy Rights

7.1 All Users

You may:

• Access, update, or delete your account information at any time by logging into your account settings
• Opt out of receiving promotional communications by following the unsubscribe instructions in those messages
• Request a copy of the personal information we hold about you

7.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell your personal information. If this changes, we will provide a clear opt-out mechanism.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise these rights, please contact us at privacy@homeflip.ai. We will verify your identity before processing your request.

7.3 Other State Privacy Rights

Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws may have similar rights. Please contact us to exercise any applicable rights under your state's privacy law.

8. Third-Party Services

Our Services may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party services you access.

We use the following categories of third-party services:

• Payment Processing: Stripe
• Analytics: Google Analytics, Vercel Analytics
• Customer Communication: Email service providers
• Scheduling: Calendly
• Hosting: Vercel, Supabase

9. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe we have collected information from a child under 18, please contact us.

10. International Data Transfers

Our Services are hosted in the United States. If you access our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located. By using our Services, you consent to the transfer of your information to the United States.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

This Privacy Policy is provided for informational purposes and does not constitute legal advice. We recommend consulting with a qualified attorney for legal guidance specific to your situation.