Privacy Policy

Part I — Overview

1.Introduction

MKTSVY provides a cloud-based market-intelligence and competitive-research platform for the multifamily housing industry. This Policy describes our practices regarding personal information — information that identifies, relates to, or could reasonably be linked to an identifiable individual — that we handle in the course of providing the Service to our business customers and their Authorized Users.

This Policy does not govern the market data displayed within the Service (such as rents, availability, concessions, amenities, and property attributes compiled from publicly available and other lawful sources). That information concerns properties rather than individuals and is addressed in the Terms, including the sections on Publicly Available & Third-Party Information and Data Accuracy.

2.Who This Policy Covers

This Policy applies to:

• Customers — the businesses and organizations that subscribe to the Service;
• Authorized Users — the individuals a Customer permits to access the Service under its account; and
• Website visitors — individuals who visit our public website or contact us.

Where a Customer organization determines how its Authorized Users’ information is handled within the Service, MKTSVY processes that information on the Customer’s behalf and in accordance with the Terms.

3.A Business Tool, Not a Consumer Data Broker

MKTSVY is designed for professional, internal business use by apartment owners, operators, managers, lenders, brokers, and analysts. We intentionally collect a limited amount of personal information — essentially, what is required to create an account, process payment, communicate with you, and secure the Service. We do not build advertising profiles, and we do not collect personal information about apartment renters or the general public through the Service.

Part II — Information We Collect

4.Information You Provide

We collect the information you or your organization choose to provide, which typically includes:

• Account & identity information — your name, business email address, and the password you set (passwords are stored only in a hashed, non-reversible form);
• Organization information — your company or organization name, role, and the subject and comparable properties you ask us to track on your behalf;
• Billing information — the billing contact and details necessary to process your subscription. Payment card details are collected and processed directly by our payment processor (Stripe) and are not stored on MKTSVY’s own servers;
• Communications — the content of messages, support requests, and feedback you send to us (for example, by email to our support or contact addresses); and
• Customer Data — information you upload into the Service, as described in the Terms.

5.Information Collected Automatically

When you use the Service, we and our infrastructure providers automatically collect limited technical and usage information, which may include:

• Log & device data — IP address, browser type and version, device and operating-system information, and referring pages;
• Usage data — records of actions taken within the Service (for example, which surveys or properties you view, reports you export, and features you use), together with timestamps, for security, troubleshooting, and product-improvement purposes; and
• Diagnostic data — performance metrics and error reports generated as the Service runs.

We use this information to operate, secure, and improve the Service, as further described in Section 9.

6.Cookies & Similar Technologies

We use a small number of cookies and similar technologies that are strictly necessary to operate the Service. These include:

• Authentication cookies — used to keep you signed in and to secure your session; and
• Preference cookies — used to remember interface choices, such as which version of the application you prefer.

We do not use third-party advertising cookies, and we do not use cookies to track you across other websites or services. Because the cookies we use are essential to providing the Service, disabling them in your browser may prevent parts of the Service from functioning. You can control cookies through your browser settings.

7.Information From Third Parties

We may receive limited information about you from third parties who help us provide the Service, such as:

• our payment processor, which confirms the status of payments and provides billing metadata (but not full card numbers); and
• our security and infrastructure providers, which supply information used to protect the Service against fraud, abuse, and unauthorized access.

Any market data we obtain from publicly available or third-party sources relates to properties, not to you as a user, and is governed by the Terms.

8.Information We Do Not Collect

To be clear about our limited practices, MKTSVY does not:

• sell or rent personal information;
• use third-party advertising networks or serve targeted ads;
• track users across unrelated websites or applications;
• store full payment card numbers on our own systems; or
• intentionally collect special or sensitive categories of personal information (such as government identifiers, health, biometric, precise geolocation, or financial account numbers) as part of providing the Service.

Part III — How We Use & Share Information

9.How We Use Information

We use the personal information described above only for legitimate business purposes, including to:

• create, authenticate, and administer accounts and Authorized-User access;
• provide, maintain, and support the Service, and generate the reports and analyses you request;
• process subscriptions, invoices, and payments, and prevent billing fraud;
• communicate with you about your account, transactions, security, and support requests, and send administrative or service-related notices;
• monitor, secure, troubleshoot, and improve the performance, reliability, and integrity of the Service;
• develop new features and understand how the Service is used, using operational and usage data; and
• comply with legal obligations and enforce our Terms.

10.Legal Bases for Processing

Where the European Union General Data Protection Regulation, the UK GDPR, or similar laws apply, we process personal information on the following legal bases: performance of a contract (to provide the Service you or your organization have requested); legitimate interests (to secure, operate, and improve the Service, and to communicate with you, in ways that are not overridden by your rights); compliance with a legal obligation; and, where required, your consent, which you may withdraw at any time.

11.Artificial Intelligence Features

Certain features of the Service use artificial-intelligence and machine-learning technologies to generate summaries, classifications, and analytical insights. Where these features process information through third-party AI providers, we share only the data necessary to produce the requested output, subject to those providers’ contractual confidentiality and security obligations. We do not use your personal information or Customer Data to train third-party AI models for their own purposes, and we do not permit our AI providers to do so. AI-generated outputs are informational only, as described in the Terms.

12.Aggregated & De-Identified Data

We may create aggregated, anonymized, or de-identified information that does not identify you or any individual and cannot reasonably be used to do so. We may use and retain such information for lawful business purposes, including benchmarking, analytics, research, security, and product development. This Policy does not restrict our use of information that has been aggregated or de-identified.

13.How We Share Information

We share personal information only in the limited circumstances described below. We do not sell it.

• Service providers & subprocessors — with vendors who process information on our behalf to provide the Service, under contracts requiring them to protect it and use it only for that purpose (see Section 14);
• Within your organization — with your Customer account’s administrators and Authorized Users, as inherent in a shared business account;
• Legal & safety — when we reasonably believe disclosure is required by law, regulation, legal process, or governmental request, or is necessary to protect the rights, property, safety, or security of MKTSVY, our customers, or others, or to detect and prevent fraud or abuse;
• Business transfers — in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case we will require the recipient to honor this Policy or provide notice of any material change; and
• With your direction or consent — when you ask us to share information or otherwise consent to sharing.

14.Service Providers & Subprocessors

We rely on a small set of reputable service providers to run the Service. Each processes personal information only as needed to perform services for us and is bound by confidentiality and data-protection obligations. Our principal categories of subprocessors are:

We may update our subprocessors from time to time as our infrastructure evolves. The categories above reflect our current practices.

15.We Do Not Sell Your Information

MKTSVY does not sell your personal information, and does not “share” it for cross-context behavioral advertising, as those terms are defined under applicable U.S. state privacy laws. We have not sold or shared personal information for such purposes in the preceding twelve (12) months.

Part IV — Retention & Security

16.Data Retention

We retain personal information for as long as needed to provide the Service, maintain your account, comply with our legal obligations, resolve disputes, prevent fraud, and enforce our agreements. When information is no longer needed for these purposes, we delete it or de-identify it. Following termination, we handle Customer Data as described in the Data Retention & Deletion section of the Terms. You may request deletion of your account information as described in Section 22.

17.How We Protect Information

We implement commercially reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These include encryption of data in transit, hashed storage of credentials, access controls, network protections, and reputable cloud-infrastructure providers. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your login credentials and for the security controls within your own organization, as described in the Terms.

18.International Data Transfers

MKTSVY is based in the United States, and the Service is operated using infrastructure located in the United States. If you access the Service from outside the United States, you understand that your information will be processed in the United States and other jurisdictions where our service providers operate, which may have data-protection laws different from those in your location. Where required, we rely on appropriate safeguards for such transfers.

Part V — Your Rights & Choices

19.Your Privacy Rights

Depending on where you live, you may have rights regarding your personal information, which may include the right to:

• access or obtain a copy of the personal information we hold about you;
• correct inaccurate or incomplete personal information;
• request deletion of your personal information;
• obtain a portable copy of certain information;
• object to or restrict certain processing; and
• be free from unlawful discrimination for exercising these rights.

Where MKTSVY processes information on behalf of a Customer organization, we will refer your request to that organization or assist it in responding, as appropriate.

20.California Privacy Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), provides you the rights to know, access, correct, and delete the personal information we collect about you, and to not be sold or “shared” for cross-context behavioral advertising. As stated in Section 15, we do not sell or share personal information. The categories of personal information we collect, the purposes for which we use them, and the parties with whom we share them are described in Sections 4 through 14. We will not discriminate against you for exercising your CCPA/CPRA rights. You may submit a request as described in Section 22, and you may use an authorized agent to do so.

21.European & UK Privacy Rights

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the rights described in Section 19 under the GDPR and UK GDPR, along with the right to withdraw consent where processing is based on consent and the right to lodge a complaint with your local supervisory authority. The legal bases on which we rely are described in Section 10. For purposes of the Service, MKTSVY generally acts as a data “processor” with respect to information handled on a Customer’s behalf, and as a data “controller” with respect to account, billing, and website information.

22.How to Exercise Your Rights

To exercise any of the rights described above, contact us at privacy@mktsvy.com. We will verify your request against the information associated with your account before responding, and we will respond within the timeframe required by applicable law. Many account details can also be reviewed or updated directly within your account settings.

23.Communication Preferences

We send account, billing, security, and other service-related messages that are necessary to operate the Service; because these are not promotional, you cannot opt out of them while you maintain an account. If we send any optional or promotional communications, you may opt out at any time by following the unsubscribe instructions in the message or by contacting us.

Part VI — General

24.Children’s Privacy

The Service is a business tool intended for individuals who are at least eighteen (18) years old, as stated in the Terms. It is not directed to children, and we do not knowingly collect personal information from anyone under eighteen. If we learn that we have inadvertently collected such information, we will delete it.

25.Third-Party Links & Sources

The Service and our website may contain links to third-party websites and may display information drawn from third-party sources. We are not responsible for the privacy practices or content of those third parties. This Policy applies only to the Service and to information we control. We encourage you to review the privacy policies of any third-party sites you visit.

26.Data Security Incidents

In the event of a data-security incident affecting personal information, we will investigate and respond as appropriate and will provide notifications to affected individuals and authorities where and as required by applicable law.

27.Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or the Service. When we make material changes, we will revise the “Last updated” date above and, where appropriate, provide additional notice by posting on our website or notifying you through the Service. Your continued use of the Service after a revised Policy becomes effective constitutes acceptance of the changes.

28.Contact Us

If you have questions or requests regarding this Policy or your personal information, contact us at:

MKTSVY LLC
Privacy: privacy@mktsvy.com
Legal: legal@mktsvy.com
Website: https://www.mktsvy.com