Privacy Policy

We collect information you actively provide — such as your email address, display name, property address, session notes, and photo annotations — when you create an account, configure a session, annotate photos, or submit a support inquiry.

When you use the Platform, your browser or device provides information automatically, including GPS coordinates (with your explicit permission), camera and microphone streams (with your explicit permission), and standard HTTP request metadata such as your IP address and browser type.

Camera and microphone access is requested by the Platform only for the purpose of conducting the inspection session. The Platform will display a browser permission dialog before accessing either capability. You may revoke these permissions at any time through your browser or device settings, though doing so will impair or prevent session functionality.

If you choose to sign in using Google Sign-In, we receive from Google your email address, public profile name, and profile photograph URL as made available by Google's OAuth service. We do not receive your Google password.

Our payment processor, Stripe, Inc., notifies us via a signed webhook event when a credit purchase is completed. This notification includes the credit package identifier and a reference to your user account. We do not receive your full payment card number, CVV, or bank account details from Stripe.

• Authenticate Inspectors and maintain secure account sessions
• Generate and store session records, including photographs, GPS data, and annotations
• Enable real-time communication between Inspectors and Customers via WebRTC
• Produce downloadable inspection reports (PDF) and photo archives (ZIP)
• Process credit purchases and track credit balances
• Display the property's GPS location on an interactive map during sessions

• Respond to support inquiries and problem reports submitted through the Platform
• Send service-related notifications (e.g., platform announcements, changes to these policies)

We do not send marketing emails unless you have explicitly opted in. We do not sell your contact information to advertisers.

• Monitor platform performance and diagnose technical issues using server logs
• Detect and prevent fraudulent, abusive, or unauthorized use
• Administer rate limiting to prevent abuse of credit adjustment functions

• Respond to valid legal process, court orders, or regulatory inquiries
• Enforce our Terms and Conditions of Service
• Protect the rights, property, or safety of Akemera, our users, or the public

Where applicable law requires a stated legal basis for processing personal information, we rely on: (a) performance of a contract — to deliver the services you requested; (b) legitimate interests — to operate, maintain, and improve the Platform and to prevent fraud; and (c) compliance with legal obligations — to meet applicable regulatory requirements.

By design, certain information is shared between the Inspector and Customer within a session:

• A Customer's captured photographs, GPS coordinates, and voluntarily provided name are visible to the Inspector who created the session.
• The property address entered by the Inspector is embedded in the inspection report.
• The Inspector's camera and audio feed, where shared during a session, is transmitted directly to the Customer's browser via the encrypted WebRTC peer-to-peer connection.

Customers should be aware that photographs and GPS data they contribute will be included in the inspection report generated by the Inspector and may be shared by the Inspector with third parties (such as lenders, appraisers, or clients) in that Inspector's professional capacity. Akemera is not responsible for how Inspectors use or disclose reports after download.

We share personal information with third-party service providers who process data on our behalf under contractual data processing obligations. See Section 6 for a complete list. These providers are authorized to use your personal information only as necessary to provide their services to us.

If Akemera, Inc. undergoes a merger, acquisition, reorganization, bankruptcy, or sale of all or substantially all of its assets, personal information held by us may be transferred to the successor entity. We will provide notice of any such transfer on this page or via the contact information associated with your account, and the successor will be bound by the terms of this Privacy Policy or a materially equivalent successor policy.

We may disclose personal information if we are required to do so by law, subpoena, court order, or other valid legal process, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Akemera, its users, or the public, or to enforce our Terms and Conditions.

Inspector account information (email, display name, credit balance, transaction history, and UI preferences) is retained for the lifetime of the account. If you request account deletion (see Section 15), we will delete or anonymize your account data within 30 days, subject to any legal hold obligations.

Inspection session records, including photographs, GPS coordinates, and annotations, are retained indefinitely unless the Inspector deletes the session through the Platform interface or submits a deletion request as described in Section 15. Inspectors may delete individual sessions, which will also delete all associated photos and GPS records.

Akemera reserves the right to delete sessions that have been inactive for more than 24 consecutive months, with reasonable prior notice to the Inspector where practicable.

Because Customers do not create Akemera accounts, Customer-provided data (name, GPS records, photos) is associated with the Inspector's session record and subject to the Inspector's retention and deletion decisions. Customers who wish to have their data removed from a session should contact the Inspector who conducted the session. Customers may also contact us directly at the address in Section 15; we will process such requests to the extent we can identify and isolate the relevant data.

Transaction records (credit purchase history, credit consumption records) are retained for a minimum of seven (7) years to comply with applicable tax and financial recordkeeping requirements, even if the associated Inspector account is deleted.

Server access logs generated by Vercel's infrastructure are retained per Vercel's standard log retention policy (typically up to 30 days). Akemera does not separately archive server logs.

The Platform uses your browser's localStorage to persist your Firebase authentication session across page reloads and browser tabs. This is a functional requirement for maintaining your login state without requiring you to re-authenticate on every visit. This data does not contain your password and is encrypted by Firebase before storage.

The Platform enables Firestore's offline persistence feature, which stores a local cache of your session data in your browser's IndexedDB. This cache allows the Platform to display session data even when your internet connection is temporarily interrupted. This data is stored locally on your device and is not transmitted to any third party beyond what is already synchronized with Firestore during normal operation.

The admin management interface uses sessionStorage to hold the administrator's session authentication token. This data is automatically cleared when the browser tab is closed and is not accessible to other origins.

The Platform does not set any first-party cookies. Firebase Authentication may set cookies under the firebaseapp.com domain as part of Google's OAuth flow. These are strictly functional cookies required for authentication and do not track your behavior for advertising purposes. We do not use advertising cookies, social media cookies, or cross-site tracking technologies.

The Platform does not use tracking technologies that respond to Do Not Track ("DNT") browser signals, because we do not engage in behavioral tracking in the first place.

In the preceding twelve (12) months, we have collected the following categories of personal information as defined by the CCPA:

You have the right to request that we disclose: (a) the categories and specific pieces of personal information we have collected about you; (b) the categories of sources from which that information was collected; (c) the purposes for which we use that information; and (d) the categories of third parties with whom we share that information.

You have the right to request deletion of personal information we have collected from you, subject to certain exceptions. We may deny a deletion request if retention of the information is necessary for us or our service providers to: complete a transaction, detect or prevent security incidents, comply with legal obligations, or exercise free speech or other legal rights.

You have the right to request that we correct inaccurate personal information we maintain about you. Inspectors may update their display name and email address directly within the Platform's Settings screen. For other corrections, please contact us as described in Section 15.

Akemera does not sell personal information and does not share personal information for cross-context behavioral advertising. Therefore, there is no opt-out required. We will continue to not sell or share personal information in the future.

We only use sensitive personal information (specifically, precise geolocation data from Customer devices) for the purpose of providing the inspection session service, which is the direct purpose for which it was collected. We do not use sensitive personal information to infer characteristics or for secondary purposes beyond those disclosed in this Policy.

We will not discriminate against you for exercising any of your CCPA rights. We will not deny you goods or services, charge you different prices, provide a different level of service quality, or suggest that you will receive different treatment as a result of exercising your privacy rights.

You may designate an authorized agent to submit a CCPA request on your behalf. We will require written authorization from you confirming the agent's authority, and we may require verification of your identity directly before processing the request.

To exercise any of the rights described above, please submit a verifiable consumer request using the contact information in Section 15. We will respond to a verifiable request within 45 days of receipt. If we require more time (up to an additional 45 days), we will provide written notice of the extension. We do not charge a fee for processing verifiable consumer requests unless they are excessive or repetitive.

We process personal data under the following lawful bases as defined in Article 6 GDPR:

• Performance of a contract (Art. 6(1)(b)): Processing necessary to provide the Platform services you have requested — account creation, session management, report generation, and credit transactions.
• Legitimate interests (Art. 6(1)(f)): Operating, maintaining, and improving the Platform; detecting and preventing fraud and abuse; ensuring platform security. We have balanced these interests against your rights and freedoms.
• Legal obligation (Art. 6(1)(c)): Retaining financial records as required by applicable tax and accounting law.
• Consent (Art. 6(1)(a)): Where we rely on consent (e.g., accessing your device camera and microphone), you may withdraw that consent at any time through your browser or device settings, though withdrawal will impair or prevent session functionality.

For special categories of personal data (Article 9 GDPR), we do not knowingly collect such data. Precise geolocation data is processed under Article 6(1)(b) as it is integral to the inspection session service.

Subject to applicable conditions and exceptions under GDPR, you have the following rights:

• Right of access (Art. 15): Request a copy of the personal data we hold about you and information about how it is processed.
• Right to rectification (Art. 16): Request correction of inaccurate or incomplete personal data. Inspectors may update display name and email directly within the Platform's Settings screen.
• Right to erasure / "right to be forgotten" (Art. 17): Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, you withdraw consent, or you object and we have no overriding legitimate grounds. Financial records required by law are exempt.
• Right to restriction of processing (Art. 18): Request that we limit processing of your personal data in certain circumstances, such as while a dispute about accuracy is resolved.
• Right to data portability (Art. 20): Receive personal data you provided to us in a structured, commonly used, machine-readable format, and transmit it to another controller, where processing is based on consent or contract and carried out by automated means.
• Right to object (Art. 21): Object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is for the establishment, exercise, or defence of legal claims.
• Rights related to automated decision-making (Art. 22): We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.

Submit your request to geoappraise@akemera.com. We will respond within one (1) month of receipt. Where requests are complex or numerous, we may extend this period by a further two months and will notify you accordingly. We do not charge a fee for reasonable requests.

We may need to verify your identity before processing a request. For Inspector accounts, we may ask you to confirm your request from the email address associated with your account.

If you believe we have processed your personal data in a manner inconsistent with GDPR, you have the right to lodge a complaint with your local data protection supervisory authority. In the EEA, this is the authority in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement. In the United Kingdom, this is the Information Commissioner's Office (ICO). We encourage you to contact us first at geoappraise@akemera.com so we have the opportunity to address your concern directly.

Akemera, Inc. is based in the United States. When personal data of EEA, UK, or Swiss residents is transferred to and processed in the United States, we rely on appropriate safeguards to ensure an adequate level of protection. These safeguards include:

• Standard Contractual Clauses (SCCs): Where our third-party processors (including Google Firebase and Stripe) transfer data outside the EEA, they rely on SCCs approved by the European Commission or equivalent transfer mechanisms.
• UK International Data Transfer Agreements (IDTAs): For transfers from the United Kingdom, equivalent transfer mechanisms apply.

You may request a copy of the relevant transfer safeguards by contacting us at geoappraise@akemera.com.

Akemera, Inc. is not required to appoint a Data Protection Officer (DPO) under Article 37 GDPR based on the nature and scale of our processing activities. Privacy-related inquiries and GDPR requests should be directed to geoappraise@akemera.com.