Privacy Policy
Version: 1.0 Effective date: August 17, 2026 Last updated: August 17, 2026
In short
Trabeate is a real estate investment analysis tool. Right now, trabeate.com is a waitlist page. The only thing we ask you for is your email address, and we use it to tell you when Trabeate is ready.
We do not sell your information. We do not share it with advertisers. We do not run advertising or cross-site tracking on our website.
This summary is here to be helpful, not to replace the rest of this policy. Where the two differ, the full policy below controls.
1. Who we are and what this policy covers
This Privacy Policy explains how Trabeate ("Trabeate," "we," "us," or "our") collects, uses, shares, and protects personal information.
This policy covers:
- trabeate.com, our website, including the waitlist signup form
- app.trabeate.com, our application — not yet available. Sections of this policy that describe the application are marked and will take effect when it launches.
- Emails we send you in connection with the above
This policy does not cover any third-party website or service you reach through a link on our site. Those have their own privacy policies, and we encourage you to read them.
Together, we refer to the above as the "Service."
Contact: privacy@trabeate.com
2. Where Trabeate is intended to be used
Trabeate is designed and built for use in the United States. Our infrastructure is located in the United States, our product is built around United States real estate, and we do not market Trabeate outside the United States.
We do not currently block access from other countries. If you access the Service from outside the United States, your information will be transferred to, stored in, and processed in the United States, where privacy laws may differ from those in your country. By using the Service from outside the United States, you understand that your information will be handled as described in this policy, under United States law.
3. Information we collect
3.1 Information you give us
Waitlist signup — this is the only information we ask you for today.
- Your email address. You give it to us when you join the waitlist.
That's it. We do not ask for your name, phone number, mailing address, payment information, Social Security number, income, or any financial account details in order to join the waitlist.
If you email us at one of our published addresses, we receive your email address, whatever you write, and anything you attach.
3.2 Information we collect automatically
When you visit trabeate.com, we automatically receive certain technical information. This is standard for websites and is largely a byproduct of how the internet works.
- IP address. Your device sends it to ours in order to load the page. We do not currently use it to look up your location. If we ever do, it will be to derive an approximate country, state, or region only — never precise or GPS-level location — and we will update this policy first.
- Device type and operating system — for example, whether you are on a phone, tablet, or computer, and whether it runs iOS, Android, Windows, or macOS.
- Server logs. Our web server records the request itself: which page was requested, when, and the referring link if your browser sends one.
We use this to understand what kinds of devices people use to reach Trabeate, so we can build the product for them, and to keep the Service secure and working. We do not run any analytics platform on trabeate.com, and we do not build a profile of you from this.
Note: at the time this policy takes effect, the collection of device type and operating system described above is being implemented. We are disclosing it here in advance rather than adding it quietly later.
3.3 Information we do NOT collect
We want to be specific about this, because "we may collect" language in privacy policies often covers far more than a company actually does.
Today, Trabeate does not collect:
- Payment or credit card information — Trabeate is free while in beta and we do not process payments
- Social Security numbers, bank account numbers, or credit report data
- Precise or GPS location
- Information from data brokers or advertising networks
- Biometric information
- Information about your race, ethnicity, religion, health, sexual orientation, political views, or union membership
We do not knowingly collect any of the above. If any of this changes, we will update this policy and, for material changes, tell you before it takes effect. See §12.
3.4 When the application launches (not yet in effect)
When app.trabeate.com becomes available, we will also collect:
- Account information — the email address and credentials you use to sign in, and any name or profile details you choose to provide
- Property and deal information you enter — property addresses, purchase prices, rents, expenses, loan and financing terms, assumptions, notes, saved scenarios, and your investment criteria
- Information about how you use the application — features used, analyses run, reports generated, and errors encountered
- Payment information, if and when Trabeate becomes a paid product. We would use a third-party payment processor, and we would not receive or store your full card number.
Property and deal information you enter is yours. We will use it to run the analyses you ask for, to save your work, and to operate and improve the Service. We do not sell it. We will update this policy with specifics before the application launches.
3.5 Aggregated information
We may compute aggregate statistics across many users — for example, which assumptions people typically use, or general patterns in how the product is used — and use them to improve Trabeate or to describe it publicly.
We will do this only where the result cannot reasonably be used to identify you, your properties, or your deals, and only in combination with information from a meaningful number of other users. We will never publish an individual property, deal, or user's figures.
This is the same commitment made in §7.3 of our Terms of Service.
4. How we use information
We use the information described above to:
- Operate the waitlist and send you a notification when Trabeate is available
- Respond to you when you contact us
- Understand what devices and platforms people use so we build a product that works for them
- Keep the Service secure — detect and prevent fraud, abuse, automated attacks, and unauthorized access
- Diagnose and fix problems
- Comply with law and respond to lawful requests
- Enforce our Terms of Service
When the application launches, we will also use information to provide the application's features, run the analyses you request, save your work, and support you.
What we will not do without telling you first
- We will not add you to a marketing newsletter based on your waitlist signup. The waitlist is for launch notification. If we ever want to send you other kinds of email, we will ask you first, and every marketing email we send will have a working unsubscribe link.
- We will not use your property or financial data to train artificial intelligence models. See §5.
- We will not sell your personal information.
5. Artificial intelligence
Trabeate's analysis features will use artificial intelligence, through Amazon Bedrock, a service of Amazon Web Services. This will happen inside the application at app.trabeate.com. It is not part of trabeate.com today.
Two things about how we intend to use it:
- We do not send your personal information to the AI model. Analysis operates on property and deal figures, not on who you are.
- Your data is not used to train the model. AWS states that Amazon Bedrock does not use customer inputs or outputs to train its underlying models, and Trabeate does not do so either. We will re-confirm this before the application launches, and if AWS's terms change we will update this policy.
AI-assisted output is an estimate produced by software. It can be wrong, incomplete, or out of date. It is not a professional opinion and it is not advice. See our Disclaimer.
We will update this section with specifics before the application launches.
6. How we share information
We do not sell your personal information. We do not share it for advertising purposes. We do not run advertising or cross-site tracking on our website.
We share information only in these situations:
Our infrastructure provider. Trabeate runs entirely on Amazon Web Services (AWS). AWS stores and processes information on our behalf, under contract, and is not permitted to use it for its own purposes. As of this policy's effective date, AWS is our only such provider.
Legal reasons. We may disclose information if we are required to by law, subpoena, court order, or other valid legal process, or where we believe in good faith that disclosure is reasonably necessary to protect the rights, property, or safety of Trabeate, our users, or the public. Where we are permitted to notify you of a legal request, we will make reasonable efforts to do so.
Business transfer. If Trabeate is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction. We will require the recipient to honor this policy, and we will notify you before your information becomes subject to a materially different privacy policy.
With your direction. If you ask us to share something, we will.
That is the complete list of situations in which we disclose personal information to anyone else. If we ever engage additional service providers — for email delivery, error monitoring, analytics, customer support, or anything else — we will name them in this policy before or at the time we start using them.
Separately, we may publish aggregate statistics that cannot identify you. See §3.5.
7. Sale and sharing of personal information
We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are used in United States state privacy laws.
We say this plainly because we can: we run no advertising pixels, no retargeting, no ad-network integrations, and no cross-site tracking on trabeate.com. If that changes, we will update this policy and provide an opt-out mechanism before making the change.
8. Cookies and similar technologies
trabeate.com sets no cookies. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.
We do store one thing in your browser: if you switch the site between its light and dark appearance, that choice is saved in your browser's local storage so the page looks the way you left it. It never leaves your device and it tells us nothing about you.
See our Cookie Policy for the full detail.
Do Not Track
Some browsers offer a "Do Not Track" (DNT) signal. There is no common industry standard for how websites should respond to it. Trabeate does not currently respond to Do Not Track signals — but this is largely academic in our case, since we do not track you across other websites regardless of what signal your browser sends. We disclose this because California law requires us to.
Global Privacy Control (GPC) is a newer browser signal telling websites not to sell or share your personal information. Because we do not sell or share personal information, there is nothing for a GPC signal to opt you out of. If that ever changes, we will honor GPC signals before it does.
9. How long we keep information
We keep information only as long as we have a reason to. Concretely:
| What | How long |
|---|---|
| Waitlist email addresses | Up to 24 months from the date you join, or until you ask us to remove you — whichever comes first. If Trabeate launches during that period and you create an account, your email becomes account information and is kept under the row below. |
| Emails you send us | Up to 24 months after our last exchange, unless we need to keep it longer to resolve a dispute or meet a legal obligation. |
| Server and application logs (including IP addresses) | Up to 12 months, unless a log is relevant to an active security or abuse investigation. Different kinds of logs may be kept for different periods — security and audit logs are typically retained longer than routine access logs. We will state the specifics here once our logging is settled. |
| Account and property data (when the application launches) | For as long as your account is open. After you delete your account, we delete it within 30 days. |
| Backups | Our backups are overwritten on a rolling cycle. Deleted information may persist in backups for up to 35 days after deletion before being overwritten. We do not restore deleted information from backups except to recover from a system failure. |
| Records we must keep by law (for example, tax records once Trabeate has revenue) | For the period the law requires. |
10. How we protect information
Trabeate runs entirely on Amazon Web Services, in a private, access-controlled environment. Our security measures include:
- Encryption in transit — all traffic to and from Trabeate uses HTTPS/TLS
- Encryption at rest — stored data is encrypted
- Access controls — access to systems and data is limited to those who need it, and protected by strong authentication
We also deliberately collect very little information, which is itself a meaningful security measure. We cannot lose what we never had.
We cannot promise perfect security, and we won't. No method of transmitting or storing information is completely secure. We work to protect your information but cannot guarantee it will never be accessed or disclosed in a way this policy does not describe.
We do not currently hold SOC 2, ISO 27001, or any similar certification. We say so explicitly, because a privacy policy that implies a certification the company does not hold is misleading.
If we ever experience a data breach affecting your personal information, we will notify you as required by law, and as promptly as we reasonably can.
11. Your choices and your rights
Choices available to everyone
- Get out of the waitlist. Email privacy@trabeate.com and ask us to remove your address. We will delete it. You do not need to give a reason.
- Ask what we have. Email us and we will tell you what information we hold about you.
- Correct something. Tell us and we will fix it.
- Ask us to delete. Email us and we will delete your information, except anything we are required to keep by law.
- Unsubscribe. Every non-essential email we send will have an unsubscribe link.
We will not treat you differently for exercising any of these — you will not receive a worse product, a later place in line, or a different price.
How to make a request
Email privacy@trabeate.com. Tell us what you want.
- We will acknowledge your request within 10 days and respond within 45 days. If we need more time, we will tell you why and take up to 45 additional days.
- Verification. For a deletion or access request, we may need to confirm you control the email address in question — usually by replying from it. We will not ask you for more information than we need to verify you, and we will not use anything you send for verification for any other purpose.
- Someone acting for you. If an authorized agent makes a request on your behalf, we may ask for proof of their authority and confirmation from you directly.
- If we say no. If we deny a request in whole or in part, we will explain why, and you may reply to ask us to reconsider. We will review the appeal and respond within 45 days.
A note on legal thresholds
Some United States state privacy laws — including California's — apply only to businesses above a certain size, and Trabeate is well below every one of those thresholds. We are choosing to offer these rights to everyone anyway. We do not claim to be a "covered business" under any of those statutes, and we do not claim to be certified or compliant under any privacy framework.
If you are in California, you may also contact the California Attorney General or the California Privacy Protection Agency with concerns.
12. Changes to this policy
We will update this policy when our practices change. We keep every version.
- Every version is dated and archived, so you can always see what this policy said at any point in time.
- For minor changes — clarifications, typos, formatting — we update the "Last updated" date at the top.
- For material changes — a new category of information, a new purpose, a new recipient, or anything that meaningfully reduces your rights — we will post the new version with a future effective date at least 30 days out, and the current version stays in effect until then. If we have your email address, we will email you.
We will not apply a materially different practice to information we already collected without telling you first.
13. Children
Trabeate is not directed to children. You must be at least 18 years old to use the Service.
We do not knowingly collect personal information from anyone under 18, and we have no reason to believe we have. If you believe a child has given us personal information, email privacy@trabeate.com and we will delete it.
14. Contact us
Questions about privacy, or a request about your information:
Email: privacy@trabeate.com Postal: [POSTAL ADDRESS]
For legal notices, see our Terms of Service.
Trabeate — Privacy Policy v1.0 — Effective August 17, 2026