Effective Date: May 27, 2026

Investor Sprout LLC ("Investor Sprout," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information when you use the Investor Sprout platform, website at investorsprout.io, and related services (collectively, the "Services").

By using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.

1. Who We Are

Investor Sprout LLC is a Kentucky limited liability company located at 6844 Bardstown Road #2310, Louisville, KY 40291. We provide a software platform that helps real estate professionals manage leads, communicate with prospects, and grow their businesses.

For privacy-related questions, contact us at privacy@investorsprout.io.

2. Information We Collect

2.1 Information You Provide Directly

When you create an account or use the Services, we may collect:

Account information: name, email address, phone number, business name, business address, and password
Profile information: professional role, license information (for real estate agents), market areas, and preferences
Payment information: processed through our payment provider Stripe. We do not store full credit card numbers on our servers
Communications: messages you send to our support team, feedback, and survey responses
Lead and contact data: information you upload or enter into the platform about your own leads, contacts, and prospects, including names, phone numbers, email addresses, property addresses, and conversation history

2.2 Information Collected Automatically

When you use the Services, we automatically collect:

Usage data: pages viewed, features used, time spent, and actions taken within the platform
Device and technical data: IP address, browser type, operating system, device identifiers, and referring URLs
Cookies and similar technologies: see Section 8 below

2.3 Information from Third Parties

We may receive information from:

Service providers: such as Stripe (payment), SignalWire (voice and SMS infrastructure), Resend (transactional email), and analytics providers
Public records and data sources: where permitted by law, in connection with services you have requested

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Services
Process transactions and send related information (receipts, confirmations)
Send transactional emails and SMS messages related to your account
Send marketing or promotional messages (only with your explicit consent — see Section 4)
Respond to your inquiries and provide customer support
Detect, prevent, and investigate fraud, abuse, or security incidents
Comply with legal obligations and enforce our Terms of Use
Analyze usage patterns to understand how the Services are used and how to improve them

4. SMS Communications and TCPA Compliance

If you opt in to receive SMS messages from Investor Sprout:

You will receive recurring text messages related to the Services, including notifications, updates, and marketing communications (depending on your consent)
Message frequency varies based on your interaction with the Services
Message and data rates may apply, depending on your mobile carrier
You can opt out at any time by replying STOP to any message. For help, reply HELP
You may also opt out by emailing privacy@investorsprout.io
Opting out of SMS does not affect your ability to use the Services

When users of our platform send SMS messages to their own leads through Investor Sprout, those communications are sent on behalf of the user, and the user is responsible for obtaining appropriate consent from the recipients under the Telephone Consumer Protection Act (TCPA) and applicable carrier regulations.

5. How We Share Information

We do not sell your personal information to third parties for marketing purposes.

We share information only in the following circumstances:

Service providers: with third-party vendors who help us operate the Services (Stripe for payments, SignalWire for voice/SMS, Resend for email, Supabase for database hosting, Vercel for application hosting, Google Workspace for business email, and similar providers). These providers are bound by contractual obligations to protect your data
Legal compliance: when required by law, subpoena, court order, or other legal process, or to protect our rights, property, or safety
Business transfers: in connection with a merger, acquisition, financing, or sale of all or part of our business, in which case personal information would be transferred subject to standard confidentiality protections
With your consent: in any other case where you have given us explicit permission

6. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Services. After account closure, we may retain certain information for legal, accounting, or fraud-prevention purposes for a reasonable period, typically not exceeding seven years.

You may request deletion of your account and associated data by contacting privacy@investorsprout.io. We will respond to verified deletion requests within 30 days, subject to legal retention requirements.

7. Data Security

We use industry-standard technical and organizational measures to protect your information, including encryption in transit (TLS), encryption at rest for sensitive fields, access controls, and regular security reviews.

No security measure is perfect. We cannot guarantee absolute security, but we work continuously to protect your data.

If we become aware of a data breach that affects your personal information, we will notify you and applicable regulators as required by law.

8. Cookies and Tracking

We use cookies and similar technologies to:

Keep you signed in
Remember your preferences
Understand how you use the Services (analytics)
Improve the Services

You can disable cookies through your browser settings, but doing so may limit your ability to use certain features. We respect "Do Not Track" signals where required by law.

9. Your Rights

9.1 All Users

You have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your information (subject to legal retention requirements)
Opt out of marketing communications at any time
Withdraw consent for SMS communications by replying STOP

To exercise these rights, email privacy@investorsprout.io. We will respond within 30 days.

9.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to know: what personal information we collect, the sources, the purposes, and any categories of third parties with whom we share it
Right to delete: request deletion of your personal information, subject to legal exceptions
Right to correct: request correction of inaccurate personal information
Right to opt out of "sale" or "sharing": Investor Sprout does not sell personal information. We do not share personal information for cross-context behavioral advertising
Right to limit use of sensitive personal information: Investor Sprout does not use sensitive personal information beyond what is necessary to provide the Services
Right to non-discrimination: we will not discriminate against you for exercising your privacy rights

To exercise these rights, email privacy@investorsprout.io. We may verify your identity before responding. You may also designate an authorized agent to make requests on your behalf.

9.3 European Economic Area, United Kingdom, and Switzerland Residents (GDPR)

If you are located in the EEA, UK, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) and equivalent laws:

Right of access: confirm whether we process your personal data and obtain a copy
Right to rectification: correct inaccurate personal data
Right to erasure ("right to be forgotten"): delete your personal data, subject to legal exceptions
Right to restrict processing: limit how we use your data
Right to data portability: receive your data in a structured, commonly used format
Right to object: to processing based on legitimate interests, including marketing
Right to withdraw consent: at any time, without affecting the lawfulness of processing before withdrawal

Our legal bases for processing your data are: performance of a contract (providing the Services), legitimate interests (improving the Services, security), legal compliance (tax, regulatory), and consent (marketing communications).

To exercise these rights, email privacy@investorsprout.io. You also have the right to lodge a complaint with your local data protection authority.

International transfers: when we transfer personal data outside the EEA, UK, or Switzerland, we use appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

10. Children's Privacy

The Services are not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, contact privacy@investorsprout.io and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through the Services, and update the "Last Updated" date at the top of this Policy. Continued use of the Services after changes take effect constitutes acceptance of the updated Policy.

12. Contact Us

Investor Sprout LLC 6844 Bardstown Road #2310 Louisville, KY 40291

Email: privacy@investorsprout.io
Website: https://investorsprout.io