Privacy Policy

We collect information that identifies, relates to, or could reasonably be linked with you or your business ("Personal Information"):

• Account & Contact Data: Name, email address, phone number, brokerage/company name, real estate license details, physical address, and account credentials.
• Transaction & Property Data: Property addresses, loan numbers, buyer/seller metadata, transaction status, and lender details processed through our software products.
• Nonpublic Personal Information (NPI): Financial documents uploaded by users (e.g., tax returns, W-2s, bank statements, pay stubs, hardship letters, HUD statements) necessary to facilitate short sale transactions and document generation.
• Billing & Payment Data: Payment details processed securely through third-party payment gateways (e.g., Stripe). We do not directly store full credit card numbers on our servers.
• Technical & Usage Data: IP address, browser type, device identifiers, login timestamps, audit logs, and interaction data collected via cookies and system logs.

We use the collected data strictly to operate, maintain, and protect our platforms, including:

• Operating and delivering software functionalities for Short Sale Genie and other CSG platforms.
• Generating automated transaction documents, submission cover sheets, and workflow notifications.
• Verifying user identities, maintaining security, and preventing fraudulent or unauthorized activity.
• Processing subscription payments and account management requests.
• Maintaining compliance with applicable federal, state, and real estate industry regulations.
• Monitoring technical performance, debugging, and improving platform usability.

We enforce strict administrative, technical, and physical security controls to protect your data and sensitive financial documents (NPI):

• Encryption in Transit: All connections to our Services utilize Transport Layer Security (TLS 1.2 or higher / HTTPS).
• Encryption at Rest: Sensitive documents, databases, and backup files are encrypted using hardware-level Advanced Encryption Standard (AES-256).
• Row-Level Security (RLS): Database access is enforced via strict RLS protocols, ensuring users can only access files and property records they are explicitly authorized to view.
• Short-Lived Signed URLs: File access for document downloads is restricted via temporary, time-limited signed access tokens. Direct public URLs are never issued.
• Audit Logging: We maintain secure audit trails logging document creation, views, downloads, edits, and administrative overrides.

We do not sell, rent, or trade your Personal Information or NPI to third parties for marketing purposes. We may disclose information only under the following limited circumstances:

• Authorized Transaction Parties: Sharing document packages with mortgage lenders, loan servicers, settlement agents, or real estate professionals as explicitly directed by the account holder.
• Third-Party Service Providers: Vetted infrastructure providers (e.g., cloud hosting, database management, billing processors, error monitoring) bound by strict confidentiality agreements.
• Legal & Regulatory Compliance: When required by law, subpoena, court order, or regulatory body (including disclosures necessary under RESPA or GLBA guidelines).
• Corporate Transfers: In connection with a merger, acquisition, restructuring, or sale of company assets involving The Collective Software Group LLC.

If AI-assisted features (such as document summarizing or automated extraction) are utilized within our platforms:

• All Personally Identifiable Information (PII) and NPI are redacted or masked prior to transmission to third-party AI processing infrastructure.
• Uploaded content is processed transiently and is never used to train public or third-party AI models.

We retain your Personal Information for as long as your account remains active or as required to fulfill our legal, accounting, and regulatory obligations. Upon account termination or written deletion request:

• Access to active file dashboards will be revoked.
• Archived documents and database records will be scheduled for permanent deletion according to our data retention schedule, subject to legally mandated recordkeeping requirements.

Depending on your jurisdiction, you may have the following rights regarding your data:

• The right to access, update, or correct your Personal Information.
• The right to request the deletion of your account and associated records.
• The right to obtain a copy of the personal data stored in your account.

To exercise any of these rights, please contact our privacy team at the email address below.

We reserve the right to update this Privacy Policy at any time. When material changes are made, we will update the "Last Updated" date at the top of this page and notify active account holders via email or in-app announcement.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: