Skip to content

Beta privacy policy

Privacy Policy

What Stilwell Deal Hub collects, why, who helps us run it, and what you can ask us to do.

Last updated September 26, 2026

A beta draft, in plain words

This describes how the invitation-only beta works today. Our attorney will review it before paid plans start, and we will post the new version here with a new date.

1. The short version

  • We collect what the service needs to work: your account, what you put into your workspace, and a few technical records to keep it secure.
  • We don't sell personal information, and we don't use advertising or tracking cookies.
  • Each workspace is walled off from every other one inside the database, not just hidden on screen.
  • Photos have their hidden data — including the GPS location — removed when they are uploaded.
  • Nothing in the service sends messages to homeowners or buyers by itself.

2. What we collect

Your account. Your name, email address, an optional phone number, your password (stored only as a one-way hash, never readable), your two-step sign-in settings if you turn them on, and which workspaces and roles you have.

Sign-in records. For each signed-in session we keep the time, the IP address and the browser it came from, so you and we can spot sign-ins that aren't yours.

Requests for access. If you ask to join the beta: your name, email, company, how you work and anything you write to us.

What subscribers put into a workspace. Lead lists they upload (which can include homeowners' names, addresses, phone numbers, emails, property details and foreclosure status), deals and the numbers behind them, notes, tasks, call logs, goals, documents and photos.

Photos. When a photo is uploaded it is re-saved as a new image with all of its hidden data removed — including the GPS location, the camera details and the original file name.

Seller pages. When a subscriber invites a homeowner: the homeowner's name and email, the offer shown to them, their checklist progress, files they upload, and — when they sign — the typed name, the time, the IP address and the browser.

Buyer portal. When a buyer is invited: their name, company, email and phone, what they want to buy, their proof of funds (the amount, its expiry date and any file they upload), when they signed the non-circumvent, the deals sent to them and the scenarios they save.

Read-only deal links. How many times a link was opened and when — not who opened it.

Records of important actions. An activity log of sensitive actions (for example, who changed a plan, invited someone or published a link). It records which account did what and when, using internal IDs rather than names or lead details.

3. How we use it

  • to run the service: sign you in, show you and your team your work, and do the calculations;
  • to keep it secure: limit sign-in attempts, spot misuse, and investigate problems;
  • to support you when you ask, and to tell you about changes to the service or these policies;
  • to set up and manage your plan during the beta.

4. Who can see what

Inside a workspace, the owner decides who is on the team. Members see the workspace's leads and deals; an assistant sees only the leads and deals assigned to them.

Buyers only see the deals sent to them — through a read-only link or the buyer portal — and never the street address, the owner's name or other details that identify the property until the address is released to them. Homeowners only see their own seller page.

Our staff see account and plan details, counts of each workspace's leads and deals, and account messages waiting to be sent — not the leads and deals themselves. We look inside a workspace only when you ask us to help, when you choose to send a deal to Stilwell Investments, or when the law requires it.

5. Companies that help us run it

We don't sell or rent personal information. A few companies process it on our behalf, only to run the service:

  • Vercel — hosts the website and the app, and stores uploaded files (photos and documents) in private storage.
  • Neon — hosts the database.
  • Stripe — will handle payments once paid plans start. It isn't connected yet, and we don't hold card details.
  • An email provider — will deliver account emails once one is connected. Until then nothing is emailed automatically: an invitation link is shown to the person sending the invitation, and other account messages wait for us to review.

We will list any new company here before it starts handling your information.

6. Cookies and your browser

We use only what the service needs:

  • a sign-in cookie that keeps you signed in (and, with two-step sign-in, a short-lived one during the code step);
  • a cookie that remembers which workspace you last opened;
  • your light or dark appearance choice, saved in your own browser.

No advertising cookies, no third-party trackers, and no analytics inside the app.

7. How long we keep it

We keep your information while your account is open. The app archives rather than erases: when you remove a lead, a deal or a photo, it is hidden and kept, so a mistake can be undone.

When a workspace closes it stays read-only so its owner can download what's in it. How long closed workspaces, sign-in records and the activity log are kept afterwards will be set before paid plans start and written here. Until then, you can ask us to remove your information at any time.

8. Your choices

Write to isaiah@investstilwell.com to ask for a copy of your information, to correct it, or to have it removed. We'll confirm it's really you, tell you what we can do and what we have to keep (for example, a signed document the other party relies on), and do it by hand.

If you are a homeowner and a subscriber contacted you using the service, that subscriber is the business that has your information. You can ask them directly; you can also write to us and we'll help you reach them.

9. Keeping it safe

Everything travels over encrypted connections. Each workspace is locked to its own team inside the database, uploads are checked by their contents before they are kept (and photos re-saved without their hidden data), read-only links use long random keys, and our staff accounts use two-step sign-in. No system is perfect; if something goes wrong that affects your information, we will tell you.

10. Children

The service is for adults doing business. It isn't meant for anyone under 18, and we don't knowingly collect their information.

11. Changes to this policy

This is a beta policy and it will change — at the latest before paid plans start. We'll post each new version here with a new date and tell account holders about important changes. The Terms of Service explain the rest of how the beta works.

12. Contact

Stilwell Investments · isaiah@investstilwell.com

Beta terms · last updated September 26, 2026