Privacy Policy

1. Introduction

ClickDrag Finance ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the ClickDrag Finance Cost Segregation Platform ("Service").

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, and company/firm name
• Property Information: Property address, purchase price, property type, building specifications, and construction details
• Documents: Construction invoices, AIA documents, job cards, blueprints, site photos, and other property-related files you upload
• Payment Information: Processed securely through our payment processor (Stripe). We do not store your full credit card number.
• Communications: Messages sent through our chat feature, contact forms, or email correspondence

2.2 Information Collected Automatically

The following data is collected on every page load, even if you do not fill out any form or create an account:

• Pages visited — URLs and timestamps of pages you view
• Referring URL — the webpage you visited before arriving at our site
• Marketing parameters — UTM source, medium, campaign, term, and content values appended to URLs
• Device & browser — browser type, operating system, and device category (desktop / mobile / tablet) derived from your User-Agent string
• Approximate geolocation — country, region, and city derived from your IP address by our hosting provider (Vercel). We store only a one-way cryptographic hash of your IP address; the original IP is never retained.
• Session identifier — a randomly generated UUID stored in your browser (cookie and/or localStorage) that associates page views within a visit and across return visits (with your consent).

3. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve the Service
• Process and generate cost segregation studies for your properties
• Process payments and send transaction-related communications
• Send you updates about your report processing status
• Respond to your inquiries and provide customer support
• Improve our AI analysis accuracy and service quality
• Comply with legal obligations and enforce our Terms of Use
• Detect, prevent, and address technical issues or fraudulent activity

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

• Service Providers: Third-party services that help us operate the Service (cloud hosting, payment processing, email delivery, AI/ML providers for document analysis)
• Professional Reviewers: Qualified professionals or CPAs who may review your study for quality assurance
• Legal Requirements: When required by law, subpoena, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure cloud infrastructure with access controls
• Regular security assessments and monitoring
• Role-based access control for internal staff
• Secure document storage with automatic expiration policies

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

6.1 Standard Retention Period

All uploaded source documents — AIA pay applications, invoices, blueprints, site photographs, and other files you upload for processing — and all generated deliverables — cost segregation study PDFs and Excel workbooks — are retained for seven (7) years from the date of upload or generation. After seven years, files are permanently and automatically deleted from our cloud storage and database. This period mirrors the general IRS audit limitation window under IRC §6501(a).

6.2 Advance Notice of Scheduled Deletion

When any document in your account is within 90 days of its scheduled deletion date, we will send an email notification to the account administrator. This notice is sent automatically on the 1st of each month for any qualifying documents. It is for your awareness only — no action is required to proceed with deletion. You may download any document before its deletion date via your account dashboard.

6.3 Early Deletion (User Request)

You may request early deletion of your uploaded source documents at any time through your account Settings page (Data & Privacy tab). Upon submission, a 24-hour grace period applies during which you may cancel the request. After 24 hours, source documents are permanently deleted.

Exception — generated study reports: Cost segregation study PDFs and Excel deliverables are retained for the full seven-year period regardless of early deletion requests. These documents may be necessary for IRS audit defense and cannot be deleted early. By submitting an early deletion request, you acknowledge and accept this limitation.

6.4 Account Deletion

If you close your account, your profile and contact information are deleted immediately. Your uploaded source documents and generated study reports follow the retention schedule in §6.1 and §6.3 above — they are not deleted solely because your account is closed.

6.5 Data Summary

7. Your Rights

Depending on your jurisdiction, you may have the following rights. To exercise any of them, use the Data & Privacy tab in your account Settings or contact us at privacy@clickdragfinance.com. We will respond within 30 days.

• Access: Request a copy of the personal data we hold about you, including your profile, uploaded documents list, and generated reports.
• Correction: Request correction of inaccurate personal data (name, email, contact information) through the Profile tab in Settings or by contacting us.
• Deletion: Request deletion of your uploaded source documents through the Data & Privacy tab in Settings, or request full account deletion. Generated study reports are subject to the 7-year IRS retention requirement and cannot be deleted early.
• Portability: Request a structured export of your data (property information, report metadata, and uploaded document list). Contact privacy@clickdragfinance.com for a data export.
• Objection / Opt-out: Opt out of non-essential communications at any time via the Notifications tab in Settings or by emailing us.
• Withdraw consent: If you provided optional consent (e.g., analytics cookies), you may withdraw it at any time by declining on the cookie banner or clearing your browser cookies.

8. Cookies

We use the following first-party cookies. We do not use third-party advertising cookies.

You can withdraw consent at any time by clicking “Decline” on the cookie banner or by clearing your browser cookies. You can also configure your browser to refuse cookies, but some features (login, document upload) require session cookies to function.

9. Third-Party Services

The Service integrates with third-party services for document processing, AI analysis, payment processing, and email delivery. These services have their own privacy policies, and we encourage you to review them. Key third-party services include:

• Supabase (database and authentication)
• Stripe (payment processing)
• Resend (email delivery)
• Vercel (hosting)

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service with a revised effective date. Your continued use of the Service after such changes constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: