keepup

PRIVACY POLICY

Effective Date: October 14, 2025


1. INTRODUCTION

KeepUp ("KeepUp," "we," "us," or "our") is operated by Dabudage LLC ("Company"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use our websites, apps, tools, and services, including the Investor Hub, AI features, email or Telegram digests, and any site at joinkeepup.com (collectively, the "Service").

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.


2. WHO THIS POLICY COVERS AND SCOPE

This policy applies to:

  • Visitors and registered users in the United States who use KeepUp, including homebuyers, investors, agents who create accounts, and other professionals using our tools.

  • The Service, including our website, dashboards, AI property analysis tools, Investor Hub, email and Telegram digests, and other features we provide.

This policy does not apply to third-party websites, services, or partners we do not control, including independent real estate professionals and their firms. Their privacy practices are governed by their own policies.


3. MINIMUM AGE

The Service is intended for individuals 18 years or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided personal information to us, contact support@joinkeepup.com and we will delete it.


4. INFORMATION WE COLLECT

a) Information You Provide

  • Identifiers and contact: name, email, phone number, mailing address, profile photo

  • Account and authentication: username, hashed password, user IDs

  • Property, documents, and content you upload: purchase/investment criteria, property addresses/notes, offers, due diligence materials, images, PDFs, pro formas, cash-flow assumptions, saved search parameters, tags, and comments you add

  • Investor Hub preferences: investment profile, budget ranges, geographies, strategies, alert cadence (email/Telegram), and filters such as cap rate, ARV range, cash-on-cash targets

  • Communications: messages you send to us; feedback and survey responses

  • Payment/subscription: billing contact details; payments are processed by Stripe (we do not store full card numbers)

  • Third-party messaging handles: e.g., Telegram username or chat ID if you opt in to digests via Telegram

Important: Please do not upload sensitive personal information (e.g., Social Security numbers, bank account or full payment card numbers, government IDs, medical information). If you choose to upload sensitive personal information, you do so at your own discretion and it will be processed in accordance with this policy.

b) Information Collected Automatically

  • Usage and diagnostics: IP address, device identifiers, browser type, OS, language, referring/exit pages, timestamps, feature usage, crash and performance data

  • Cookies, pixels, and similar technologies: used for authentication, security, preferences, and analytics. See Section 9 (Cookies and Tracking) for details

  • Approximate location: derived from IP address to personalize content or comply with regional rights

c) Information from Third Parties

  • Service providers and partners: analytics, hosting, payment processing, error monitoring, communication tools, and AI vendors as listed in Section 7

  • Real estate data sources: public records and third-party property data providers (e.g., property attributes, neighborhood stats, historical sales), subject to their terms and laws

  • Referrals and introductions: information we receive from partner real estate professionals if you are introduced to them or interact with them through the Service


5. HOW WE USE INFORMATION

We use information to:

  • Provide, operate, and improve the Service: account creation, authentication, property dashboards, investor monitoring and alerts, AI-assisted insights, document tools, notifications and digests (email/Telegram)

  • Personalize features: saved preferences, investment profiles, content recommendations and alert criteria

  • Communicate with you: account notices, service updates, security alerts, and—if you opt in—marketing/newsletters and investor digests. You can unsubscribe at any time

  • Security, fraud, and abuse prevention: detect, investigate, and mitigate security incidents and misuse

  • Compliance and legal: enforce our Terms, comply with law, respond to legal requests, and protect rights, privacy, safety, and property

  • Analytics and product development: measure usage, debug, and improve performance and features using de-identified or aggregated data where feasible

  • Prospective introductions to professionals (with your direction/consent): if you ask us to connect you with a real estate professional, we may share the minimum necessary information to facilitate that introduction

Use of AI Features

  • We process your inputs, prompts, and documents to generate outputs for you (e.g., AI property analyses, summaries). We may store prompts, outputs, and related metadata to provide, secure, and improve the Service

  • We configure our AI vendors (e.g., OpenAI, Anthropic) to not use your data to train their models, to the extent such controls are available, and we do not use your personal information to train our own foundation models

  • Outputs may be stored for your account history and may be used in de-identified form to improve quality, safety, and reliability

  • AI outputs are generated content and may be inaccurate or incomplete. Do not rely on AI outputs as a sole source of truth


While we primarily serve U.S. users, if applicable law requires, we process personal information on bases such as consent, contract performance, legitimate interests (e.g., security, analytics, service improvement), and legal obligations.


7. HOW WE SHARE INFORMATION

We disclose personal information to:

Service Providers (Processors)

Acting on our behalf, bound by contractual confidentiality and security obligations:

  • Hosting and infrastructure: Vercel; Supabase (managed databases with row-level security); Upstash (caching)

  • Payments: Stripe (we do not store full payment card details)

  • Error monitoring: Sentry

  • Analytics: PostHog (posthog.com) and OpenPanel (openpanel.dev)

  • Communications: email, in-app, and Telegram integrations for alerts and digests

  • AI vendors: OpenAI and Anthropic for AI features. We configure them to not use customer data for model training where controls are available

Upon your request or clear opt-in, we may share limited contact details, preferences, and property/investment criteria with partner real estate licensees and related professionals (e.g., agents, brokers, lenders, inspectors, property managers) to facilitate an introduction or requested services. These partners are independent businesses with their own privacy policies. We may receive referral or marketing fees where permitted by law. In some jurisdictions this sharing could be considered a "sale" or "sharing" under state privacy laws; see Section 12 and Annex A for your choices.

Corporate Transactions

In connection with a merger, acquisition, reorganization, or asset sale, subject to standard confidentiality protections.

To comply with laws, lawful requests, and to protect rights, safety, and property, including enforcing our Terms.

Aggregated/De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you.

Important: We do not sell your personal information for money. We do not currently "share" personal information for cross-context behavioral advertising. If that changes, we will update this policy and honor applicable opt-out rights.


8. YOUR CHOICES

  • Account settings: update profile, preferences, alerts, and communication options in your account

  • Marketing emails and digests: unsubscribe via the link in the email or contact support@joinkeepup.com. You may continue to receive transactional messages about your account

  • Telegram digests: you can remove or stop the integration via your Telegram settings or through your KeepUp account preferences

  • Cookies and tracking: manage browser settings and cookie preferences (see Section 9)

  • AI features: choose what to upload or input; you can delete uploaded documents from your account subject to retention in backups for a limited period


9. COOKIES AND TRACKING

We Use:

  • Essential cookies: authentication, security, user preferences, session management

  • Analytics cookies and scripts: to understand usage and improve the Service (e.g., PostHog, OpenPanel)

  • Similar technologies: pixels, local storage, and beacons for performance and anti-fraud

Controls:

  • Browser settings: you can decline or delete cookies; the Service may not function properly without essential cookies

  • Global Privacy Control (GPC) and universal opt-out mechanisms: we honor legally recognized browser-based opt-out signals for "sale," "sharing," and targeted advertising where required by law (e.g., California, Colorado). Because we do not currently sell or share personal information for cross-context behavioral advertising, GPC signals will be recorded for future preference enforcement


10. DATA RETENTION

We retain personal information as follows:

  • Account profile and preferences: for the life of the account, then deleted or de-identified within 24 months unless retained longer as required by law or for security, fraud, or audit purposes

  • Documents and uploaded content: until you delete them or your account is closed; after closure, we endeavor to delete or de-identify within 24 months, subject to legal holds and backups

  • Payment and transaction records: as required by law and tax/accounting standards (generally up to 7 years)

  • Logs, analytics, and telemetry: typically up to 12–24 months

We may retain de-identified or aggregated data indefinitely.


11. DATA SECURITY

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, least-privilege access, and row-level security on managed databases. No security program is perfect; we cannot guarantee absolute security. If we learn of a breach affecting your personal information, we will notify you and regulators as required by law.


12. YOUR PRIVACY RIGHTS (U.S. STATE Laws)

Depending on where you live (e.g., CA, CO, CT, VA, UT, TX), you may have rights to:

  • Access/know: request a copy of the personal information we maintain about you

  • Correction: request we correct inaccuracies

  • Deletion: request we delete personal information, subject to legal exceptions

  • Portability: request a portable copy of certain information

  • Opt-out: of sale of personal information, sharing for cross-context behavioral advertising, or targeted advertising, and certain profiling decisions

  • Limit use/disclosure of sensitive personal information (if collected)

  • Non-discrimination: you will not be discriminated against for exercising your rights

  • Appeal: appeal our denial of your privacy request (CO/VA/CT/TX and others)

How to Exercise Your Rights:

Verification may be required. We will respond within the timelines required by applicable law (typically 45 days). If we deny your request, you may appeal by replying to our decision email with "Privacy Request Appeal."

If you are a California resident, see Annex A for additional rights and disclosures. Nevada residents may opt out of "sale" under Nevada law by emailing support@joinkeepup.com.

Do Not Sell or Share

We do not currently sell personal information for money or share it for cross-context behavioral advertising. If we begin sharing personal information with partner real estate agents for marketing or referral purposes in a way that constitutes a "sale" or "sharing" under state law, we will provide a "Do Not Sell or Share My Personal Information" link and honor your choices, including GPC.


13. PARTNER REAL ESTATE PROFESSIONALS

  • With your direction or consent, we may share your contact information and property/investment preferences to facilitate introductions to partner real estate professionals

  • We may receive compensation for referrals where permitted by law. We will disclose the nature of such arrangements upon request

  • These partners are independent controllers of your data. Their collection and use of your data is governed by their privacy policies

  • You may withdraw consent or opt out of such disclosures at any time by contacting support@joinkeepup.com. If applicable law treats such disclosures as a "sale" or "sharing," we will honor your opt-out rights


14. INTERNATIONAL USERS

KeepUp principally targets users in the United States. If you access the Service from outside the U.S., you understand your information may be transferred to, stored, and processed in the U.S. and other countries that may have different data protection laws than your country.


15. TEXT MESSAGES AND CALLS

If you provide a mobile number and expressly consent to receive texts or calls, you agree that we (or our service providers) may contact you at that number for service-related and, if you opt in, marketing messages. Message/data rates may apply. You can opt out at any time by replying STOP; for help, reply HELP or contact support@joinkeepup.com.


16. DO NOT TRACK AND GLOBAL PRIVACY CONTROL

  • Do Not Track: we do not respond to DNT signals

  • Global Privacy Control/universal opt-out: we honor recognized signals for "sale," "sharing," and targeted advertising where required by law


17. CHANGES TO THIS PRIVACY POLICY

We may update this policy from time to time. We will post the updated policy with a new Effective Date and, for material changes, we will provide additional notice (e.g., email or in-product). Your continued use of the Service after changes take effect constitutes acceptance.


18. CONTACT US

Email: support@joinkeepup.com Address: Dabudage LLC, 247 West Broadway, New York, NY 10013 Phone: (347) 674-2273


19. DATA CONTROLLER

Dabudage LLC is the data controller for the personal information processed under this policy.


20. PAYMENT PROCESSING

Payments are processed by Stripe. We do not store full payment card information. Stripe's processing is governed by its own privacy policy and PCI-DSS standards.


21. DATA SOURCES AND YOUR RESPONSIBILITIES

We may receive personal information from you, your devices, our service providers, public records, and authorized partners. Do not upload personal information about others unless you have their permission or another lawful basis.


22. DATA BREACH NOTIFICATION

If your personal information is involved in a data breach, we will notify you and applicable authorities as required by law.


23. AI AND DOCUMENT HANDLING

  • Uploaded documents and content are stored to provide you with AI and document features

  • We treat uploaded documents as confidential and only share them with service providers necessary to provide the Service or as required by law

  • We do not use your personal information to train foundation models. We configure our AI vendors to not use your data for training where such controls are available

  • You may delete uploaded documents from your account subject to reasonable backup/archival retention


24. STATE-SPECIFIC RIGHTS AND DISCLOSURES FOR CALIFORNIA RESIDENTS

See Annex A below for additional disclosures required under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).


ANNEX A – CALIFORNIA PRIVACY NOTICE (CCPA/CPRA)

This Annex supplements the Privacy Policy for California residents under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

A1. Categories of Personal Information We Collect

  • Identifiers: name, email, phone, IP address, account IDs

  • Customer records information: contact and billing details; limited payment metadata (via Stripe)

  • Commercial information: subscription tier, transaction history, products/services considered

  • Internet or network activity: device, browser, session, and usage analytics

  • Geolocation data: approximate location from IP

  • Professional information (if you provide it): investor profile, real estate professional details

  • Inferences: limited user preference inferences based on your settings and activity; we do not create sensitive inferences about you

A2. Sources

We collect personal information from:

  • You directly (account registration, uploads, preferences)

  • Your devices/browsers (automatically collected usage data)

  • Our service providers (analytics, hosting, payment processors)

  • Public records and third-party data sources

  • Partner real estate professionals (with your consent or direction)

A3. Purposes

We use personal information for the purposes described in Section 5 of the Privacy Policy, including:

  • Service delivery and personalization

  • Security and fraud prevention

  • Analytics and product improvement

  • Compliance and legal obligations

  • Communications (transactional and marketing with opt-in)

A4. Disclosure of Personal Information

We disclose the categories listed above to service providers for business purposes as described in Section 7. We may, with your direction/consent, disclose limited information to partner real estate professionals to facilitate requested introductions (see Section 13).

A5. Sale/Sharing

  • We do not sell personal information for money

  • We do not currently share personal information for cross-context behavioral advertising

  • If we begin selling or sharing personal information (e.g., with partner agents for marketing/referrals in a manner that meets the CPRA definition), we will provide a "Do Not Sell or Share My Personal Information" link and honor opt-out signals including GPC

  • We do not knowingly sell or share the personal information of consumers under 16

A6. Sensitive Personal Information

We do not seek to collect sensitive personal information. If you provide it, we limit use to the permitted purposes under CPRA (e.g., providing the Service, security, short-term transient use) and do not use it to infer characteristics.

A7. Retention

We retain information as described in Section 10 of the Privacy Policy.

A8. California Privacy Rights

You have the right to:

  • Right to know/access: categories and specific pieces of personal information collected

  • Right to delete: subject to legal exceptions

  • Right to correct inaccurate information

  • Right to opt out of sale/sharing and to limit use/disclosure of sensitive personal information (if applicable)

  • Right to non-discrimination for exercising rights

How to Exercise Your Rights:

We will verify your request and respond within 45 days (extendable once by 45 days where permitted). Authorized agents may submit requests with appropriate authorization.

A9. Financial Incentives

We currently do not offer programs that provide financial incentives in exchange for personal information. If we do in the future, we will provide a required notice describing the material terms and how to opt in or withdraw.


ANNEX B – SERVICE PROVIDERS

Illustrative list, subject to change

  • Hosting/Infrastructure: Vercel; Supabase; Upstash

  • Payments: Stripe

  • Error Monitoring: Sentry

  • Analytics: PostHog; OpenPanel

  • AI Vendors: OpenAI; Anthropic

  • Communications: Email and Telegram integrations

We may update service providers from time to time and will require them to process personal information under appropriate contractual safeguards.


SUMMARY OF KEY POINTS

  • We collect account, usage, and property-related information to provide and improve KeepUp

  • We do not use your personal information to train foundation AI models, and we configure AI vendors to disable training on our data where possible

  • We do not sell your personal information for money or share it for cross-context behavioral advertising. If that changes, we will provide opt-out mechanisms and honor GPC

  • With your direction/consent, we may introduce you to partner real estate professionals and share limited information to facilitate that introduction. You can opt out at any time

  • You have rights to access, correct, delete, and opt out (as applicable by state). Contact support@joinkeepup.com


BY USING KEEPUP, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY.