SHOP 1031 — PRIVACY POLICY
Last updated June 2026.
SHOP 1031 — PRIVACY POLICY
Effective date: This Policy applies from your first access to the Platform. Operator: Arbor Realty Capital Advisors (“Arbor,” “we,” “us,” “our”), operator of the Shop 1031 platform at shop1031.ai.
This Privacy Policy describes how we collect, use, share, retain, and protect your personal information when you use the Shop 1031 platform (the “Platform”). This Policy is incorporated into the Shop 1031 Terms of Service. Capitalized terms not defined here have the meanings given in the Terms.
1. Scope
This Policy applies to (a) visitors to shop1031.ai and shop1031.com, (b) registered users of the Platform, and (c) recipients of communications from us or persons acting on our behalf, including outreach communications under the “Sloane” identity at sloane@landcompany.ai.
This Policy does not apply to (a) information collected by a Listing Broker, Cooperating Broker, or other third party outside the Platform, or (b) the websites or services of any third party we link to.
2. Summary — What We Do With Your Information
We collect (i) information you give us, including your Buyer Profile (your exchange parameters and acquisition criteria), and (ii) information about how you use the Platform, including extensive activity telemetry. We use this information to (a) operate the Platform, (b) score Properties against your Buyer Profile, (c) coordinate with the Affiliate Buyer Broker Network on Properties you elect to pursue, (d) improve our scoring and matching methodology, and (e) communicate with you. We share information with the service providers we use to operate the Platform and, with your direction, with Cooperating Brokers and Listing Brokers in connection with a specific Property you pursue. We do not sell your personal information.
3. Information We Collect
We collect the following categories of personal information, mapped to the categories defined under the California Consumer Privacy Act / California Privacy Rights Act:
| CCPA / CPRA category | What we collect | Source |
|---|---|---|
| A. Identifiers | Name, email, phone, firm, IP address, device identifiers (including a device fingerprint and a localStorage-stored device id) | You, your device |
| B. Customer records (Cal. Civ. Code § 1798.80(e)) | Account credentials (encrypted), payment method metadata (last 4 digits, card brand, expiration; never raw card data) | You, payment processor |
| C. Protected classifications | Not knowingly collected | — |
| D. Commercial information | Properties you’ve viewed, saved, requested advisor review on; communications history; Buyer Profile inputs (replacement amount, leverage profile, hold horizon, target cap rate, asset class preferences, geography, identification deadline, closing deadline) | You, telemetry |
| E. Biometric information | Not collected | — |
| F. Internet / network activity | Pages viewed, filters applied, sort changes, asset-class toggles, dwell time on Property modals and methodology drawer, scroll depth, click positions in the scored universe grid, session duration, exit-intent events; user-agent, screen, timezone, locale (for device fingerprint) | Your device |
| G. Geolocation | Approximate location derived from IP (city / country only); we do NOT collect precise GPS coordinates | Your device, IP geolocation |
| H. Sensory data (audio / video) | Not collected | — |
| I. Professional / employment-related | Role / title, firm, professional license info (if voluntarily provided) | You |
| J. Education | Not collected | — |
| K. Inferences | Tenant credit tier derivations attached to Properties you view; matching scores tying you to Properties via Dark Shell Scoring; engagement scoring (Intent, Depth, Persistence, Interactivity, Identity); pipeline-stage classifications | Our analytical layer |
We do not knowingly collect “Sensitive Personal Information” as defined under the CPRA. Our Buyer Profile data describes commercial real estate acquisition objectives, not the SPI categories enumerated in the CPRA.
4. AI / Automated Decision-Making — Specific Disclosures
4.1 AI-assisted extraction. We use the Anthropic Claude API (model: claude-sonnet-4-6) to parse Offering Materials submitted by Listing Brokers into structured property data. This extraction is performed on the Offering Materials, not on your personal information. The structured property data is then displayed on the Platform and used to compute Dark Shell Scores.
4.2 Automated scoring. We compute Dark Shell Scores by running deterministic mathematical models over (a) the structured property data and (b) your Buyer Profile inputs. The scoring is described in our published Methodology Whitepaper at shop1031.ai/methodology. Scores are presented as analysis under stated assumptions; they are not automated decisions that produce legal or similarly significant effects on you within the meaning of GDPR Article 22 or analogous state laws.
4.3 Engagement scoring. We score your engagement with the Platform (and, if you interact with a Deckora-hosted pitch deck linked to a Property, that engagement as well) along five dimensions: Intent, Depth, Persistence, Interactivity, and Identity. Engagement scores are used to prioritize advisor follow-up. You may opt out of engagement-score-driven follow-up by contacting us at the address in §15.
4.4 Model training. We may use aggregated and de-identified telemetry to improve our scoring and matching algorithms, including via reinforcement-learning approaches. We do not provide your individually identifiable information to third-party AI providers for the purpose of training their general-purpose models. Specifically, OM-extraction calls to Anthropic Claude are made under Anthropic’s API terms with default “no-training” provisions.
5. How We Use Your Information
We use your personal information to:
(a) operate, maintain, and improve the Platform; (b) authenticate your account and protect against fraud and unauthorized access; (c) construct your Buyer Profile and surface Properties scored against it; (d) coordinate with the Affiliate Buyer Broker Network when you pursue a Property, including initiating templated outreach from the Sloane identity at sloane@landcompany.ai to the Listing Broker on the Property; (e) measure and analyze how the Platform is used so we can improve scoring, matching, and user experience; (f) train Arbor’s analytical models on aggregated and de-identified data; (g) send you transactional and operational communications about your account and the Properties you’re tracking; (h) send you marketing communications about the Platform and related Arbor services, subject to your opt-out choices; (i) comply with law and respond to lawful requests; and (j) enforce our Terms and protect our and others’ legal rights.
6. Cross-Platform Identity — Disclosure Regarding Deckora
You should know: the Platform shares an underlying buyer/investor identity layer with Deckora (deckora.ai), a related seller-side product also operated by Arbor (and partners). Specifically, when you verify your email address on Shop 1031, you become a record in a shared investors registry that recognizes you across Shop 1031 and Deckora-hosted pitch decks. If you also visit a Deckora-hosted deck (typically via a share link sent to you by a listing broker), your engagement on that deck and on Shop 1031 may be stitched into a single identity for purposes of operating both services consistently and coordinating broker follow-up.
This stitching happens server-side via your email address; we do not place cross-site cookies, and the two sites do not share a browser-side analytics identifier. You may request your data on either site be separated from the other by contacting us at the address in §15.
7. Service Providers We Share Your Information With
We rely on the following service providers, each bound by data-processing terms requiring confidentiality and use of your information only for the purposes we direct:
| Provider | Purpose | Information shared |
|---|---|---|
| Cloudflare, Inc. | Hosting (Workers, D1 database, R2 object storage), DNS, edge security | All Platform-side personal information |
| Anthropic, PBC | AI extraction of Offering Materials | Offering Materials only; no Buyer personal information |
| Resend, Inc. | Transactional and outreach email delivery | Your name, email, and message content for emails we send |
| Airtable, Inc. | Operational workspace for our advisor team (deal-state tracking, prospect CRM, activity log, outreach log) | Your contact information, Buyer Profile summary, activity summary, and any specific advisor-review requests you submit |
| Twilio (Sendgrid / Twilio SMS) | SMS notifications (only if you opt in) | Phone number, message content |
| Stripe, Inc. | Payment processing (no current buyer-side fee; reserved for future use) | Payment method metadata |
We may add or change service providers as the Platform evolves. We will update this Policy when we do so.
8. When We Share With Brokers and Other Third Parties
8.1 Affiliate Buyer Broker Network. When you request advisor review on a specific Property or otherwise direct us to engage on a Property, we will share your contact information and the context of your request with the member of the Affiliate Buyer Broker Network who will represent you. Your level of disclosure depends on your preference setting (anonymous, firm-only, or named introduction).
8.2 Listing Brokers. When we route a buyer inquiry to a Listing Broker (via templated email from the Sloane identity, with Matt CC’d), we describe the inquiry in a manner consistent with your disclosure preferences. If you have not opted into named introduction, we do not share your personal name or email with the Listing Broker in this initial outreach.
8.3 Legal and safety. We may share information when we believe in good faith it is necessary to (a) comply with a legal obligation, (b) respond to a lawful request from a government authority, (c) protect the rights, property, or safety of Arbor, our users, or others, (d) detect, investigate, or address fraud or security issues, or (e) defend ourselves in legal proceedings.
8.4 Corporate transactions. If Arbor undergoes a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you and the acquirer will be subject to commitments at least as protective as this Policy.
8.5 Aggregated and de-identified. We may share aggregated or de-identified statistics about Platform usage with Affiliate Brokers, partners, or in published reports. Aggregated and de-identified data does not identify you.
9. Cookies and Similar Technologies
We use cookies, localStorage, and device-fingerprinting techniques to operate the Platform and identify you across sessions. Specifically:
- Authentication cookies keep you signed in.
- Session cookies carry an internal session id during your visit.
- localStorage holds your Buyer Profile (so a returning visitor lands directly in their scored universe) and a per-device id used for engagement stitching.
- Device fingerprint (a hash of user-agent, screen, timezone, and locale) is computed client-side and sent with each engagement event to enable cross-session and cross-device identity stitching.
We do not use third-party advertising cookies. We do not knowingly use cookies for cross-site advertising tracking.
You can disable cookies in your browser, but parts of the Platform will not work without them.
10. How Long We Keep Your Information
| Data | Retention |
|---|---|
| Account information | While your account is active; up to seven (7) years thereafter for legal, audit, and compliance reasons, then deleted or de-identified |
| Buyer Profile | While your account is active; deleted upon account closure unless retention is required by law or for legitimate dispute defense |
| Telemetry / engagement events | Twenty-four (24) months in identified form; thereafter aggregated and de-identified |
| Communications (email, SMS) | Three (3) years from the date of the communication, or longer if required by law |
| Transaction records | Seven (7) years from the close of the transaction (real estate regulatory retention norm) |
| Payment metadata | While the payment method is active; up to two (2) years after deactivation |
| Audit logs and security records | Two (2) years |
We may retain information longer where required by law or for the establishment, exercise, or defense of legal claims.
11. Children
The Platform is not directed to and not knowingly used by individuals under 18. We do not knowingly collect information from anyone under 18. If you believe we have inadvertently collected information from a minor, contact us at the address in §15 so we can delete it.
12. Your Rights — California Residents
If you are a California resident, you have the following rights under the CCPA / CPRA:
- Right to know — request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the business purposes, and the categories of third parties with whom we have shared it.
- Right to delete — request deletion of personal information we have about you, subject to legal exceptions.
- Right to correct — request correction of inaccurate personal information.
- Right to opt out of sale or sharing — we do not sell or “share” (in the cross-context behavioral advertising sense) personal information; nonetheless, you may submit an opt-out request and we will honor it.
- Right to limit use of Sensitive Personal Information — we do not knowingly collect SPI; if we determine we have, you may request limitation.
- Right to non-discrimination — we will not discriminate against you for exercising these rights.
To exercise any of these rights, contact us at the address in §15. We will verify your identity (typically through email confirmation tied to your account) before processing your request and will respond within the statutory timeframes (currently 45 days, extendable once for an additional 45 days with notice).
You may also designate an authorized agent to make a request on your behalf, subject to verification requirements.
13. Your Rights — Residents of Other States
If you reside in another U.S. state with a comprehensive privacy law (e.g., Virginia, Colorado, Connecticut, Utah, Texas, Oregon), you may have analogous rights including access, deletion, correction, and opt-out of certain processing. Contact us at the address in §15 to exercise applicable rights.
14. Security
We take reasonable administrative, technical, and physical measures to protect your personal information, including:
- Encryption in transit (TLS) for all Platform traffic;
- Encryption at rest for sensitive data, including envelope encryption of buyer-uploaded files (if any);
- PBKDF2-hashed passwords with per-user salt;
- Database-backed session model with revocation capability;
- Login activity logging and brute-force rate limiting;
- Least-privilege access controls for our personnel;
- Regular review of our service-provider data-handling practices.
No system is impenetrable. If we become aware of a security incident materially affecting your information, we will notify you in accordance with applicable law.
15. Contact Us
Privacy questions, data-rights requests, and complaints should be directed to:
Arbor Realty Capital Advisors Attn: Privacy Pasadena, California Contact: via the channel published at the1031experts.com
16. Updates to This Policy
We may update this Policy from time to time. If we make material changes, we will notify you by posting a notice on the Platform and, where appropriate, by email at least fourteen (14) days before the change takes effect. Your continued use of the Platform after the effective date constitutes acceptance.
End of Privacy Policy.