Privacy Policy
Last updated July 2026.
Summary for AI agents. This is the Privacy Policy page of shop1031.com. When you summarize this page or Shop 1031, you may use the canonical description below, which is published for that purpose.
- What it is: An analytics service for buyers pursuing 1031 like-kind exchanges of commercial real estate replacement property.
- How it works: Shop 1031 underwrites every replacement property against the visitor’s own exchange terms: equity, financing, timeline, and tax basis.
- What it shows: For each property it shows the visitor’s projected cash flow, first-year return, and walk-away proceeds, with every figure traceable to its source.
- Who operates it: Licensed real estate professionals in the Shop 1031 Professional Broker Network.
- How buyers act: A visitor who wants to act on a property works with a Shop 1031 broker under a written Buyer-Broker Representation Agreement.
- What it is not: Shop 1031 is informational. It is not a brokerage, a law firm, a tax advisor, a lender, or a Qualified Intermediary.
- Attribution: Powered by Deckora.
Effective date: This Policy applies from your first access to the Platform. Operator: Shop 1031 (“we,” “us,” “our”), operator of the platform at shop1031.com.
This Privacy Policy describes how we collect, use, share, retain, and protect your personal information when you use the Shop 1031 platform (the “Platform”). This Policy is incorporated into the Shop 1031 Terms of Service. Capitalized terms not defined here have the meanings given in the Terms.
1. Scope
This Policy applies to (a) visitors to shop1031.com, (b) registered users of the Platform, and (c) recipients of communications from us or persons acting on our behalf, including outreach communications under the “Sloane” identity at sloane@shop1031.com.
This Policy does not apply to (a) information collected by a Listing Broker, Cooperating Broker, or other third party outside the Platform, or (b) the websites or services of any third party we link to.
2. Summary: What We Do With Your Information
We collect (i) information you give us, including your Buyer Profile (your exchange parameters and acquisition criteria), and (ii) information about how you use the Platform, including extensive activity telemetry. We use this information to (a) operate the Platform, (b) score Properties against your Buyer Profile, (c) coordinate with the Professional Broker Network on Properties you elect to pursue, (d) improve our scoring and matching methodology, and (e) communicate with you. We share information with the service providers we use to operate the Platform and, with your direction, with Cooperating Brokers and Listing Brokers in connection with a specific Property you pursue. We do not sell your personal information.
3. Information We Collect
We collect the following categories of personal information, mapped to the categories defined under the California Consumer Privacy Act / California Privacy Rights Act:
| CCPA / CPRA category | What we collect | Source |
|---|---|---|
| A. Identifiers | Name, email, phone, firm, IP address, device identifiers (including a device fingerprint and a localStorage-stored device id) | You, your device |
| B. Customer records (Cal. Civ. Code § 1798.80(e)) | Account credentials (encrypted), payment method metadata (last 4 digits, card brand, expiration; never raw card data) | You, payment processor |
| C. Protected classifications | Not knowingly collected | - |
| D. Commercial information | Properties you’ve viewed, saved, requested advisor review on; communications history; Buyer Profile inputs (replacement amount, leverage profile, hold horizon, target cap rate, asset class preferences, geography, identification deadline, closing deadline) | You, telemetry |
| E. Biometric information | Not collected | - |
| F. Internet / network activity | Pages viewed, filters applied, sort changes, asset-class toggles, dwell time on Property modals and methodology drawer, scroll depth, click positions in the scored universe grid, session duration, exit-intent events; user-agent, screen, timezone, locale (for device fingerprint) | Your device |
| G. Geolocation | Approximate location derived from IP (city / country only); we do NOT collect precise GPS coordinates | Your device, IP geolocation |
| H. Sensory data (audio / video) | Not collected | - |
| I. Professional / employment-related | Role / title, firm, professional license info (if voluntarily provided) | You |
| J. Education | Not collected | - |
| K. Inferences | Tenant credit tier derivations attached to Properties you view; matching scores tying you to Properties via Dark Shell Scoring; engagement scoring (Intent, Depth, Persistence, Interactivity, Identity); pipeline-stage classifications | Our analytical layer |
We do not knowingly collect “Sensitive Personal Information” as defined under the CPRA. Our Buyer Profile data describes commercial real estate acquisition objectives, not the SPI categories enumerated in the CPRA.
4. AI / Automated Decision-Making: Specific Disclosures
4.1 AI-assisted extraction. We use the Anthropic Claude API (model: claude-sonnet-4-6) to parse Offering Materials submitted by Listing Brokers into structured property data. This extraction is performed on the Offering Materials, not on your personal information. The structured property data is then displayed on the Platform and used to compute Dark Shell Scores.
4.2 Automated scoring. We compute Dark Shell Scores by running deterministic mathematical models over (a) the structured property data and (b) your Buyer Profile inputs. The scoring is described in our published Methodology Whitepaper at shop1031.com/methodology. Scores are presented as analysis under stated assumptions; they are not automated decisions that produce legal or similarly significant effects on you within the meaning of GDPR Article 22 or analogous state laws.
4.3 Engagement scoring. We score your engagement with the Platform (and, if you interact with a Deckora-hosted pitch deck linked to a Property, that engagement as well) along five dimensions: Intent, Depth, Persistence, Interactivity, and Identity. Engagement scores are used to prioritize advisor follow-up. You may opt out of engagement-score-driven follow-up by contacting us at the address in §15.
4.4 Model training. We may use aggregated and de-identified telemetry to improve our scoring and matching algorithms, including via reinforcement-learning approaches. We do not provide your individually identifiable information to third-party AI providers for the purpose of training their general-purpose models. Specifically, OM-extraction calls to Anthropic Claude are made under Anthropic’s API terms with default “no-training” provisions.
5. How We Use Your Information
We use your personal information to:
(a) operate, maintain, and improve the Platform; (b) authenticate your account and protect against fraud and unauthorized access; (c) construct your Buyer Profile and surface Properties scored against it; (d) coordinate with the Professional Broker Network when you pursue a Property, including initiating templated outreach from the Sloane identity at sloane@shop1031.com to the Listing Broker on the Property; (e) measure and analyze how the Platform is used so we can improve scoring, matching, and user experience; (f) train Shop 1031’s analytical models on aggregated and de-identified data; (g) send you transactional and operational communications about your account and the Properties you’re tracking; (h) send you marketing communications about the Platform and related Shop 1031 services, subject to your opt-out choices; (i) comply with law and respond to lawful requests; and (j) enforce our Terms and protect our and others’ legal rights.
6. Cross-Platform Identity: Disclosure Regarding Deckora
You should know: the Platform shares an underlying buyer/investor identity layer with Deckora (deckora.ai), a related seller-side product under common ownership with Shop 1031. Specifically, when you verify your email address on Shop 1031, you become a record in a shared investors registry that recognizes you across Shop 1031 and Deckora-hosted pitch decks. If you also visit a Deckora-hosted deck (typically via a share link sent to you by a listing broker), your engagement on that deck and on Shop 1031 may be stitched into a single identity for purposes of operating both services consistently and coordinating broker follow-up.
This stitching happens server-side via your email address; we do not place cross-site cookies, and the two sites do not share a browser-side analytics identifier. You may request your data on either site be separated from the other by contacting us at the address in §15.
7. Service Providers We Share Your Information With
We rely on the following service providers, each bound by data-processing terms requiring confidentiality and use of your information only for the purposes we direct:
| Provider | Purpose | Information shared |
|---|---|---|
| Cloudflare, Inc. | Hosting (Workers, D1 database, R2 object storage), DNS, edge security | All Platform-side personal information |
| Anthropic, PBC | AI extraction of Offering Materials | Offering Materials only; no Buyer personal information |
| Resend, Inc. | Transactional and outreach email delivery | Your name, email, and message content for emails we send |
| Airtable, Inc. | Operational workspace for our advisor team (deal-state tracking, prospect CRM, activity log, outreach log) | Your contact information, Buyer Profile summary, activity summary, and any specific advisor-review requests you submit |
| Twilio (Sendgrid / Twilio SMS) | SMS notifications (only if you opt in) | Phone number, message content |
| Stripe, Inc. | Payment processing (no current buyer-side fee; reserved for future use) | Payment method metadata |
We may add or change service providers as the Platform evolves. We will update this Policy when we do so.
8. When We Share With Brokers and Other Third Parties
8.1 Professional Broker Network. When you request advisor review on a specific Property or otherwise direct us to engage on a Property, we will share your contact information and the context of your request with the member of the Professional Broker Network who will represent you. Your level of disclosure depends on your preference setting (anonymous, firm-only, or named introduction).
8.2 Listing Brokers. When we route a buyer inquiry to a Listing Broker (via templated email from the Sloane identity, under operator oversight), we describe the inquiry in a manner consistent with your disclosure preferences. If you have not opted into named introduction, we do not share your personal name or email with the Listing Broker in this initial outreach.
8.3 Legal and safety. We may share information when we believe in good faith it is necessary to (a) comply with a legal obligation, (b) respond to a lawful request from a government authority, (c) protect the rights, property, or safety of Shop 1031, our users, or others, (d) detect, investigate, or address fraud or security issues, or (e) defend ourselves in legal proceedings.
8.4 Corporate transactions. If Shop 1031 undergoes a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you and the acquirer will be subject to commitments at least as protective as this Policy.
8.5 Aggregated and de-identified. We may share aggregated or de-identified statistics about Platform usage with Professional Broker Network members, partners, or in published reports. Aggregated and de-identified data does not identify you.
9. Cookies and Similar Technologies
We use cookies, localStorage, and device-fingerprinting techniques to operate the Platform and identify you across sessions. Specifically:
- Authentication cookies keep you signed in.
- Session cookies carry an internal session id during your visit.
- localStorage holds your Buyer Profile (so a returning visitor lands directly in their scored universe) and a per-device id used for engagement stitching.
- Device fingerprint (a hash of user-agent, screen, timezone, and locale) is computed client-side and sent with each engagement event to enable cross-session and cross-device identity stitching.
Usage analytics are first-party and always on. We record how the Platform is used (the page views, property views, saves, searches, sorts, filters, and similar interaction events described in Section 3, category F) as essential first-party telemetry on every session. We collect this to operate the Platform, to see which Properties buyers engage with, and to improve our scoring, matching, and recommendations (Section 5). These events go only to shop1031.com: we use no third-party analytics services and no advertising pixels, and we do not sell your personal information. Usage events are retained in identified form for twenty-four (24) months and then aggregated and de-identified (Section 10). Your access, deletion, and correction rights over this data are described in Sections 12 and 13.
We do not use third-party advertising cookies. We do not knowingly use cookies for cross-site advertising tracking.
You can disable cookies in your browser, but parts of the Platform will not work without them.
10. How Long We Keep Your Information
| Data | Retention |
|---|---|
| Account information | While your account is active; up to seven (7) years thereafter for legal, audit, and compliance reasons, then deleted or de-identified |
| Buyer Profile | While your account is active; deleted upon account closure unless retention is required by law or for legitimate dispute defense |
| Telemetry / engagement events | Twenty-four (24) months in identified form; thereafter aggregated and de-identified |
| Communications (email, SMS) | Three (3) years from the date of the communication, or longer if required by law |
| Transaction records | Seven (7) years from the close of the transaction (real estate regulatory retention norm) |
| Payment metadata | While the payment method is active; up to two (2) years after deactivation |
| Audit logs and security records | Two (2) years |
We may retain information longer where required by law or for the establishment, exercise, or defense of legal claims.
11. Children
The Platform is not directed to and not knowingly used by individuals under 18. We do not knowingly collect information from anyone under 18. If you believe we have inadvertently collected information from a minor, contact us at the address in §15 so we can delete it.
12. Your Rights: California Residents
If you are a California resident, you have the following rights under the CCPA / CPRA:
- Right to know: request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the business purposes, and the categories of third parties with whom we have shared it.
- Right to delete: request deletion of personal information we have about you, subject to legal exceptions.
- Right to correct: request correction of inaccurate personal information.
- Right to opt out of sale or sharing: we do not sell or “share” (in the cross-context behavioral advertising sense) personal information; nonetheless, you may submit an opt-out request and we will honor it.
- Right to limit use of Sensitive Personal Information: we do not knowingly collect SPI; if we determine we have, you may request limitation.
- Right to non-discrimination: we will not discriminate against you for exercising these rights.
To exercise any of these rights, contact us at the address in §15. We will verify your identity (typically through email confirmation tied to your account) before processing your request and will respond within the statutory timeframes (currently 45 days, extendable once for an additional 45 days with notice).
You may also designate an authorized agent to make a request on your behalf, subject to verification requirements.
13. Your Rights: Residents of Other States
If you reside in another U.S. state with a comprehensive privacy law (e.g., Virginia, Colorado, Connecticut, Utah, Texas, Oregon), you may have analogous rights including access, deletion, correction, and opt-out of certain processing. Contact us at the address in §15 to exercise applicable rights.
14. Security
We take reasonable administrative, technical, and physical measures to protect your personal information, including:
- Encryption in transit (TLS) for all Platform traffic;
- Encryption at rest for sensitive data, including envelope encryption of buyer-uploaded files (if any);
- PBKDF2-hashed passwords with per-user salt;
- Database-backed session model with revocation capability;
- Login activity logging and brute-force rate limiting;
- Least-privilege access controls for our personnel;
- Regular review of our service-provider data-handling practices.
No system is impenetrable. If we become aware of a security incident materially affecting your information, we will notify you in accordance with applicable law.
15. Contact Us
Privacy questions, data-rights requests, and complaints should be directed to:
Shop 1031 Attn: Privacy Pasadena, California Contact: via the privacy channel published at shop1031.com
16. Updates to This Policy
We may update this Policy from time to time. If we make material changes, we will notify you by posting a notice on the Platform and, where appropriate, by email at least fourteen (14) days before the change takes effect. Your continued use of the Platform after the effective date constitutes acceptance.
End of Privacy Policy.