Privacy Policy

1. Who We Are

ZoneVista is a real estate market intelligence platform operated by Next Generation Data Analytics LLC ("NGDA," "Company," "we," "us," or "our"), a Michigan limited liability company. We are the data controller for the personal information collected through the Service.

Next Generation Data Analytics LLC
Email: info@nextgen-data-ai.com
Phone: +1 (248) 766-2544
Website: nextgen-data-ai.com

2. Scope of This Policy

This Privacy Policy applies to all personal information collected through the ZoneVista platform (zonevista.io), including the website, dashboards, contact forms, email communications, and any related services (collectively, the "Service").

This policy does not apply to third-party websites, services, or applications that may be linked from our Service, even if accessed through the Platform. We encourage you to review the privacy policies of those third parties.

This policy also does not apply to the real estate market data displayed on our dashboards. That data is derived from publicly available third-party sources (such as Zillow Research) and does not constitute personal information.

3. Information We Collect

3.1 Information You Provide Directly

Data Category	Examples	When Collected
Contact Information	Full name, email address, phone number	Contact form, account registration, email correspondence
Professional Information	Company name, job title/role, business type	Contact form, onboarding
Account Credentials	Username, password (hashed)	Account registration
Payment Information	Billing name, billing address, last 4 digits of card	Subscription checkout (processed by Stripe — we do not store full card numbers)
Communications	Messages, inquiries, feedback	Contact form, email, support requests

3.2 Information Collected Automatically

Data Category	Examples	Purpose
Device Information	Browser type, operating system, screen resolution	Ensure dashboard displays correctly
Usage Data	Pages visited, features used, dashboard interactions, time on site	Improve Platform performance and features
Log Data	IP address, access times, referring URL	Security monitoring, debugging
Cookies and Similar Technologies	Session cookies, preference cookies	Maintain login state, remember preferences

3.3 Information We Do Not Collect

We do not collect sensitive personal information such as Social Security numbers, driver's license numbers, financial account numbers (beyond what Stripe processes for billing), racial or ethnic origin, political opinions, religious beliefs, health data, biometric data, or precise geolocation data.

4. How We Use Your Information

We use the personal information we collect for the following purposes:

Purpose	Data Used
Provide the Service — Create and manage your account, grant access to dashboards, deliver subscribed features	Contact information, account credentials, professional information
Process Payments — Bill your subscription, handle refunds, send invoices	Payment information (via Stripe)
Communicate with You — Respond to inquiries, send service updates, notify of changes to Terms or this Policy	Contact information, communications
Onboarding and Support — Conduct Data Health Audits, provide technical support, resolve issues	Contact information, professional information, communications
Improve the Platform — Analyze usage patterns, identify bugs, develop new features, optimize performance	Usage data, device information, log data
Security and Fraud Prevention — Monitor for unauthorized access, detect abuse, protect against threats	Log data, device information, account credentials
Legal Compliance — Comply with applicable laws, respond to legal process, enforce our Terms	Any data as required by law

We do not use your personal information for automated decision-making or profiling that produces legal effects concerning you.

5. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Performance of a contract: Processing necessary to provide the Service under your Subscription agreement.
• Legitimate interests: Processing necessary for our legitimate business interests (improving the Platform, security monitoring, customer support), provided those interests are not overridden by your rights.
• Consent: Where you have given explicit consent, such as opting in to marketing communications. You may withdraw consent at any time.
• Legal obligation: Processing necessary to comply with applicable laws and regulations.

6. When We Share Your Information

We may share your information in the following limited circumstances:

6.1 Service Providers

We share information with trusted third-party service providers who perform services on our behalf, subject to contractual obligations to protect your data:

• Stripe — Payment processing. Stripe processes your payment card information directly; we never see or store full card numbers. See Stripe's Privacy Policy.
• Hosting providers — Server infrastructure for the Platform and database.
• Analytics tools — Website analytics to understand usage patterns (if implemented).
• Email services — Transactional emails such as account confirmations and billing receipts.

6.2 Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, or enforceable governmental request, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.

6.3 Business Transfers

If NGDA is involved in a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website of any change in ownership or uses of your personal information.

6.4 With Your Consent

We may share your information in other circumstances with your explicit consent.

7. Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and understand how you interact with the site.

7.2 Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for the Platform to function — authentication, session management, security	Session / up to 30 days
Preference Cookies	Remember your dashboard settings, selected geographies, and display preferences	Up to 1 year
Analytics Cookies	Help us understand how users interact with the Platform to improve features and performance	Up to 2 years

7.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may prevent you from using certain features of the Platform. For more information about managing cookies, visit www.allaboutcookies.org.

We do not currently respond to Do Not Track ("DNT") signals, as there is no industry-standard interpretation of DNT signals for web services.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Data Category	Retention Period
Account information	Duration of your Subscription + 90 days after termination
Payment records	7 years (tax and legal compliance)
Contact form submissions	2 years from submission, or until you request deletion
Usage and log data	12 months
Email communications	2 years from last communication

When personal information is no longer needed, we will securely delete or anonymize it. Anonymized data that can no longer be linked to you may be retained indefinitely for analytical purposes.

9. Data Security

We implement reasonable technical, administrative, and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/HTTPS) and sensitive data at rest.
• Secure password hashing for account credentials.
• Access controls limiting employee and contractor access to personal data on a need-to-know basis.
• Regular review of our data collection, storage, and processing practices.
• Private infrastructure with firewall protection and monitoring.

While we take security seriously and implement industry-standard safeguards, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but will promptly notify affected users in the event of a data breach as required by applicable law.

10. Your Rights and Choices

Depending on your location and applicable law, you may have some or all of the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Correction: Request that we correct inaccurate or incomplete personal information.
• Right to Deletion: Request that we delete your personal information, subject to certain exceptions (such as data we are legally required to retain).
• Right to Portability: Request your personal information in a structured, commonly used, machine-readable format.
• Right to Restrict Processing: Request that we limit how we use your personal information.
• Right to Object: Object to our processing of your personal information based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

To exercise any of these rights, please contact us at info@nextgen-data-ai.com with the subject line "Privacy Rights Request." We will respond to your request within 30 days, or as required by applicable law. We may ask you to verify your identity before processing your request.

11. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we have collected information from a child, please contact us immediately at info@nextgen-data-ai.com.

12. Third-Party Links and Services

The Service may contain links to third-party websites, services, or applications that are not operated by NGDA. These include:

• Stripe (payment processing) — stripe.com/privacy
• Zillow Research (data source) — zillow.com/privacy
• Next Generation Data Analytics (parent company) — nextgen-data-ai.com

We are not responsible for the privacy practices of third-party services. We encourage you to review their privacy policies before providing them with your personal information.

13. International Data Transfers

The Service is operated from the United States. If you access the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those of your country.

By using the Service, you consent to the transfer of your information to the United States and its processing as described in this Privacy Policy. We will take reasonable steps to ensure that your data is treated securely and in accordance with this policy regardless of where it is processed.

14. State-Specific Privacy Rights

14.1 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• The right to know what personal information we collect, use, disclose, and sell.
• The right to delete personal information we have collected from you.
• The right to opt out of the sale or sharing of personal information. We do not sell or share personal information as defined by the CCPA/CPRA.
• The right to correct inaccurate personal information.
• The right to limit the use of sensitive personal information. We do not collect sensitive personal information as defined by the CCPA/CPRA.
• The right to non-discrimination for exercising your CCPA/CPRA rights.

To exercise your California privacy rights, contact us at info@nextgen-data-ai.com with the subject line "California Privacy Request."

14.2 Virginia, Colorado, Connecticut, and Other State Privacy Laws

Residents of states with comprehensive privacy laws (including Virginia's VCDPA, Colorado's CPA, and Connecticut's CTDPA) may have similar rights to access, correct, delete, and port their personal data, as well as opt out of targeted advertising and profiling. We do not engage in targeted advertising or profiling based on personal information. To exercise your rights, contact us using the information in Section 16.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. If we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Notify active Subscribers via email at least 30 days before the changes take effect.
• Post a prominent notice on the Platform.

Your continued use of the Service after the effective date of the revised Privacy Policy constitutes your acceptance of those changes. We encourage you to review this page periodically for the latest information about our privacy practices.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Next Generation Data Analytics LLC
Attn: Privacy
Email: info@nextgen-data-ai.com
Phone: +1 (248) 766-2544
Website: nextgen-data-ai.com

We aim to respond to all privacy-related inquiries within 30 days.