Privacy Policy for InsiderRVA

Last Updated: March 21, 2026

Welcome to InsiderRVA (the "Website" or "Service"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Website operated by InsiderRVA ("we," "our," or "us"). By using our Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Personal Information
When you create an account or use our services, we collect:
- Name
- Email address
- Account credentials (encrypted passwords)
- Profile information (optional)

1.2 Property-Related Data
- Properties you view and search for
- Saved/favorited properties
- Property search filters and preferences
- Reviews and ratings you submit
- Property information you submit or suggest edits for

1.3 Newsletter Subscriptions
- Email address
- Subscription date and source
- Subscription status (active/inactive)

1.4 User-Generated Content
- Property reviews and ratings
- Comments and feedback
- Property submissions
- Suggested edits to property information

1.5 Technical and Usage Data
- IP address
- Browser type and version
- Device information
- Pages visited and time spent
- Referring/exit pages
- Click patterns and navigation paths
- Geographic location (city/region level)

1.6 Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Maintain your session and login status
- Remember your preferences
- Analyze site usage and performance
- Improve user experience

Types of cookies we use:
- Essential cookies (required for site functionality)
- Analytics cookies (Google Analytics)
- Preference cookies (user settings)

2. How We Use Your Information

We use collected information to:
- Provide and maintain our rental property platform
- Create and manage user accounts
- Display personalized property recommendations
- Enable property search and filtering
- Process and display user reviews
- Send newsletter updates (with consent)
- Respond to inquiries and support requests
- Analyze usage patterns and improve the Service
- Detect and prevent fraud or abuse
- Comply with legal obligations

3. Third-Party Services

We use the following third-party services that may collect or process data:

3.1 Google Places API
- Used to: Fetch property information, reviews, and location data
- Data shared: Property addresses and place IDs
- Privacy Policy: https://policies.google.com/privacy

3.2 Mapbox
- Used to: Display interactive maps and property locations
- Data shared: Geographic coordinates, map interactions
- Privacy Policy: https://www.mapbox.com/legal/privacy

3.3 Outscraper
- Used to: Aggregate property reviews from various sources
- Data shared: Property identifiers and place IDs
- Privacy Policy: https://outscraper.com/privacy-policy/

3.4 NextAuth
- Used to: Secure authentication and session management
- Data shared: Email, encrypted credentials
- Privacy Policy: https://next-auth.js.org/

3.5 Google Analytics
- Used to: Analyze website traffic and user behavior
- Data collected: Anonymous usage statistics
- You can opt-out: https://tools.google.com/dlpage/gaoptout

4. Data Sharing and Disclosure

We do NOT sell your personal information to third parties.

We may share your information only in these circumstances:
- With your explicit consent
- With service providers who assist in operating our platform (under strict confidentiality agreements)
- To comply with legal obligations, court orders, or government requests
- To protect our rights, property, or safety, or that of our users
- In connection with a business transfer (merger, acquisition, or sale)

Public Information:
- Your reviews, ratings, and comments are publicly visible
- Your username/display name may be shown with your reviews
- Property submissions may be attributed to you (optional)

5. Data Protection and Security

We implement industry-standard security measures:
- TLS/SSL encryption for data transmission
- Encrypted storage of passwords and sensitive data
- Regular security audits and updates
- Access controls and authentication requirements
- Secure hosting infrastructure
- Regular backups and disaster recovery procedures

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as:
- Your account is active
- Needed to provide services
- Required by law or for legitimate business purposes

Specific retention periods:
- Account data: Until account deletion
- Reviews and ratings: Indefinitely (unless removed)
- Newsletter subscriptions: Until unsubscribed
- Analytics data: 26 months (Google Analytics default)
- Server logs: 90 days

7. Your Rights and Choices

You have the right to:

7.1 Access and Portability
- Request a copy of your personal data
- Download your reviews and saved properties

7.2 Correction
- Update or correct your account information
- Edit or delete your reviews

7.3 Deletion
- Request deletion of your account and associated data
- Remove saved properties or reviews
- Note: Some data may be retained for legal compliance

7.4 Opt-Out
- Unsubscribe from newsletters at any time
- Disable non-essential cookies
- Opt-out of Google Analytics tracking

7.5 Object to Processing
- Object to certain data processing activities
- Withdraw consent where processing is based on consent

To exercise these rights, contact us at matt@insiderrva.com

8. Children's Privacy

InsiderRVA is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover we have collected information from a child under 13, we will delete it immediately.

If you believe we have collected information from a child under 13, please contact us at matt@insiderrva.com

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt-out of the sale of personal information (we do not sell data)
- Right to deletion of personal information
- Right to non-discrimination for exercising your rights

To exercise these rights, contact us at matt@insiderrva.com

10. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have rights under GDPR:
- Right of access to your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent

Legal basis for processing:
- Consent: Newsletter subscriptions, optional features
- Contract: Account services, property platform features
- Legitimate interests: Analytics, fraud prevention, service improvement

11. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers.

12. Do Not Track Signals

Our Website does not currently respond to "Do Not Track" browser signals. You can disable cookies in your browser settings, but this may affect site functionality.

13. Updates to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:
- Email notification (if you have an account)
- Prominent notice on the Website
- Updating the "Last Updated" date

Your continued use of the Service after changes constitutes acceptance of the updated policy.

14. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by law, typically within 72 hours of discovery.

15. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal data:

Email: matt@insiderrva.com
Website: https://insiderrva.com

For data protection inquiries:
Email: matt@insiderrva.com
Subject: Privacy/Data Protection Request

We will respond to your request within 30 days.

16. Consent

By using InsiderRVA, you consent to this Privacy Policy and agree to its terms.