# PRIVACY POLICY **VISTA VIEW REALTY SERVICES LLC** **Property & Entity Intelligence Platform** **Effective Date: February 24, 2026** **Last Updated: September 16, 2026** (Addendum §18 DRAFT — counsel review) --- This Privacy Policy ("Policy") describes how Vista View Realty Services LLC, a Texas limited liability company ("VistaView," "Company," "we," "us," or "our"), collects, uses, discloses, and protects information in connection with the VistaView Property & Entity Intelligence Platform (the "Service"). This Policy applies to all users of our Service, including Business-to-Business ("B2B") customers, website visitors, and individuals whose information may appear in government public records aggregated by our Platform. We are committed to transparency regarding our data practices. Because our Platform aggregates government public records to serve institutional customers, this Policy addresses both the information we collect directly from users and the public records data we process as part of our Service. --- ## 1. WHO WE ARE Vista View Realty Services LLC is a property and entity intelligence company headquartered in Irving, Texas. We aggregate, normalize, and enrich data from official United States government public records to provide institutional-grade intelligence to B2B customers including banks, insurance companies, hedge funds, title companies, appraisers, oil and gas companies, survey companies, and other financial institutions. **Company Information:** > Vista View Realty Services LLC > EIN: 33-1383423 > 3128 Denali Dr, Irving, TX 75063 > Website: https://vistaview.ai > Privacy Contact: privacy@vistaview.ai --- ## 2. INFORMATION WE COLLECT ### 2.1 Government Public Records Data The core of our Service involves aggregating data from official United States government public records. This data includes: **2.1.1 Property Records:** - Property ownership records, deed transfers, and chain-of-title history from county recorder offices - Property tax assessments, assessed valuations, exemptions, and property classifications from county assessor offices - Parcel boundary data, zoning designations, and land use classifications from state and local GIS portals - Mortgage recordings, liens, encumbrances, and easements from county recorder offices **2.1.2 Entity and Business Records:** - Business entity registrations, corporate filings, and Uniform Commercial Code filings from state Secretary of State offices - Public company filings, beneficial ownership reports, and corporate disclosures from SEC EDGAR - Tax-exempt organization filings (Form 990) and publicly available tax statistics from the IRS - Bank institution data, branch locations, and financial performance data from the FDIC **2.1.3 Environmental and Risk Data:** - Flood zone maps, disaster declarations, and National Risk Index data from FEMA - Toxic Release Inventory, Superfund site locations, and environmental compliance records from the EPA - Seismic hazard assessments, water resource data, and land use classifications from USGS **2.1.4 Economic and Demographic Data:** - Population demographics, housing statistics, and economic indicators from the U.S. Census Bureau - Employment data, wage statistics, and Consumer Price Index from the Bureau of Labor Statistics (BLS) - GDP data, personal income and outlays, and regional economic accounts from the Bureau of Economic Analysis (BEA) - Agricultural census data, rural development data, and farm real estate values from the USDA **2.1.5 Regulatory and Compliance Data:** - Specially Designated Nationals and Blocked Persons List and sanctions data from Treasury OFAC - Broadband deployment data and communications infrastructure mapping from the FCC - Economic research data, banking statistics, and financial stability indicators from the Federal Reserve ### 2.2 Information Collected Directly from Customers When B2B customers register for and use our Service, we collect: - (a) **Account Information:** Company name, business address, contact name, email address, phone number, and job title of authorized representatives - (b) **Billing Information:** Payment method details, billing address, and transaction history (payment processing is handled by PCI-compliant third-party processors; we do not store full credit card numbers) - (c) **Usage Information:** Search queries, API calls, report downloads, feature usage, login timestamps, and session duration - (d) **Technical Information:** IP addresses, browser type and version, operating system, device identifiers, and referring URLs - (e) **Communications:** Correspondence with our support team, feedback, and feature requests ### 2.3 Information Collected Automatically When you visit our website or use our Platform, we automatically collect: - (a) **Log Data:** Server logs recording IP addresses, access times, pages viewed, and HTTP request details - (b) **Cookies and Similar Technologies:** Session cookies for authentication, preference cookies for user settings, and analytics cookies for understanding usage patterns (see Section 9) - (c) **Analytics Data:** Aggregated usage statistics to improve Service performance and user experience ### 2.4 Information We Do NOT Collect VistaView does **not** collect, store, compile, or process the following categories of information: - (a) Social Security numbers - (b) Individual consumer credit scores or credit histories - (c) Medical records or health information - (d) Private communications (emails, text messages, phone call content) - (e) Biometric data (fingerprints, facial recognition, voiceprints) - (f) Information about children under the age of 18 - (g) Data from social media accounts or private data brokers - (h) Genetic or genomic data - (i) Sexual orientation or gender identity data - (j) Religious affiliation data - (k) Political affiliation data (except as may appear in public government filings) --- ## 3. HOW WE USE INFORMATION ### 3.1 Government Public Records Data We use government public records data to: - (a) Provide property and entity intelligence to our B2B customers - (b) Generate Derived Intelligence, including risk scores, market analyses, and cross-referenced insights - (c) Maintain the accuracy and currency of our data platform - (d) Develop and improve our proprietary algorithms and analytical models - (e) Create aggregated, de-identified statistical analyses and market reports ### 3.2 Customer Account Information We use information collected from customers to: - (a) Provide, maintain, and improve the Service - (b) Process subscriptions and payments - (c) Communicate with customers regarding their accounts, including service updates, security alerts, and billing notifications - (d) Provide customer support and respond to inquiries - (e) Enforce our Terms of Service and protect against unauthorized use - (f) Comply with legal obligations ### 3.3 Technical and Usage Information We use technical and usage data to: - (a) Monitor and improve Platform performance, stability, and security - (b) Detect, prevent, and respond to fraud, abuse, and security incidents - (c) Analyze usage patterns to inform product development - (d) Generate aggregated, non-identifying analytics --- ## 4. HOW WE SHARE INFORMATION ### 4.1 With B2B Customers We provide government public records data and Derived Intelligence to our B2B customers (banks, insurance companies, hedge funds, title companies, appraisers, oil and gas companies, survey companies, and other financial institutions) in accordance with our Terms of Service. Customers access this data for legitimate business purposes including: - Property valuation and risk assessment - AML/KYC compliance and entity verification - Insurance underwriting and actuarial analysis - Title search and examination - Investment research and portfolio analysis - Fraud detection and prevention - Environmental due diligence - Market research and competitive analysis ### 4.2 With Service Providers We share information with third-party service providers who perform services on our behalf, including: - (a) Cloud infrastructure and hosting providers - (b) Payment processors - (c) Customer support tools - (d) Analytics providers - (e) Email delivery services All service providers are bound by contractual obligations to protect the confidentiality and security of information and to use it solely for the purposes of providing services to VistaView. ### 4.3 For Legal Compliance We may disclose information when required to do so by law, regulation, legal process, or governmental request, including: - (a) In response to a subpoena, court order, or other legal process - (b) To comply with applicable laws and regulations - (c) To protect the rights, property, or safety of VistaView, our customers, or others - (d) In connection with an investigation of suspected fraud, intellectual property infringement, or other illegal activity ### 4.4 In Business Transfers In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, information may be transferred as part of the transaction. We will notify affected parties of any change in ownership or control of their information. ### 4.5 Information We Do NOT Sell VistaView does not sell, rent, or lease individual consumer personal information to third parties for their direct marketing purposes. Our business model is based on providing institutional intelligence services to B2B customers, not on selling individual consumer data. --- ## 5. UNIVERSAL OPT-OUT — YOUR RIGHT TO REQUEST REMOVAL ### 5.1 Universal Right VistaView provides a universal opt-out right to **all individuals**, regardless of state of residence. You do not need to be a resident of California, Virginia, Colorado, Connecticut, or any other specific state to exercise this right. Any person whose information appears in our Platform may request its removal. ### 5.2 How to Submit an Opt-Out Request To request removal of your information from the VistaView Platform, contact us at: - **Email:** privacy@vistaview.ai - **Mail:** Vista View Realty Services LLC, Attn: Privacy Team, 3128 Denali Dr, Irving, TX 75063 Your request should include: - (a) Your full legal name - (b) Property address(es) or other identifying information you wish to have suppressed - (c) A statement that you are requesting suppression of your information from the VistaView Platform - (d) Contact information so we can communicate with you about your request ### 5.3 Verification and Processing Upon receiving your request, we will: - (a) Verify your identity to ensure the request is legitimate and to prevent unauthorized suppression of third-party information - (b) Process the suppression within thirty (30) calendar days of successful identity verification - (c) Confirm completion of the suppression via your preferred contact method ### 5.4 Important Limitations - (a) Suppression from the VistaView Platform does not remove, alter, or affect the underlying government public records from which the information was sourced. The information may remain available directly from the originating government agency. - (b) If suppressed information re-appears in a subsequent government data update, we will use commercially reasonable efforts to re-apply the suppression automatically. If you believe your information has re-emerged after suppression, please contact us. - (c) We may retain a minimal record of your opt-out request (name and suppression directive only) to ensure continued compliance with your request. --- ## 6. CALIFORNIA RESIDENTS — CCPA / CPRA RIGHTS ### 6.1 Applicability If you are a California resident, the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, "CCPA"), provides you with additional rights regarding your personal information. This section supplements the rest of this Privacy Policy. ### 6.2 Categories of Personal Information In the preceding twelve (12) months, VistaView has collected, used, and disclosed the following categories of personal information as defined by the CCPA: | Category | Examples | Collected | Source | Business Purpose | |----------|----------|-----------|--------|-----------------| | Identifiers | Names, addresses, phone numbers (from public government records) | Yes | Government public records | Property & entity intelligence | | Commercial Information | Property purchase history, transaction records (from county recorders) | Yes | Government public records | Title search, market analysis | | Internet Activity | Website usage logs, search queries from customers | Yes | Directly from customers | Service improvement, security | | Professional Information | Business entity registrations, officer/director listings | Yes | Government public records | Entity verification, compliance | | Geolocation Data | Property addresses, parcel coordinates | Yes | Government public records | Property intelligence, mapping | ### 6.3 Your CCPA Rights As a California resident, you have the right to: - (a) **Right to Know:** Request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share your information. - (b) **Right to Delete:** Request deletion of your personal information, subject to certain exceptions under the CCPA. - (c) **Right to Correct:** Request correction of inaccurate personal information. - (d) **Right to Opt-Out of Sale/Sharing:** Opt out of the sale or sharing of your personal information. Note: VistaView does not sell individual consumer personal information as defined by the CCPA. - (e) **Right to Limit Use of Sensitive Personal Information:** Request that we limit the use of sensitive personal information, if applicable. - (f) **Right to Non-Discrimination:** We will not discriminate against you for exercising any of your CCPA rights. ### 6.4 Exercising Your Rights To exercise any of your CCPA rights, contact us at: - **Email:** privacy@vistaview.ai - **Mail:** Vista View Realty Services LLC, Attn: Privacy Team, 3128 Denali Dr, Irving, TX 75063 We will respond to verifiable consumer requests within forty-five (45) calendar days, as required by the CCPA. If additional time is needed, we will notify you of the extension and the reason. ### 6.5 Authorized Agents You may designate an authorized agent to submit a request on your behalf. We may require verification of the agent's authorization, including a signed written authorization or power of attorney. ### 6.6 Financial Incentives VistaView does not offer financial incentives or price differences in exchange for the retention or sale of personal information. --- ## 7. ADDITIONAL STATE PRIVACY RIGHTS ### 7.1 Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Other State Privacy Laws Residents of states with comprehensive privacy legislation may have additional rights, including the right to access, correct, delete, and obtain a copy of their personal data, as well as the right to opt out of targeted advertising, the sale of personal data, and profiling. To exercise any state-specific privacy rights, please contact us at privacy@vistaview.ai. ### 7.2 Appeals If we decline a privacy request, you may appeal the decision by contacting us at privacy@vistaview.ai with the subject line "Privacy Request Appeal." We will respond to appeals within the timeframe required by applicable law. --- ## 8. DATA SECURITY ### 8.1 Security Measures VistaView implements and maintains comprehensive administrative, technical, and physical security measures to protect information from unauthorized access, disclosure, alteration, and destruction. These measures include: - (a) **Encryption:** All data is encrypted at rest using AES-256 encryption and in transit using TLS 1.2 or higher - (b) **Access Controls:** Role-based access controls (RBAC) ensure that personnel access only the information necessary for their role. Multi-factor authentication is required for all administrative access - (c) **Audit Logging:** All data access, queries, exports, and administrative actions are comprehensively logged and monitored. Audit logs are retained and reviewed for anomalous activity - (d) **Network Security:** Firewalls, intrusion detection systems, and network segmentation protect the Platform infrastructure - (e) **Vulnerability Management:** Regular vulnerability assessments, penetration testing, and security patch management - (f) **Incident Response:** Documented incident response procedures with defined escalation paths and notification protocols - (g) **Employee Security:** Background checks for personnel with data access, mandatory security awareness training, and confidentiality agreements - (h) **Physical Security:** Data center facilities with physical access controls, environmental monitoring, and redundant power and cooling ### 8.2 Breach Notification In the event of a data breach affecting personal information, VistaView will: - (a) Investigate and contain the breach promptly - (b) Notify affected individuals and relevant regulatory authorities as required by applicable law, including within the timeframes mandated by state breach notification laws - (c) Provide information about the nature of the breach, the types of information affected, and recommended protective steps - (d) Take corrective measures to prevent recurrence --- ## 9. COOKIES AND TRACKING TECHNOLOGIES ### 9.1 Types of Cookies We Use | Cookie Type | Purpose | Duration | |-------------|---------|----------| | Strictly Necessary | Authentication, security, session management | Session | | Functional | User preferences, language settings, dashboard configurations | Up to 1 year | | Analytics | Understanding usage patterns, improving Service performance | Up to 2 years | ### 9.2 Managing Cookies You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to use the Service. We honor "Do Not Track" browser signals by disabling analytics cookies when such signals are detected. ### 9.3 Third-Party Analytics We may use third-party analytics services to help analyze how users interact with the Platform. These services may use cookies and similar technologies to collect and analyze usage information. The information generated is used solely to improve our Service. --- ## 10. DATA RETENTION ### 10.1 Government Public Records Data We retain government public records data as long as it remains available in the originating government source or as long as it remains relevant to our Service. When government records are updated, superseded, or removed by the originating agency, we update our Platform accordingly on the next data synchronization cycle. ### 10.2 Customer Account Data We retain customer account data for the duration of the customer relationship and for a period of three (3) years following termination of the subscription, unless a longer retention period is required by applicable law (for example, financial record-keeping requirements). ### 10.3 Usage and Technical Data Server logs, API access logs, and technical data are retained for a period of twelve (12) months for security and operational purposes. ### 10.4 Suppressed Records When an individual exercises their opt-out right under Section 5, we retain a minimal suppression record (name, suppression directive, and date of request) indefinitely to ensure continued compliance with the opt-out request. --- ## 11. INTERNATIONAL DATA TRANSFERS ### 11.1 United States Only The VistaView Platform processes and stores data exclusively within the United States. Our data sources are United States government agencies, and our primary infrastructure is located in the United States. ### 11.2 International Access If you access the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to the transfer of your information to the United States, which may have data protection laws that differ from those in your jurisdiction. --- ## 12. CHILDREN'S PRIVACY VistaView does not knowingly collect, store, or process personal information about children under the age of eighteen (18). Our Service is designed for B2B institutional customers and is not directed to individuals under 18. If we become aware that we have inadvertently collected information about a child under 18, we will take prompt steps to delete such information. If you believe we have collected information about a minor, please contact us immediately at privacy@vistaview.ai. --- ## 13. THIRD-PARTY LINKS AND SERVICES The VistaView Platform may contain links to third-party websites, services, or resources that are not operated by VistaView. This Privacy Policy does not apply to any third-party websites or services. We encourage you to review the privacy policies of any third-party services you access through or in connection with our Platform. VistaView is not responsible for the privacy practices or content of third-party websites. --- ## 14. CHANGES TO THIS PRIVACY POLICY ### 14.1 Updates We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will: - (a) Update the "Last Updated" date at the top of this Policy - (b) Post the updated Policy on our website - (c) Notify registered B2B customers via email to the account administrator's email address at least thirty (30) days prior to the effective date of material changes - (d) Where required by law, obtain consent before applying material changes ### 14.2 Review We encourage you to review this Privacy Policy periodically to stay informed about our data practices. --- ## 15. YOUR RIGHTS SUMMARY The following table summarizes the rights available to individuals. Note that VistaView extends the universal opt-out right to all individuals, regardless of jurisdiction. | Right | Available To | How to Exercise | |-------|-------------|-----------------| | Opt-Out / Suppression | All individuals (any state, any country) | Email privacy@vistaview.ai | | Right to Know | California residents (CCPA), and residents of VA, CO, CT, and other states with privacy laws | Email privacy@vistaview.ai | | Right to Delete | California residents (CCPA), and residents of VA, CO, CT, and other states with privacy laws | Email privacy@vistaview.ai | | Right to Correct | California residents (CPRA), and residents of VA, CO, CT | Email privacy@vistaview.ai | | Right to Non-Discrimination | California residents (CCPA) | Automatic — no action needed | | Right to Appeal | VA, CO, CT residents | Email privacy@vistaview.ai (subject: "Privacy Request Appeal") | | Data Portability | California residents (CCPA), and residents of VA, CO, CT | Email privacy@vistaview.ai | --- ## 16. DATA SOURCES — COMPLETE LIST For transparency, the following is a complete list of the official United States government data sources from which VistaView aggregates public records data: ### Federal Sources 1. **Securities and Exchange Commission (SEC) — EDGAR** — Public company filings, beneficial ownership, insider transactions, corporate disclosures 2. **Internal Revenue Service (IRS)** — Tax-exempt organization data (Form 990), EIN registrations, publicly available tax statistics 3. **U.S. Census Bureau** — American Community Survey, decennial census, demographics, housing, economic indicators, geographic boundaries 4. **Federal Emergency Management Agency (FEMA)** — National Flood Insurance Program, flood maps, disaster declarations, National Risk Index, hazard mitigation 5. **U.S. Geological Survey (USGS)** — Topography, seismic hazards, water resources, land use, mineral resources 6. **Environmental Protection Agency (EPA)** — Toxic Release Inventory, Superfund sites, brownfields, environmental compliance, air and water quality 7. **U.S. Department of the Treasury — OFAC** — SDN List, sanctions, enforcement actions 8. **Federal Communications Commission (FCC)** — Broadband deployment, tower registrations, spectrum licenses, communications infrastructure 9. **Federal Deposit Insurance Corporation (FDIC)** — Bank institutions, branch locations, financial performance, failed banks 10. **Federal Reserve System** — Economic research, banking statistics, monetary policy, financial stability 11. **Bureau of Labor Statistics (BLS)** — Employment, wages, CPI, PPI, occupational data 12. **Bureau of Economic Analysis (BEA)** — GDP, personal income, regional economics, industry accounts 13. **U.S. Department of Agriculture (USDA)** — Agricultural census, rural development, crop data, farm values ### State Sources 14. **State Secretary of State Offices (all 50 states + territories)** — Business registrations, corporate filings, UCC filings, registered agents ### County and Local Sources 15. **County Assessor Offices** — Property tax assessments, valuations, classifications, exemptions 16. **County Recorder Offices** — Deeds, mortgages, liens, easements, plat maps, instruments of conveyance 17. **State and Local GIS Portals** — Parcel boundaries, zoning, land use, geospatial data --- --- ## 18. ADDENDUM — DEEP AGGREGATION, SENSITIVE DATA, GDPR/CCPA FRAMING (DRAFT) > **DRAFT — NOT LEGAL ADVICE — PENDING COUNSEL REVIEW.** Added 2026-09-16. **18.1 Controller / Processor Framing (Draft).** For customer account, billing, and usage data, VistaView typically acts as a **controller** (or “business” under the CCPA/CPRA). Where VistaView processes personal information solely on a customer’s documented instructions within that customer’s paid workflow, VistaView may act as a **processor** / “service provider,” subject to a Data Processing Addendum (`[COUNSEL: DPA template]`). Public-record parcel aggregation involves publicly available information; the precise role analysis is fact-specific and reserved for counsel. **18.2 EU/UK Visitors.** VistaView operates US-first. Visitors from the EEA/UK may contact privacy@vistaview.ai with subject “GDPR Request.” VistaView will assess applicability of GDPR/UK GDPR rights, including public-record and legitimate-interest analyses as counsel directs. This Addendum does not itself establish that VistaView offers goods/services to the EEA/UK or monitors behavior of EEA/UK residents. **18.3 DSAR / Opt-Out Path (Reference).** - Opt-out / suppression: privacy@vistaview.ai — subject “Opt-Out Request” - CCPA / state privacy rights: privacy@vistaview.ai — subject “CCPA Request” or “Privacy Rights Request” - GDPR inquiries: privacy@vistaview.ai — subject “GDPR Request” **18.4 Skiptrace / PII Lookup Logging & Retention.** Skiptrace and person-level PII lookups are available only to authenticated B2B users under entitlement. Every such lookup is logged. Logs are retained for security, compliance, and dispute purposes for a period set by counsel (`[COUNSEL: retention period]`), and longer if subject to legal hold. **18.5 Ethnicity / Sensitive Data — Default Exclude; Disclosure if Offered.** VistaView’s default product configuration **excludes** person-level race, ethnicity, religion, and similar sensitive attributes. If such attributes are ever offered, VistaView will disclose the offering in product documentation and require counsel-approved permitted-use controls. Area-level statistical demographics are not person-level sensitive attribute lists. **18.6 Bankruptcy / Court / Lien Context.** Bankruptcy, court, judgment, and lien data displayed on the Platform are drawn from public or licensed records for property/entity intelligence. Accuracy is not guaranteed; users must verify official sources. Such displays are not consumer reports under the FCRA. **18.7 Amazon Forest Metaphor (Cross-Reference).** Marketing references to an “Amazon forest” of parcel data are metaphorical only and are not affiliation with Amazon.com, Inc. or any Amazon trademark. See https://vistaview.ai/legal/vv-amazon-forest-disclaimer-2026-09-16.md --- ## 17. CONTACT US If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: **Privacy Team:** > Vista View Realty Services LLC > Attn: Privacy Team > 3128 Denali Dr > Irving, TX 75063 > Email: privacy@vistaview.ai **General Inquiries:** > Website: https://vistaview.ai > Email: info@vistaview.ai **For Opt-Out Requests:** > Email: privacy@vistaview.ai > Subject Line: "Opt-Out Request" **For CCPA Requests:** > Email: privacy@vistaview.ai > Subject Line: "CCPA Request" We will acknowledge receipt of your inquiry within two (2) business days and provide a substantive response within the timeframe required by applicable law. --- *© 2024–2026 Vista View Realty Services LLC. All rights reserved.* *EIN: 33-1383423* *END OF PRIVACY POLICY*