CR EQUITY.Ai Privacy Policy

PRIVACY POLICY

Last Updated: March 2, 2026

CR EQUITY.Ai, including its affiliates CR Equity and Ai Inc (collectively referred to as "CR EQUITY", "we", "us", or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.crequity.ai (the "Site") or utilize our services, including any AI-driven analytics, commercial real estate tools, or other offerings (collectively, the "Services").

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Site or use our Services.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last Updated" date of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates.

1. WHAT INFORMATION DO WE COLLECT?

We collect information in three main ways: (1) information you provide to us directly, (2) information we collect automatically through your use of the Site, and (3) information we receive from third-party sources.

A. Information You Provide to Us

You may voluntarily provide information to us when you:

• Register for an account or subscribe to a service.
• Request a demo, consultation, or whitepaper.
• Contact us via email, phone, or contact forms.
• Apply for a job.
• Participate in surveys, promotions, or webinars.

The types of data we may collect include:

• Identity Data: Name, username or similar identifier, title, company name.
• Contact Data: Business email address, phone number, and physical address.
• Financial Data: To process transactions (if applicable), we may collect billing information, though payment processing is typically handled by third-party processors (e.g., Stripe) and we do not store full credit card numbers.
• User Content: Any files, documents, or data you upload to the platform for analysis (e.g., property portfolios, lease documents).

B. Information Collected Automatically

When you access our Site, we may automatically collect certain information about your device and usage, including:

• Log Data: IP address, browser type, operating system, referring URLs, and pages viewed.
• Usage Data: Clicks, navigation paths, time spent on pages, and feature usage.
• Device Data: Information about your computer or mobile device.
• Cookies and Tracking Technologies: We use cookies, pixels, and similar technologies to enhance functionality and analyze trends. (See our Cookie Policy below).

C. Information from Third Parties

We may receive information about you from third-party sources, such as:

• Public databases and commercial real estate listing services (MLS, CoStar, etc.).
• Marketing partners and data enrichment services.
• Social media platforms (if you interact with our pages).

2. HOW DO WE USE YOUR INFORMATION?

We use the information we collect for various business purposes, including to:

• Provide and Maintain Services: To operate the CREQUITY platform, process transactions, and provide AI-driven analytics and reports.
• Improve and Develop: To understand how users interact with our Site and Services, train our AI models (where applicable), and develop new features.
• Communicate with You: To respond to inquiries, send administrative information (e.g., updates, security alerts), and provide customer support.
• Marketing: To send you newsletters, promotional materials, and information about events or services we think may interest you. You may opt-out at any time.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.
• Security: To detect, prevent, and address fraud, unauthorized access, and other illegal activities.

Note on AI Training: If we use your data to train our machine learning models, we will endeavor to anonymize or de-identify the data to remove personal identifiers before doing so. You will be notified if your data is being used in a manner that materially affects your rights.

3. DISCLOSURE OF YOUR INFORMATION

We may share your information in the following situations:

• Affiliates (CR Equity, Ai Inc): We may share information between our affiliated entities to provide a cohesive service offering and improve our business operations.
• Service Providers: We engage trusted third-party vendors to perform functions on our behalf, such as cloud hosting (e.g., AWS), payment processing, email delivery, and analytics (e.g., Google Analytics).
• Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as a business asset.
• Legal Requirements: We may disclose information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
• Consent: We may disclose your information for any other purpose with your consent.

4. DATA SECURITY

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. We encourage you to use strong passwords and keep your login credentials confidential.

5. DATA RETENTION

We will retain your personal information only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it.

6. YOUR PRIVACY RIGHTS

Depending on your location, you may have certain rights regarding your personal information:

• Access and Portability: You may request a copy of the data we hold about you.
• Correction: You may request that we correct inaccurate or incomplete data.
• Deletion: You may request that we delete your personal data, subject to certain legal exceptions.
• Opt-out of Marketing: You may opt-out of receiving promotional communications by following the unsubscribe link in the emails or contacting us directly.

California Privacy Rights (CCPA): If you are a California resident, you have the right to request disclosure of the categories and specific pieces of personal information we have collected, the right to request deletion, and the right to opt-out of the "sale" of personal information. We do not sell your personal information in the traditional sense, but we do utilize advertising cookies that may be considered a "sale" under California law. You can manage your cookie preferences via our Cookie Consent Manager.

European Privacy Rights (GDPR): If you are located in the European Economic Area (EEA), you have the right to lodge a complaint with a supervisory authority. Our legal basis for collecting and using your data is generally:

• Performance of a Contract: To provide our Services to you.
• Legitimate Interests: To improve our Site and market our business.
• Consent: For specific marketing activities.

To exercise any of these rights, please contact us at privacy@crequity.ai.

7. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies to track activity on our Site and hold certain information.

• Essential Cookies: Necessary for the operation of the Site (e.g., to log in securely).
• Analytics/Performance Cookies: Allow us to recognize and count visitors and see how they move around the Site (e.g., Google Analytics).
• Functionality Cookies: Used to recognize you when you return to the Site.
• Targeting Cookies: Record your visit to the Site, the pages you have visited, and the links you have followed to make the Site more relevant to your interests.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, some parts of the Site may become inaccessible or not function properly.

8. THIRD-PARTY WEBSITES

The Site may contain links to third-party websites (e.g., social media platforms, industry publications). We are not responsible for the privacy practices or the content of these third-party sites. We encourage you to read the privacy policies of every website you visit.

9. CHILDREN'S PRIVACY

Our Services are not intended for individuals under the age of 18 (or the applicable age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

10. INTERNATIONAL DATA TRANSFERS

CREQUITY.Ai is based in the United States. If you are accessing our Services from outside the U.S., please be aware that your information will be transferred to, stored, and processed in the United States. By using our Services, you consent to the transfer of your information to the U.S., which may have different data protection rules than your country. We will take steps to ensure that any such transfer complies with applicable data protection laws (e.g., using Standard Contractual Clauses for transfers from the EEA).

11. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Revised" date. If we make material changes, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification.

12. CONTACT US

If you have questions or comments about this Privacy Policy, or if you would like to exercise your privacy rights, please contact our Data Protection Officer / Privacy Team at:

Appendix: Jurisdiction-Specific Disclosures

(It is common practice to add short appendices or sections addressing specific state or country laws. You should ask your lawyer to draft these.)

• Nevada Residents: We are not currently required to respond to "Do Not Sell" requests under Nevada law, but you may contact us to opt-out of any future potential sales.
• Virginia/Colorado/Connecticut Residents: (If you do significant business in these states, specific provisions regarding profiling and opt-outs may be required).