← Back to QUAKE
Legal

Privacy Policy

Last Updated: October 27, 2026 · Version: 2026-10-25
Contents
  1. Introduction
  2. Information We Collect
  3. How We Use Information
  4. AI and Document Processing
  5. How We Share Information
  6. Identifiable Deal Data
  7. Aggregated and De-Identified Data
  8. Data Storage and Deal Vault
  9. Security
  10. Data Retention
  11. Cookies and Similar Technologies
  12. User Choices and Privacy Rights
  13. United States State Privacy Rights
  14. Children’s Privacy
  15. Third-Party Links and Services
  16. Business Transfers
  17. Changes to This Privacy Policy
  18. Contact Us

1. Introduction

This Privacy Policy describes how Quake Analytics, Inc. (“QUAKE,” “we,” “our,” or “us”) collects, uses, stores, protects, and shares information when you use the QUAKE website, application, underwriting tools, reports, Deal Vault, and related services (the “Service”).

QUAKE is a multifamily analysis and underwriting tool. It is an aid to your work. It is not legal, tax, investment, appraisal, or brokerage advice. Our Terms of Service govern use of the Service and are incorporated here where this Policy refers to them.

This Policy distinguishes four kinds of information:

2. Information We Collect

We collect information you provide, information created as you use the Service, and technical information generated by operating the Service. We do not collect every example below from every visitor.

Account Information

If you create a profile or sign in, we may collect:

Cloud sign-in is handled through Amazon Cognito. A profile you enter in the application may be stored in your browser until it is associated with a signed-in account. We do not operate a separate public directory of customer profiles.

Billing and Subscription Information

Payments are processed by Stripe, Inc. When you start a trial or buy a plan or credit pack, Stripe collects your card details and, where needed, your billing address and business tax ID on its own secure checkout page. QUAKE never receives or stores full card numbers. QUAKE stores the billing information needed to run your account: your Stripe customer and subscription identifiers, plan, billing cycle, trial and renewal dates, payment status, credit balances, and the version of the Terms of Service you accepted and when.

User Content and Deal Information

User Content may include:

You retain ownership of your User Content. The Terms grant QUAKE a license to host, copy, process, transmit, analyze, and display that content to provide, maintain, and support the Service, to prevent fraud and abuse, and to comply with law, and to create Aggregated Data as described in Section 7. QUAKE does not use your identifiable User Content to train generally available AI models without your prior written consent.

Usage and Technical Information

Operating the Service on Amazon Web Services may involve:

We do not use a third-party advertising network to build a profile of you across other websites.

3. How We Use Information

We use information to:

Uploaded identifiable deal documents are not published as public pages and are not sold as identifiable deals. See Sections 6 and 7.

4. AI and Document Processing

QUAKE uses automated systems and artificial intelligence to read documents and produce analysis and outputs. Those requests go through QUAKE’s backend on Amazon Web Services. Vendor API keys used for that work are stored in AWS Secrets Manager and are not sent from your browser to the vendor.

Through that backend, QUAKE currently uses:

The providers receive the information contained in the request QUAKE sends so they can return a result. This Policy does not state that a provider never retains that information, never uses it for model training, or keeps it only for a particular period. Those points depend on the provider’s terms and on QUAKE’s contract with the provider, which are not restated here.

AI outputs can be wrong or incomplete. You are responsible for reviewing them before you rely on them. The Terms describe that limitation in more detail.

5. How We Share Information

We share information in these circumstances:

Current subprocessors: Amazon Web Services (hosting, storage, Deal Vault, sign-in through Amazon Cognito, and delivery of sign-up verification emails), Anthropic (AI analysis), Perplexity (AI market lookups), and Stripe (payments).

Service providers receive information only as reasonably necessary to provide their services, subject to their agreements with QUAKE and to applicable law. We do not operate a separate email-marketing platform from the application reviewed for this Policy. A message you send through Contact QUAKE is a support request, not a sale of your deal file.

6. Identifiable Deal Data

QUAKE does not sell identifiable customer deal documents or identifiable deal information as a data product.

Consistent with the Terms, QUAKE does not sell or license data that identifies you, your company, your buyers, your sellers, or a specific deal without your prior written consent. Identifiable User Content stays subject to the license you grant in the Terms, which is limited to providing, maintaining, and supporting the Service, preventing fraud and abuse, complying with law, and creating Aggregated Data.

7. Aggregated and De-Identified Data

QUAKE may collect, aggregate, anonymize, de-identify, and combine User Content and account activity with information from other users to produce Aggregated Data. Aggregated Data is statistical, analytical, or benchmark information that does not identify you, your company, your specific deals, your buyers, your sellers, or any individual.

Examples described in the Terms include average cap rates, price per unit, occupancy, and rent growth by market characteristics; deal-velocity trends; pricing benchmarks; product analytics; and anonymized comparable information. QUAKE will not include personally identifiable information, your company name, your specific buyers or sellers, or any single identifiable deal in Aggregated Data without your explicit consent.

Aggregated Data does not identify you, any individual, or any specific property. Aggregated Data is QUAKE’s property, and QUAKE may use it for any lawful purpose, including:

Because Aggregated Data cannot reasonably be tied back to you, it is not deleted when you delete your account or User Content.

8. Data Storage and Deal Vault

Not every deal is uploaded to the cloud.

Local deals

A deal can remain on the device where you are working. Deal records, assumptions, and related working files may be stored in that browser until you save the deal to the cloud. Original document files are kept in the browser’s IndexedDB storage on that device and may remain there even when a deal name or analysis is saved elsewhere.

Cloud Deal Vault deals

Cloud sync runs while you are signed in with Cognito. A deal saved to the cloud Deal Vault is associated with that signed-in account and stored through QUAKE’s AWS infrastructure. A local deal that you have not chosen to save is not silently uploaded.

9. Security

QUAKE uses administrative, technical, and organizational safeguards designed to protect information. The application, delivery, sign-in, and backend run on Amazon Web Services. Connections to QUAKE use HTTPS. Analysis requests go through the QUAKE backend, and vendor API keys used for that work stay in AWS Secrets Manager.

No method of electronic transmission or storage is completely secure, and QUAKE cannot guarantee absolute security.

More about how QUAKE describes these protections is in Security on the QUAKE homepage.

10. Data Retention

QUAKE retains information for as long as reasonably necessary to provide the Service, maintain accounts, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and fulfill legitimate business purposes.

Within that standard, QUAKE applies these periods:

You may request earlier deletion as described in Section 12, subject to records we must keep for legal, security, or accounting reasons. Information that remains only on your device is under your control until you save it to the cloud or otherwise send it to QUAKE.

11. Cookies and Similar Technologies

The QUAKE application does not set browser cookies for advertising. It uses browser localStorage, sessionStorage, and IndexedDB to:

Stripe’s checkout and billing pages, which open when you pay or manage billing, are operated by Stripe and may use their own cookies under Stripe’s privacy policy.

QUAKE does not currently use third-party advertising cookies or cross-site tracking pixels. If you block local storage, sign-in, saved deals on that device, and parts of the workspace may not function.

12. User Choices and Privacy Rights

Depending on where you live, and subject to verification of your request, you may have rights to:

These rights are not the same in every location. This Policy does not promise a particular statutory right to every user.

To submit a privacy request, use Contact QUAKE and choose Security or another accurate subject. We will respond within the time required by applicable law. We may need to confirm that the request comes from you or from someone authorized to act for you.

13. United States State Privacy Rights

Residents of certain U.S. states may have additional privacy rights under applicable state law. Those rights can include the right to know, access, correct, delete, and appeal, and the right to opt out of certain sales, sharing, or targeted advertising, depending on the state and on whether the law applies to QUAKE.

This Policy does not state that every state privacy law applies to QUAKE, and it does not state that QUAKE meets or fails any revenue, volume, or other regulatory threshold.

We do not sell identified personal information. We may use and commercialize Aggregated Data that does not identify an individual user or a specific identifiable deal, as described in Section 7 and in the Terms. We do not use third-party advertising cookies to track you across other sites.

State privacy requests can be sent through Contact QUAKE.

14. Children’s Privacy

QUAKE is intended for business and professional users. It is not directed to children. The Terms require users to be at least 18 years old. We do not knowingly collect personal information from children. If you believe a child has provided personal information to QUAKE, contact us through Contact QUAKE and we will delete it if we have it, subject to records we are required to keep.

15. Third-Party Links and Services

The Service may link to third-party websites or rely on third-party services, including the providers named in this Policy and in the Terms. Their privacy practices are governed by their own policies. QUAKE is not responsible for those practices.

16. Business Transfers

If QUAKE is involved in a merger, acquisition, financing, restructuring, sale of assets, bankruptcy, or a similar transaction, information we hold may be transferred as part of that transaction, subject to applicable law. If ownership or the use of personal information changes as a result, we will notify you of that change.

17. Changes to This Privacy Policy

We may update this Policy. We will post the revised version on this page and change the Last Updated date. For a material change, we will also notify you by email or an in-product notice. Continued use of the Service after the updated Policy is posted is your acceptance of the revised Policy, as the Terms also describe.

18. Contact Us

Questions about this Policy, or a request to access, correct, delete, or opt out, can be sent through Contact QUAKE.

Quake Analytics, Inc.
103 W Camino Real #604, Boca Raton, FL 33432
Email: privacy@quakeus.com
Contact QUAKE