Privacy Policy

A.CRE Intelligence Hub

Effective: April 24, 2026

1. Overview

This Privacy Policy explains how Real Estate But It’s AI Now, LLC (“REBAIN,” “we,” “us,” or “our”), which operates the A.CRE Intelligence Hub (the “Hub”) at intelligence.adventuresincre.com under license from Adventures in CRE, LLC (“A.CRE”), collects, uses, and protects information when you access or use the Hub.

The Hub is an AI Multiplier available to members of the AI.Edge community at aiedge.ac. Your broader membership relationship is governed by the AI.Edge Privacy Policy. This Privacy Policy supplements that policy and specifically governs your use of the Hub. Where the two policies conflict with respect to Hub usage, this policy controls.

2. Information We Collect

We collect only what is necessary to verify your eligibility, authenticate your requests, and enforce usage limits.

Account information. When you access the Hub, we retrieve your name, email address, Circle.so community member ID, and AI.Edge Pro membership status from Circle.so. This verification runs on signup and again on a nightly schedule.

Authentication credentials. We generate a unique API key (your “connection link”) for your account. A SHA-256 hash of the key is used to authenticate each request. A short prefix of the key is stored in plain text for display purposes. The plain-text key itself is also stored in our database so that you can retrieve your personal connection link when returning to your dashboard; it is not displayed in any administrative view. You can rotate your connection link at any time from your dashboard.

Request metadata. For each API or MCP request your AI client makes to the Hub, we log:

• your account identifier,
• the endpoint path requested,
• the HTTP method (or, for MCP requests, the literal value “MCP”),
• the HTTP status code,
• the response latency in milliseconds,
• the entity count (billable lookup cost) of the request, and
• the timestamp of the request.

3. Information We Do Not Collect

To be explicit about what the Hub does not see or store:

4. How We Use Your Information

We use the information described in Section 2 exclusively to:

• verify your AI.Edge Pro membership status via Circle.so,
• authenticate your API and MCP requests,
• enforce the daily lookup cap (40 lookups per UTC day, resetting at midnight UTC),
• provide you with usage analytics via your dashboard,
• diagnose technical issues and improve Hub reliability, and
• comply with applicable legal obligations.

We do not use your information for targeted advertising, profiling beyond your own usage dashboard, or any purpose not described in this policy.

5. Third Parties and Sub-Processors

We do not sell, rent, license, or otherwise commercialize your information.

We share limited information with the following service providers strictly as necessary to operate the Hub:

• Google Cloud — the Hub, our database, and our internal data services are hosted on Google Cloud infrastructure in the United States.
• Circle.so — we query Circle.so with your email to verify your AI.Edge Pro membership status.
• Google Maps Platform — when your AI client requests a Google Maps image through the Hub, the address your AI provides is sent to Google for geocoding and imagery. Google’s handling of that request is governed by Google’s own terms and privacy policies.
• Specialized data services operated by REBAIN — the Hub proxies your AI’s queries to internal data services (for census demographics, employment data, rates, permits, economic indicators, and similar). These services operate under this same Privacy Policy and do not receive your identity; they see only an opaque service call from the Hub.

We may disclose information if required by law, subpoena, or court order, or where we reasonably believe disclosure is necessary to protect our rights or the safety of others.

6. No Training, No Reuse

7. Retention

We retain your account information and request metadata for the life of your account. We do not automatically delete or age out historical metadata, because the metadata we store is not sensitive and is useful for supporting you, diagnosing issues, and providing accurate usage history.

You may request deletion of your account and associated data at any time by emailing us at the address in Section 14. We will delete your account, authentication credentials, and all associated request metadata within thirty (30) days of receiving a verified request, except where retention is required by law.

If your AI.Edge Pro membership lapses, your account is automatically set to inactive and your connection link stops working. Your historical data is retained unless and until you request deletion.

8. Your Rights and Choices

Rotate your connection link. You may rotate your connection link at any time from your Hub dashboard. Rotation is immediate; the prior link stops working as soon as the new one is issued.

Access, export, and deletion. You may request access to, export of, or deletion of your account data by emailing us at the address in Section 14. We respond to verified requests within thirty (30) days.

California, EEA, UK, and Swiss residents. The AI.Edge Privacy Policy describes additional rights you may have under applicable law (including the CCPA/CPRA and GDPR). Those rights apply to your Hub data as well, and requests can be directed to the same address.

9. Security

We use reasonable administrative, technical, and physical safeguards to protect the information we collect. All connections to the Hub are encrypted in transit using TLS. Data stored in our managed database is encrypted at rest by the underlying infrastructure provider. Authentication keys are stored as one-way SHA-256 hashes for request authentication; the plain-text retention described in Section 2 is not exposed to administrators and is readable only to the account holder via the dashboard.

No method of electronic transmission or storage is completely secure. While we apply commercially reasonable protections, we cannot guarantee absolute security.

10. Breach Notification

In the event we become aware of a security incident affecting your personal information, we will notify affected users within seventy-two (72) hours where feasible, and report to relevant authorities where required by law.

Because your connection link is the only authentication credential we issue, the most effective response to a suspected compromise is to rotate your connection link immediately from your dashboard.

11. Children

The Hub is not directed to, and we do not knowingly collect information from, individuals under eighteen (18) years of age.

12. International Use and Data Residency

The Hub and all of its underlying infrastructure are operated from the United States. By using the Hub from outside the United States, you consent to the transfer and processing of your information in the United States, which may not provide the same level of data protection as your home country.

13. No Data Processing Agreements

Given the minimal scope of data we collect and the one-directional nature of the service, we do not offer custom Data Processing Agreements. Our Terms of Service and this Privacy Policy govern all use of the Hub, including use by members affiliated with enterprise organizations.

14. Contact

If you have questions, requests, or concerns about this Privacy Policy, please contact us at:

15. Changes to This Policy

We may update this Privacy Policy from time to time. Updated versions will be posted at intelligence.adventuresincre.com/privacy with a revised effective date. For material changes, we will provide additional notice by email or in-platform notification. Continued use of the Hub after the effective date of any update constitutes acceptance of the updated policy.