Privacy Policy

This Privacy Policy describes how Nestadia, Inc. (“Nestadia,” “we,” “us,” or “our”) collects, uses, discloses and retains personal information when you visit nestadia.com, use our related applications, or interact with us through those services (together, the “Platform”). It also explains the privacy choices available to you. It forms part of our Terms of Use and should be read together with any notice we give when collecting information for a particular transaction or feature.

The Platform supports property listings and transactions involving buyers, sellers, Legal Panel firms, an escrow company and independent engineers. Information is shared as described below to operate the Platform, support transactions, meet legal obligations, and protect users and the service.

1. Information we collect

What we collect depends on how you use the Platform and which services you request.

Information you provide

• Account and contact information, such as your name, email address, phone number, login credentials and account preferences.

• Listing and transaction information, such as property details and materials you submit; property links you send us; properties you save or ask about; reservation and transaction details; and your communications with Nestadia or other transaction participants.

• Identity and eligibility information, such as government-issued identification, proof of address, citizenship and residence, entity formation and ownership records, and information needed for identity, sanctions, anti-money-laundering or eligibility checks.

• Face-match information. When you reserve a property, a photo of your face that our identity-verification provider compares with your ID. Section 4 explains how this is handled.

• Financial information, such as source-of-funds documents where anti-money-laundering law requires them, and the bank name and last four digits of the account you will pay from. For sellers, payout account details, which we confirm by phone before any payment. We do not take card payments through the Platform.

• Support and communications information, including the contents of messages and requests you send us and the information needed to respond.

Information collected when you use the Platform

• Device and usage information, such as IP address, browser and device characteristics, pages and features used, timestamps, and security and diagnostic logs.

• Cookie and similar technology information, as described in Section 8.

• Inspection location. When a Site Verifier captures inspection photos, their device records its location so each photo is tied to the property. We do not otherwise collect precise location.

Information from other sources

We may receive information about you or a transaction from identity-verification providers, the escrow company, Legal Panel firms, Site Verifiers, other transaction participants, and public or legally available sources such as land registries.

Sensitive information. Government identification, face-match information, financial account information and precise location may be sensitive personal information under privacy laws. We use it only to verify identity, prevent fraud, meet legal obligations and carry out transactions you request — never for advertising.

2. How we use information

• To create and secure accounts, authenticate users, provide Platform features and respond to you.

• To run property listings, inquiries, reservations, verification and transactions, including connecting you with the firms and engineers involved.

• To verify identity and eligibility, run sanctions and anti-money-laundering checks, prevent fraud, and meet legal, regulatory and recordkeeping obligations.

• To coordinate property inspections and give engineers the property information they need.

• To send the alerts you ask for, such as saved-property, search and availability alerts, and — where you agree — news about Nestadia. You can unsubscribe at any time.

• To maintain, protect and improve the Platform, understand how it is used, and measure our advertising, as described in Section 8.

• To communicate about the Platform, transactions and policy updates, and to establish, exercise or defend legal claims.

We do not use personal information for purposes materially different from these without giving any notice or choice the law requires.

3. How information is disclosed

We disclose personal information to these recipients when reasonably needed for the purposes above:

• Service providers that support the Platform, such as hosting, identity verification, electronic signature, communications, analytics, customer support and security providers. They process information on our behalf under contract.

• Transaction professionals: the escrow company, the Legal Panel firm a buyer chooses, and Site Verifiers, so each can perform its role.

• Other transaction participants. We do not give a buyer’s name or contact details to a seller during our initial outreach or while the property is being verified. They are disclosed when a transaction needs them, for example in the purchase agreement and Transaction Joinder.

• Authorities, courts and regulators, when we believe disclosure is required by law, necessary to protect rights or safety, or needed to investigate fraud, security issues or unlawful activity.

• A successor or counterparty in a merger, financing, reorganization, acquisition or sale of all or part of our business, subject to appropriate protections.

Identity documents are processed by our identity-verification provider. The escrow company receives them once, over a secure channel, because US law requires it to run its own checks, and each regulated provider handles them under its own obligations. We do not give identity documents to a seller or a Legal Panel firm.

Sale and sharing. We do not sell personal information for money. We may let advertising partners place cookies or pixels on our public pages to measure and improve our ads. Under California and some other state laws, this can count as “sharing” or “targeted advertising.” You can opt out at any time through the Your Privacy Choices link at the foot of every page, and we honor Global Privacy Control signals. We never use or disclose identity documents, face-match information, financial information or precise location for advertising.

Text messaging. We do not sell or share phone numbers or text-message consent with third parties for their marketing.

4. Face-match information

When you reserve a property, our identity-verification provider compares a photo of your face with the photo on your ID. This creates biometric information.

• Consent. We ask for your consent on screen before the photo is taken. You can choose not to proceed; reserving a property then is not possible.

• Purpose. It is used only to confirm your identity and prevent fraud.

• Disclosure. It is processed by our identity-verification provider on our behalf, and disclosed to others only where the law requires. We never sell, lease or trade it, or otherwise profit from it.

• Retention. It is destroyed once your identity check is complete, and in any event within 3 years of your last interaction with us, unless the law requires us to keep it longer. Your ID images and check results are kept separately, as Section 7 describes.

• Protection. It is protected at least as carefully as our other confidential information.

5. Data security and transaction records

We use administrative, technical and physical safeguards designed to protect personal information, including encryption in transit and at rest. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Platform records transaction events in a ledger by reference and cryptographic hash. A hash is a digital fingerprint of a file; it does not contain the document, though it can be linked to a transaction. We do not place documents on the ledger in readable form.

Payment safety. Payment details appear only inside the Platform, from records we have checked through a separate channel. We never send payment details by email, message or phone, and they never change by email. If anyone gives you different payment details — even if they appear to come from us — it is fraud. Do not pay; contact us through the Platform.

6. Where information is stored, and international transfers

A US buyer’s personal information is generally stored in the United States. Property and seller records for a transaction are generally stored in the country where the property sits. Our service providers may process information in other countries where they operate, and privacy laws there may differ from those where you live. Where the law requires, we use appropriate safeguards for international transfers.

7. Retention

We keep personal information as long as reasonably needed to provide the Platform, complete and document transactions, meet legal obligations, resolve disputes, enforce agreements and maintain security. Periods vary by type of information:

• Identity verification and anti-money-laundering records are generally kept for at least 5 years after a transaction closes or an account ends, as US law requires.

• Transaction records, including the ledger, are kept for the life of the transaction and as long afterwards as legal, tax and dispute periods require.

• Face-match information is handled as Section 4 describes.

• Seller uploads. If a seller does not sign the Seller Agreement within 90 days of their last upload, or sooner if they ask, we delete that content. Copies we must keep by law, or that sit in routine backups, are deleted when those periods end.

When information is no longer needed, we delete it, de-identify it or restrict its use.

8. Cookies and similar technologies

• Strictly necessary technologies operate the Platform, keep you signed in, protect sessions and maintain security. They cannot be switched off.

• Analytics technologies help us understand how the Platform is used and improve it.

• Advertising technologies, such as pixels from advertising partners, measure and improve our ads. You can opt out through the Your Privacy Choices link, and we honor Global Privacy Control signals.

Where the law requires consent for non-essential technologies, we ask for it through a cookie banner. You can also control cookies through your browser settings. Disabling some technologies may affect Platform features.

9. Your privacy rights and choices

Depending on where you live, you may have the right to access, correct or delete personal information; to know how it is collected, used and disclosed; to receive a copy in a portable format; and to opt out of sale, sharing, targeted advertising or certain profiling. These rights have legal exceptions — for example, we must keep anti-money-laundering records for the periods the law sets.

How to make a request. Email legal@nestadia.com with “Privacy Request” in the subject line, and say which account or transaction it concerns. We will verify your identity before acting. An authorized agent may make a request for you; we may ask for proof of authority and verify your identity directly. We respond within the time the law requires and explain any refusal.

Appeals. If we decline your request, you may appeal by replying to our decision. We will respond within the time the law requires. If you are still unsatisfied, you may contact your state attorney general.

California residents. The CCPA, as amended, gives you the rights to know and access, delete, correct, opt out of sale or sharing, and limit the use of sensitive personal information, and not to be treated differently for using these rights. We use sensitive personal information only for purposes the CCPA permits without a right to limit, such as verifying identity and preventing fraud. To opt out of sharing, use the Your Privacy Choices link.

Marketing. You can unsubscribe from any marketing or alert email using its link, and reply STOP to any text. Messages about your account and transactions continue while they are needed.

10. Users outside the United States

Ghana and other property countries. Where a property, seller or transaction is in Ghana, we handle personal information in line with Ghana’s Data Protection Act, 2012 (Act 843), and you may exercise your rights under that Act through the contact details below. For other countries, the data-protection law named in the relevant Country Annex applies.

European Union and United Kingdom. If you live in the EU or UK, we process your personal information to perform our contract with you, to meet legal obligations, for our legitimate interests in running and securing the Platform, and, where required, with your consent. You have the rights the GDPR or UK GDPR gives you, and you may complain to your local data-protection authority.

11. Children

The Platform is for adults taking part in property listings and transactions. It is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has given us personal information, contact us at legal@nestadia.com and we will delete it.

12. Third-party services and links

The Platform may link to third-party websites, tools or providers. Their privacy practices are governed by their own notices and terms. This policy does not cover information a third party collects for its own purposes.

13. Changes to this policy

We may update this policy as our services or legal requirements change. We will post the revised version with a new “Last updated” date. If a change materially affects how we handle personal information, we will tell account holders by email or on the Platform before it takes effect, and obtain consent where the law requires.

14. Contact us

Nestadia, Inc. · Attn: Legal / Privacy · 131 Continental Drive, Suite 305, Newark, DE 19713 · legal@nestadia.com