Privacy Policy

Effective Date: March 30, 2026 · Last Updated: March 30, 2026

1. Information We Collect

1.1 Information You Provide to Us

We collect information you voluntarily provide when you use our Site, including when you:

• Submit information through our waitlist or sign-up form, including your first and last name, email address, phone number, estimated credit score range, and property information (address, property type, estimated value)
• Contact us via email or other communication channels
• Respond to surveys, promotions, or other requests for information

1.2 Information We Collect Automatically

When you visit the Site, we may automatically collect certain information about your device and usage, including:

• IP address, browser type and version, operating system
• Pages viewed, time spent on pages, referring URLs
• Device identifiers and general location data (city/state level, not precise geolocation)

We collect this information using cookies, pixels, and similar tracking technologies. See Section 7 below for more detail.

1.3 Information We Do Not Collect

We do not currently collect Social Security numbers, full credit reports, financial account numbers, government-issued identification numbers, or any other sensitive financial information through the Site. Our waitlist form collects only a self-reported estimated credit score range — we do not perform credit pulls (hard or soft) based on waitlist submissions.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Waitlist and communications: To add you to our prelaunch waitlist, contact you about product availability, and provide personalized investment estimates when our product launches
• Site operation and improvement: To operate, maintain, and improve the Site and our services
• Analytics: To understand how visitors use the Site, analyze trends, and improve user experience
• Legal compliance: To comply with applicable laws, regulations, and legal processes
• Security: To detect, prevent, and address fraud, security issues, and technical problems

3. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We do not share your personal information with originator partners, lenders, or other financial service providers.

We may share your information in the following limited circumstances:

• Service providers: We may share information with third-party vendors who perform services on our behalf, such as website hosting, email delivery, and analytics. These providers are contractually obligated to use your information only to provide services to us and are prohibited from using it for their own purposes.
• Legal requirements: We may disclose information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, the safety of others, or to investigate fraud.
• Business transfers: If Heivest is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on the Site before your information becomes subject to a different privacy policy.

4. Your Rights Under California Law (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with the following rights:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business purpose for collecting the information, and the categories of third parties with whom we share the information.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (such as information necessary to complete a transaction or comply with legal obligations).
• Right to Correct: You have the right to request that we correct inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information as those terms are defined under the CCPA/CPRA. If this practice changes, we will update this policy and provide a conspicuous opt-out mechanism.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise any of these rights, please contact us using the information in Section 10 below. We will verify your identity before processing your request and respond within 45 days as required by law.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by law. If you request deletion of your information, we will delete or de-identify it within 45 days of verifying your request, unless an exception applies.

6. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, use, alteration, and disclosure. However, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security, and you provide information at your own risk.

7. Cookies and Tracking Technologies

The Site may use cookies and similar technologies to collect information about your browsing activity. You can control cookies through your browser settings. Disabling cookies may limit your ability to use certain features of the Site.

We may use the following types of cookies:

• Essential cookies: Necessary for the Site to function properly
• Analytics cookies: Help us understand how visitors use the Site (e.g., Google Analytics)

We do not use advertising or retargeting cookies at this time. If this changes, we will update this policy accordingly.

8. Third-Party Links

The Site may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to read the privacy policies of any third-party sites you visit.

9. Children's Privacy

The Site is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a person under 18, we will take steps to delete that information promptly.

10. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights under California law, or have a complaint about our privacy practices, please contact us at:

Heivest Financial, Inc.
Email: privacy@heivest.com

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated policy on this page with a revised “Last Updated” date. Your continued use of the Site after any changes constitutes your acceptance of the updated policy. If we make material changes, we will provide prominent notice (such as a banner on the Site or an email notification to users who have provided their email address).