LEGAL

Privacy Policy

Effective: January 2026

1. Data We Collect

When you submit a lead, intake, or contact form, we collect: name, email, phone (optional), company (optional), role, message content, and any property details you provide. We also store reCAPTCHA verification score, request timestamp, and originating source label. We do not knowingly collect data from persons under 18.

2. How We Use It

To (a) deliver requested reports, (b) send transactional emails via Resend, (c) process payments via Stripe, (d) prevent abuse via Google reCAPTCHA v3, (e) maintain a pilot ledger for our internal quality tracking, and (f) improve report methodology.

3. Third-Party Processors

Payments — Stripe, Inc. Emails — Resend / AWS. Anti-abuse — Google reCAPTCHA. Model inference — Anthropic (Claude) via Emergent. Hosting — Google Cloud. Each processor has its own privacy policy.

4. Data Retention

Lead and intake records are retained for 24 months for follow-up. Report data is retained indefinitely unless deletion is requested. Payment records are retained per applicable US tax law.

5. Your Rights

You may request access, correction, or deletion of your personal data by emailing ceo@pheigroup.com. We will respond within 30 days.

6. Cookies

We use only functional cookies (session, language preference, admin auth token). We do not run advertising or cross-site tracking cookies.

7. Security

Data is transmitted over TLS. Admin console is protected by token. Backups are encrypted at rest. No system is perfectly secure; report incidents to ceo@pheigroup.com.

8. Changes

We may update this policy. Material changes will be announced via banner or email to active users.

9. Contact

Data controller: PHEI Group — ceo@pheigroup.com — www.pheigroup.com.

Not an appraisal. Not investment advice. Model-assisted due diligence.