Privacy Policy

The short version: we collect what a handoff needs and little else. Device credentials are the most sensitive thing we touch — they are encrypted, access-logged, used only to move your smart home from seller to buyer, never used to train AI models, and purged when the handoff is done. We don’t sell your information or use it for advertising.

This Privacy Policy explains how Veritas Ventures, LLC, doing business as “re-qi” (“re-qi,” “we,” “us”) collects, uses, shares, and protects personal information when you use our website, mobile applications, and smart-home handoff services (the “Service”). It applies to Sellers, Buyers, real estate Agents, and Title Company users, and to visitors to our site.

Information we collect

Information you provide

• Contact and account information — name, email address, phone number, role in the transaction, and login details.
• Transaction information — property address, closing date, and the identities of the parties to the handoff (provided by the initiating Agent or Title Company and by the parties themselves).
• Device inventory — the smart-home devices, accounts, services, and subscriptions the Seller enrolls, including brand, type, and location in the home.
• Device credentials — usernames, passwords, PINs, access codes, tokens, and recovery information for enrolled devices. This is sensitive information and is handled as described in “How we handle credentials” below.
• Home knowledge — optional information a Seller chooses to pass on: service contracts, utility details, shutoff locations, professional contacts, and similar records about the home.
• Payment information — processed by our payment processor (currently Stripe); we receive transaction confirmations and limited payment metadata, not full card numbers.

Information collected automatically

• Usage and device data — log data such as IP address, browser type, pages viewed, and actions taken in the Service, used for security, audit, and product improvement.
• Cookies — we use essential cookies for sign-in and security. We do not use third-party advertising cookies or cross-site tracking.

How we use information

• to provide the Service: orchestrating, verifying, and documenting the transfer of enrolled devices from Seller to Buyer;
• to communicate with you about your handoff (invitations, reminders, status updates, the Certificate) and respond to support requests;
• to secure the Service: authentication, fraud prevention, audit logging, and incident investigation;
• to process payments and maintain business records;
• to improve the Service, using aggregated or de-identified information that does not identify you;
• to comply with law and enforce our Terms.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

Automated processing and AI

Handoffs are executed primarily by automated systems, including artificial intelligence that navigates device vendors’ account and transfer flows. These systems act only within the purpose-limited authorization described in our Terms: taking custody of enrolled devices, severing the Seller’s access, and establishing the Buyer’s. Where automation cannot complete a step, trained re-qi personnel may access the relevant credentials to complete it; every access — automated or human — is recorded in an audit log available to the Seller and Buyer for their handoff.

• We do not use your credentials, camera feeds, recordings, or home data to train AI models.
• The Service does not use automated decision-making to produce legal or similarly significant effects about you without human involvement. If you believe an automated step in your handoff produced a wrong result, you may request human review at privacy@re-qi.com and a person with authority to correct it will review.

How we handle credentials

• Encryption — credentials are encrypted in transit (TLS 1.2+) and at rest with authenticated encryption (currently AES-256-GCM), with encryption keys held outside the database.
• Minimized custody — where a vendor supports it, we prefer revocable tokens and account reassignment over holding passwords at all.
• Access control and logging — access is limited to the systems and personnel executing your handoff, and every access is written to an immutable audit log.
• Purge — after both parties confirm completion (or a handoff is cancelled), credentials are purged from our systems on a scheduled basis. The Certificate and audit log, which do not contain usable credentials, are retained as the record of the handoff.

How we share information

• With your transaction parties — participants in a handoff see the information the process requires: the Agent and Title Company see status and the Certificate (never credentials); the Buyer receives control of enrolled devices and the home knowledge the Seller chooses to pass on.
• With device vendors — we interact with vendors’ systems on your behalf to effect transfers, which necessarily discloses information those systems require.
• With service providers — companies that host and operate parts of the Service under contract (cloud hosting and database, payment processing, transactional email). They may use your information only to provide services to us.
• For legal reasons — to comply with law or valid legal process, to protect the rights, safety, or property of users or re-qi, or in connection with a merger, acquisition, or sale of assets (with notice to you).

Retention

• Credentials — purged after handoff completion or cancellation, as described above.
• Certificates and audit logs — retained for the life of the record’s usefulness to the parties (at least seven years), since they serve as the durable proof of the handoff.
• Account, transaction, and payment records — retained as long as needed for the purposes above and to meet legal, tax, and audit obligations, then deleted or de-identified.

Security

We protect information with safeguards appropriate to its sensitivity — encryption in transit and at rest, hardened infrastructure, least-privilege access, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; our approach is to hold as little as possible, for as short a time as possible, and to notify affected users of any security incident as required by law.

Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to limit the use of sensitive personal information, and to appeal a decision on a rights request. We honor these requests for all users regardless of state. To exercise any right, email privacy@re-qi.com from the address on your account (we will verify your identity before acting). We will respond within the time required by applicable law, and we will not discriminate against you for exercising your rights. Note that some deletion requests cannot be honored mid-handoff (the Service needs the data to complete the transfer) or where retention is required by law; we will tell you if that is the case. Authorized agents may submit requests with proof of authorization.

Children

The Service is for adults involved in real estate transactions and is not directed to children under 18. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. If a change is material, we will give notice before it takes effect — by email or through the Service — and update the date at the top. Continued use after the effective date constitutes acceptance.

Contact us

Privacy questions or requests: privacy@re-qi.com. Security reports: security@re-qi.com.