Privacy Policy

This Privacy Policy explains how Note Central LLC, a North Carolina limited liability company doing business as Note Central (“Note Central,” “we,” “us”), collects, uses, shares, and protects information in connection with the website at notecentral.com and related services (the “Platform”). It is part of, and incorporated into, our Terms of Service. By using the Platform, you agree to this policy.

1. Information we collect

We collect information you provide, information generated by your use, and information from third parties.

• Account information — name or display name, email, phone, password (stored only as a salted hash by our authentication provider), account type (for example individual, broker, institution, or fund), and role.
• Profile information — optional details you add, such as a display name, bio, company, profile photo, and notification or visibility preferences.
• Listing and transaction content — Notes you list, the deal facts you enter, documents you upload for diligence, offers you make or respond to, and messages you exchange with other users through the Platform. If you accept our account-level confidentiality agreement, we record the acceptance as evidence — including the agreement version, a timestamp, and the IP address and browser user-agent at the time of acceptance.
• Borrower and third-party information — listings and documents may contain information about borrowers or other third parties (see Section 2).
• Payment information — when you pay for a feature, our payment processor collects and processes your payment-card details. We do not store full card numbers; we receive limited information such as the last four digits and a transaction status.
• Usage and device information — pages viewed, searches run, listings viewed, approximate location derived from network information, browser and device type, and log data. See Sections 4 and 5.
• Communications — messages, support requests, and feedback you send us.

2. Borrower and third-party information

Listings may contain information about borrowers or other third parties. Sellers represent that they have the legal right to share that information and that doing so complies with applicable law. We treat sensitive borrower information as confidential and disclose it only to signed-in users with an active account who have accepted our confidentiality agreement, which binds them to keep it confidential. If you believe information about you was shared improperly, contact us at privacy@notecentral.com.

3. How we use information

• operate, maintain, and secure the Platform, and provide search, listings, and the confidentiality-agreement, offer, and messaging workflows;
• create and manage your account, profile, and preferences;
• facilitate diligence, offers, and buyer–seller messaging on the Platform;
• review content and communications submitted through the Platform — including buyer–seller messages — to prevent fraud and abuse, enforce our Terms (including their confidentiality and non-circumvention provisions), keep the Platform secure, and comply with law;
• process payments and prevent fraud and abuse;
• send transactional messages (for example confirmations, alerts you request, and security notices);
• send marketing communications where permitted (see Section 6);
• understand and improve the Platform through analytics; and
• comply with law and enforce our Terms.

Messages you exchange with other users are delivered through our systems and are not private from Note Central: authorized personnel may access and review them for the purposes described above, as further described in our Terms of Service.

Our legal bases, where applicable, include performance of our contract with you, your consent, our legitimate interests in operating and securing the Platform, and compliance with legal obligations.

4. Cookies and tracking technologies

We use strictly necessary cookies to provide core functionality, such as keeping you signed in and remembering your theme preference. We do not use third-party advertising cookies and we do not sell your personal information. Because the cookies we use are limited to those needed to run the Platform, some regions may not require a consent banner; where one is required, we will honor your choices. You can control cookies through your browser, though disabling necessary cookies may break core features.

5. Analytics

We use privacy-preserving, first-party analytics to understand site traffic. For each page view we record the path visited, coarse geographic information (country, region, and city) derived at our edge network, and whether the visitor was signed in. To count unique visitors without tracking individuals over time, we store only a one-way daily hash derived from network and device information together with a rotating secret — we do not store raw IP addresses or full device identifiers, and the hash cannot reasonably be reversed. We also record listing-view counts. This information is used in aggregate to operate and improve the Platform.

6. Marketing communications

With your consent or as otherwise permitted by law, we may send you marketing emails about the Platform. Every marketing email includes an unsubscribe link, and you can opt out at any time; we honor list-unsubscribe and one-click unsubscribe. Opting out of marketing does not stop transactional messages necessary to operate your account.

7. How we share information

We do not sell your personal information. We share information only as described here:

• With other users — your public profile and listing details are visible to users, and gated listing details are shared only with signed-in users who have accepted our confidentiality agreement. Other users see your display name; we do not share your email address or phone number with them, and offers and messages between users are relayed on the Platform rather than exchanged through personal contact information.
• With service providers — vendors that process data on our behalf under contract, including cloud hosting and database, payment processing, email delivery, e-signature, and (where used) automated-analysis providers. These providers may process data outside your state or country.
• For legal reasons — to comply with law, legal process, or a government request; to enforce our Terms; or to protect the rights, safety, and property of Note Central, our users, or the public.
• In a business transfer — in connection with a merger, financing, acquisition, or sale of assets, subject to this policy.

8. Third-party integrations

We rely on reputable third parties to run the Platform. Categories include cloud hosting and database (which stores account, profile, listing, and document data), payment processing, transactional and marketing email delivery, application hosting and content delivery, and — where enabled — automated analysis tools. Each processes information only as needed to provide its service and under its own terms and privacy practices. Documents you upload are stored with access controls so they are available only to authorized users.

9. Google Sign-In and Google user data

If you choose “Continue with Google,” Google authenticates you and returns a limited set of profile information to us. Because that information comes from a Google API, we describe it separately and specifically here.

• Data we access — we request only the openid, userinfo.email, and userinfo.profile scopes. From these we receive your name, your email address, your Google profile picture URL, and the unique identifier Google assigns to your account. We do not request or receive access to Gmail, Google Drive, Contacts, Calendar, Photos, or any other Google service, and we never receive your Google password.
• How we use it — solely to create and authenticate your Note Central account, to recognize you when you return, to pre-fill your display name, and to send you transactional email about your account, your listings, and your deals. We do not use Google user data for advertising or to build advertising profiles. The profile picture shown on your public Note Central profile is one you upload yourself; we do not copy your Google profile picture onto the Platform.
• How we share it— we do not sell Google user data, and we do not share it with third parties for advertising. It is handled only by the infrastructure providers that operate the Platform on our behalf — our authentication and database host and our email delivery provider — each acting on our instructions, and by us where disclosure is required by law or necessary to protect the Platform. Other users never see the email address associated with your account; they see only the public profile described in “How we share information” above.
• How we store and protect it— your name, email address, and Google account identifier are stored in our authentication provider’s managed database, encrypted in transit, protected by row-level access controls, and reachable by only a small number of authorized personnel. The safeguards described in “Security” below apply to this data in full.
• How long we keep it and how to delete it— we keep it for as long as your account is active. You can delete your account yourself at any time from your account settings, which removes your profile and the Google-derived identifiers associated with it, subject to the limited records described in “Data retention” below that we must keep for legal, tax, and anti-fraud purposes. You can also revoke Note Central’s access from your Google Account permissions page, or email us using the contact details at the end of this policy and we will delete it for you.

Note Central’s use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

10. Data retention

We retain personal information for as long as your account is active and as needed to provide the Platform, and thereafter as required to comply with legal, tax, accounting, and regulatory obligations, resolve disputes, prevent fraud, and enforce our agreements. Some records (for example confidentiality-agreement acceptance records, offer and transaction logs, and payment records) are retained after account closure where we have a legal or legitimate-interest basis. When information is no longer needed, we delete or de-identify it.

11. Security

We use administrative, technical, and organizational measures designed to protect information, including encryption in transit, row-level access controls in our database, scoped access to uploaded documents, hashed credentials, and limited internal access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential and for the security of your own systems.

12. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. You can update much of your information directly in your account settings, and you can opt out of marketing at any time. To exercise other rights, contact us at privacy@notecentral.com. We will not discriminate against you for exercising your rights, and we will verify your request before acting. We do not sell or “share” personal information for cross-context behavioral advertising.

13. Account deletion

You may request deletion of your account and associated personal information by using the controls in your account settings where available, or by emailing privacy@notecentral.com from your account email. On a verified request, we will deactivate your account and delete or de-identify your personal information, except for information we must retain for legal, compliance, fraud-prevention, or dispute-resolution purposes, and except for content already shared with other users under the confidentiality agreement. Deletion may take a reasonable period to propagate across backups.

14. Children’s privacy

The Platform is intended for adults and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

15. International users

We operate in the United States, and the Platform concerns U.S. real estate notes. If you access the Platform from outside the United States, you understand that your information will be processed in the United States, where data-protection laws may differ from those in your jurisdiction.

16. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide reasonable notice. Your continued use of the Platform after changes take effect constitutes acceptance.

17. Contact

For privacy questions or to exercise your rights, contact us at privacy@notecentral.com.