Privacy Policy

Nimbus Portfolio - Effective Date: October 4, 2026 | Version 2.0

What changed in October 2026

We now explain how our AI features and AI providers work and how apps you connect get your information, and we corrected our security, retention and service provider sections.

Our Commitment to Privacy

At Nimbus Portfolio, we are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our real estate intelligence platform and services.
By using our Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use our Service.

Information We Collect

Personal Information You Provide

  • • Name, email address, and contact information
  • • Account credentials and authentication information
  • • Property and financial data you enter
  • • Communication preferences and support interactions
  • • Payment and billing information (processed securely by third parties)
  • • Documents you upload or forward to your document vault, and the text we read from them
  • • Questions you ask Chene, Nimbus's AI assistant, and its answers
  • • Apps you connect: which app, the permissions you chose, when it connected, and a record of which Nimbus tools it used and when. We do not receive your conversation with that app.

Financial Information (via Plaid Integration)

With your explicit consent, we may collect financial information through our integration with Plaid, including:
  • • Account balances and transaction history
  • • Property-related financial transactions
  • • Credit and loan information

Automatically Collected Information

  • • Usage data and analytics (pages visited, features used)
  • • Device information (browser type, operating system)
  • • IP address and location data (general geographic area)
  • • Cookies and similar tracking technologies
  • • Performance and error logs

How We Use Your Information

Data TypePurposeLegal Basis
Account InformationAccount creation, authentication, and communicationContract performance
Financial Data (via Plaid)Tracking your homes, loans and property financesExplicit consent
Property DataReal estate analysis and reportingContract performance
Usage AnalyticsService improvement and personalizationLegitimate interest
Communication RecordsCustomer support and service deliveryContract performance

Additional Uses

  • • Provide, maintain, and improve our Service
  • • Answer your questions and check on your homes with Chene, our AI assistant
  • • Answer requests from apps you connect, within the permissions you choose
  • • Process transactions and send related information
  • • Send technical notices, updates, and support messages
  • • Respond to your comments and questions
  • • Monitor and analyze usage and trends
  • • Detect, prevent, and address technical issues
  • • Comply with legal obligations and enforce our terms

AI Features and AI Providers

Nimbus uses AI to answer your questions, read your documents and describe local markets. To do that, we send the part of your Nimbus information a request needs to these providers, who process it for us:
  • • Anthropic (Claude): Chene's answers, answers about your documents, and some place lookups.
  • • OpenAI: turning your documents into search data so we can find the right passage.
Under their business terms, these providers do not use what we send them to train their models. We never send your Nimbus password or the credentials that link your bank. Answers about your documents include the document text itself, so anything written in a document you upload can reach these providers.
Nimbus never shows or uses the race, ethnicity, religion, national origin, sex, age, or family makeup of a neighborhood, in our AI features or anywhere else. AI answers can be wrong, so check important numbers before you act on them.

Apps You Connect

You can connect apps such as Claude, ChatGPT or Meta Muse to your Nimbus account. When you do:
  • • You choose what the app can do: see your homes, loans, values, flagged items and market data; see your bank and manual transactions (optional); read your documents (optional, Portfolio+); and make changes you confirm in the chat (optional).
  • • Nimbus sends the app only what its requests ask for, within the permissions you chose.
  • • Loan balances and transactions that came from your bank through Plaid go to a connected app only within those permissions. Transactions need their own permission, which is off unless you turn it on.
  • • A change happens only after you say yes in the chat. You can undo it for 30 days in Settings, Connected apps.
  • • Once Nimbus sends information to a connected app, that app's company handles it under its own privacy policy and terms. Depending on your settings with that company, that can include using it to improve its AI. Nimbus cannot delete copies held by that app.
  • • You can see each app's recent activity, change its permissions or disconnect it at any time in Settings, Connected apps. Changing your password disconnects every app.

Information Sharing and Disclosure

We Do NOT Sell Your Personal Information

We do not sell, trade, or otherwise transfer your personal information to third parties for monetary consideration.

When We Share Information

  • • With your explicit consent
  • • With apps you connect to your account, within the permissions you choose
  • • With service providers who help us run our Service, under their contracts with us
  • • With AI providers that process information for us (see AI features)
  • • With financial institutions through Plaid (for data aggregation services)
  • • With our property value and rent estimate provider: the address of a property you add, to estimate its value and rent
  • • To comply with legal obligations or court orders
  • • To protect our rights, property, or safety, or that of our users
  • • In connection with a business transfer or acquisition

Third-Party Service Providers

  • • Plaid (bank connections)
  • • AI model providers, such as Anthropic and OpenAI
  • • Cloud hosting and database
  • • Document storage and text reading
  • • Payment processing
  • • Email delivery
  • • Product analytics
  • • Error monitoring
  • • Maps and address lookup
  • • Property value and rent estimates (receives the address of a property you add)
  • • Domain and network services
A current list of the companies we use is available on request at steven@nimbusportfolio.com.

Data Security and Protection

Security Measures

  • • Encryption in transit (HTTPS) and at rest with our hosting providers.
  • • Bank connection credentials are encrypted and never shown to Nimbus staff or sent to AI providers.
  • • Access to production data is limited to the people who run Nimbus.
  • • Connected apps get short-lived access that you can revoke at any time.

Data Retention

  • • We keep your information while your account is open.
  • • When you delete your account, we delete your account, property, transaction, document and connected-app information. We keep only what the law requires, such as billing records held by our payment processor.
  • • Records of which tools a connected app used are kept for 90 days.
  • • You can ask us to delete your information at any time at steven@nimbusportfolio.com.

Your Privacy Rights

Access and Control

  • • Access your personal information
  • • Correct inaccurate or incomplete data
  • • Delete your account and associated data
  • • Export your data in a portable format
  • • Opt out of marketing communications
  • • Withdraw consent for data processing

How to Exercise Your Rights

To exercise any of these rights, please contact us at steven@nimbusportfolio.com or through your account settings. We will respond to your request within 30 days.

GDPR Rights (EU Residents)

  • • Right to access and portability
  • • Right to rectification and erasure
  • • Right to restrict processing
  • • Right to object to processing
  • • Right to withdraw consent
  • • Right to lodge a complaint with supervisory authority

CCPA Rights (California Residents)

  • • Right to know what personal information is collected
  • • Right to know whether personal information is sold or disclosed
  • • Right to say no to the sale of personal information
  • • Right to access personal information
  • • Right to equal service and price

Cookies and Tracking Technologies

Types of Cookies We Use

  • • Essential cookies: Required for basic site functionality
  • • Analytics cookies: Help us understand how you use our Service
  • • Preference cookies: Remember your settings and preferences

Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our Service.

International Data Transfers

Our providers may process information in the United States and other countries, under safeguards such as Standard Contractual Clauses where required.

Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:
  • • Posting the updated Privacy Policy on our website
  • • Sending you an email notification
  • • Providing notice through our Service
  • • Updating the "Last Updated" date at the bottom of this policy

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: steven@nimbusportfolio.com
This Privacy Policy is effective as of October 4, 2026, and replaces all previous versions.
Last Updated: October 4, 2026 | Version: 2.0