Privacy Policy

This Privacy Policy describes how CompNinja LLC, an Idaho limited liability company (file no. 6928558) ("CompNinja," "we," "us"), collects, uses, and shares information in connection with compninja.co (the "Service"). By using the Service, you agree to the practices described in this policy.

1. Information We Collect

We collect the following categories of information when you provide them:

• Search inputs. The property address, property type, lookback window, and any building attributes you enter, such as size, unit count, or clear height.
• Account information. Your email address, a password, and an optional profile photo you upload. Passwords are stored only as salted scrypt hashes and are never stored in plain text.
• Lead and broker-opinion requests. Your name, email address, phone number, company, and the property your request concerns.
• Saved work. Portfolio items and watchlist entries associated with your account, including any financial inputs you choose to save (see Section 2).
• Broker comp submissions. The submitting broker's contact details and the submitted comparable-sale data.

We also collect limited information automatically: IP addresses, used for rate limiting and abuse prevention; standard server logs; and aggregate analytics events. Analytics events are limited to a property type, a city and state, and an outcome, and do not include names, email addresses, or street addresses.

2. Information That Does Not Leave Your Browser

The financial inputs you may enter while analyzing a property, including net operating income, debt terms, rent roll, and gross income, are processed entirely within your browser. They are not transmitted to the AI model, they are removed on the server before any shared report link is stored, and they are not visible to any other user. The sole exception is your own portfolio: saving a report to a signed-in account stores these inputs in that account so your analysis can be restored across devices.

3. How We Use Information

We use the information described above to generate your reports; to connect broker-opinion requesters with independent local brokers; to send transactional email such as confirmations, password resets, and broker notifications; to process subscription billing; and to operate, secure, and improve the Service.

We do not sell personal information. The Service contains no advertising trackers and uses no third-party analytics cookies.

4. Service Providers

We share information with the following providers only as necessary to operate the Service:

• Anthropic performs the AI-assisted comparable search. It receives the property address, property type, and the building attributes you enter. It does not receive the financial inputs described in Section 2.
• Google (Gemini) may perform the AI-assisted comparable search. It receives the same information as Anthropic above, and does not receive the financial inputs described in Section 2.
• Supabase provides database hosting, and Render provides application hosting.
• Stripe processes subscription payments. Card details are provided by you directly to Stripe and are never transmitted to or stored on our servers.
• Resend delivers transactional email.
• Google (Street View imagery), Esri, OpenStreetMap, and CARTO provide map imagery and tiles.
• The US Census Bureau and Nominatim provide address geocoding.
• cdnjs and jsdelivr provide content delivery for the export feature.

5. Cookies and Local Storage

The Service sets a small number of essential cookies: cn_session, an httpOnly cookie that keeps you signed in; cn_guest, an httpOnly cookie used solely to enforce the free-search allowance for visitors without an account; and cn_vid, an httpOnly cookie holding a random identifier so that our own usage statistics can tell one visit apart from another; and, only for the duration of a sign-in with Google, cn_gstate, a short-lived httpOnly cookie that protects that sign-in against forgery and expires within minutes. The cn_vid identifier is a random number: it is not derived from your IP address, your device, or anything else about you, and it is never combined with data from other sites. For the free-search allowance the Service also stores a one-way hashed form of your IP address; the address itself is not retained. None of these cookies is used for advertising or cross-site tracking. Your browser's local storage holds preferences, report history, and map caches; that data remains on your own device.

6. Shared Report Links

If you publish a share link, the associated report becomes readable by anyone who has the link. The financial inputs described in Section 2 are removed before the shared copy is stored. Share links do not expire.

7. Data Retention and Deletion

We retain information for as long as it is needed to provide the Service. You may delete your account at any time from within the application (Workspace, Delete account); doing so removes the account and its saved data. To request deletion of lead or submission data, contact us at info@compninja.co.

8. Security

The Service is served exclusively over HTTPS. Passwords are stored as salted scrypt hashes, and database access is restricted. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Service is intended for business use and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the effective date at the top of this page. Your continued use of the Service after a change takes effect constitutes acceptance of the updated policy.

11. Contact

Questions about this policy or about your data may be directed to CompNinja LLC at info@compninja.co.