Privacy Policy

CRELYTIC iQ Intel ("iQ Intel," "we," "us") is a derivative commercial real estate intelligence platform operated by CRELYTIC. iQ Intel products — the Tenant Risk Index, Market Demand Heat Map, Credit Drift Alerts, and Company Intelligence API — are built on aggregated, de-identified research output originally produced through the TenantIQ platform. This Privacy Policy explains what information we collect from iQ Intel subscribers and API customers, how we use it, and your rights with respect to that information. This policy is a companion to, and does not replace, the TenantIQ Privacy Policy, which governs the upstream data pipeline.

We collect the following categories of information from iQ Intel users:

• Account information: your name, email address, and organization details provided at registration.
• Subscription and billing data: plan selection, billing address, and subscription status. Card details are handled by Stripe and are not stored on our servers.
• Watchlist and alert preferences: the commercial entities, industries, and geographies you elect to monitor through Credit Drift Alerts or the Market Demand Heat Map, and the thresholds, cadence, and delivery preferences you configure.
• API usage data: for Company Intelligence API customers, we log API key identifiers, endpoint paths, request timestamps, status codes, response sizes, and aggregate rate-limit counters.
• Device and usage data: pages visited, features used, device platform, browser, IP address (for security and rate limiting), and anonymized telemetry about service performance. iQ Intel uses essential session cookies only and does not use third-party tracking or advertising cookies (see Section 9).
• Communications: emails you send to support, feedback you submit, and your subscription preferences for transactional and digest emails sent from intelligence@crelytic.ai.

iQ Intel products are built on de-identified, aggregated research output originally generated through the TenantIQ platform. Before TenantIQ research data reaches any iQ Intel product, it passes through a de-identification and aggregation pipeline that:

• Strips all TenantIQ customer identifiers so no downstream product reveals which CRELYTIC customer originally requested a given research report.
• Retains only market-level geography (city and state); no street-level address data flows into iQ Intel products.
• Applies minimum-N aggregation thresholds (for example, N ≥ 3 per industry-period bucket for the Tenant Risk Index and N ≥ 5 per city-period bucket for Market Demand) so that published figures cannot be attributed to any individual TenantIQ customer or research request.
• Limits company-entity content to commercial context. iQ Intel does not publish, resell, or distribute consumer credit data or personally identifiable information about individual consumers.

For the complete upstream data ownership, licensing, and aggregation framework, see sections 5 and 6 of the TenantIQ Privacy Policy.

We use the information we collect to:

• Provide, operate, maintain, and improve the iQ Intel platform and products.
• Deliver subscribed products (TRI quarterly publications, Market Demand digests, drift alerts, API responses).
• Process subscription payments and manage billing.
• Monitor and protect the service against abuse, fraud, and security threats.
• Communicate with you about your account, subscription, service updates, security notices, and material changes to this policy. Transactional messages are delivered from intelligence@crelytic.ai; non-transactional digests include an unsubscribe link.
• Calibrate and improve CRELYTIC's aggregation models, benchmark methodology, and derivative data products.
• Comply with legal obligations and enforce our Terms of Service.

iQ Intel products describe commercial entities — businesses, not consumers. iQ Intel is nota consumer reporting agency as defined by the Fair Credit Reporting Act (FCRA), and iQ Intel outputs are not "consumer reports" under the FCRA. You may not use iQ Intel products, alerts, or API responses to make any decision about an individual consumer's eligibility for credit, insurance, employment, housing, or any other FCRA-regulated purpose, and you may not use iQ Intel outputs to make discriminatory leasing or employment decisions based on protected characteristics. See the Terms of Service for the full acceptable-use provisions.

iQ Intel integrates with the following third-party services:

• Supabase — database, authentication, storage (US-hosted).
• Vercel — web application hosting and CDN.
• Railway — backend services for drift detection and the Company Intelligence API.
• Cloudflare — DNS for crelytic.ai.
• Stripe — subscription billing and payment processing.
• Resend — transactional and digest email delivery.
• Anthropic — AI analysis used upstream by TenantIQ to produce the research output that feeds iQ Intel. Anthropic processes prompts and responses under its commercial terms and does not use API inputs or outputs to train its models.
• Brave Search — web search used upstream by TenantIQ to source publicly available business context for research reports.

Each vendor operates under its own privacy policy. Several vendors (including Supabase, Vercel, Anthropic, Stripe, and Resend) are US-based, and data may be processed in the United States. Where applicable, we rely on European Commission Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum for transfers of personal data from the EEA, UK, or Switzerland to the United States.

• Active accounts: account information and subscription data are retained while your account is active.
• Canceled accounts: customer-facing account data is retained for 90 days after cancellation to allow for reactivation or data export, then deleted.
• API logs: retained for up to 12 months for security, abuse investigation, and billing dispute resolution, then deleted or aggregated.
• Derivative data: the aggregated, de-identified commercial-entity data powering iQ Intel products is owned by CRELYTIC and retained indefinitely, independent of your account status. It does not identify you or your organization.

We apply industry-standard security measures, including encryption in transit (TLS 1.2+), encryption at rest (AES-256), Row Level Security for customer-facing data, segregated schemas for derivative data, rate limiting, CSRF protections on state-changing requests, and SSRF protections on server-side fetches. No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

iQ Intel uses essential cookies for authentication and session management only. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. Essential cookies are strictly necessary for the operation of the service and cannot be disabled while using the platform.

With respect to your account and customer-facing data, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Request deletion of your account and customer-facing data, subject to our retention obligations.
• Export your account data and subscription configuration in a machine-readable format.
• Withdraw consent to future processing by canceling your subscription and deleting your account.

California residents. If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"), gives you the right to know what personal information we collect, to request deletion or correction of that information, to opt out of the sale or sharing of your personal information, to limit the use of sensitive personal information, and to be free from retaliation for exercising these rights. iQ Intel does not sell personal information, and does not share personal information for cross-context behavioral advertising. Our derivative data products describe commercial entities (not individual consumers), meet CCPA's de-identification criteria, and fall outside the CCPA's scope of "personal information" for purposes of sale or sharing.

EEA, UK, and Swiss residents. If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR), the UK GDPR, or the Swiss Federal Act on Data Protection (as applicable) gives you the right to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to lodge a complaint with your local supervisory authority. We process your personal data on the basis of contract performance (to deliver the subscription you have signed up for), legitimate interest (to secure and improve the service, limited by the commercial- entity and de-identification scope described above), and consent (where separately obtained, for example for non- transactional digest emails).

The rights described above apply to your customer-facing account data. They do not extend to the aggregated, de-identified derivative data powering iQ Intel products, because that data (a) is owned by CRELYTIC, (b) does not identify you or your organization, and (c) is commingled across the full customer base such that extraction of your contribution is not technically feasible.

To exercise any of these rights, contact us at jonathan@crelytic.ai. We will respond within 30 days (GDPR) or 45 days (CCPA), as applicable, and may extend those periods as permitted by law.

iQ Intel is a business-to-business service and is not directed to children under 16. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. For material changes, we will notify account holders via email and post a notice in the application. Non-material changes will be posted here with an updated "Last updated" date. Your continued use of iQ Intel after the effective date constitutes acceptance of the revised policy.

Questions about this Privacy Policy:

CRELYTIC iQ Intel
Email: jonathan@crelytic.ai