Privacy policy
AppraiseQ and the AQ order tracker are run by RS Solutions, India ("we", "us"). This page explains what we collect, why, where it is kept, and how you can have it deleted. Questions: use our contact form.
What we collect
- Account details: your name, email address and time zone, and your reminder and alert settings.
- Email you forward to AQ: the full messages that arrive at your personal AQ forwarding address, and what we read from them (orders, addresses, due dates, fees, payments and account notices).
- Subscription status: your PayPal subscription ID, plan and status. We never see or store your card or bank details; PayPal handles them.
- Sign-in records: your password, stored only as a salted scrypt hash (we can't read it), one-time email codes, and a sign-in cookie.
- Your team: the name and email of each person you add as a photographer or data-entry helper, whether they accepted, and the job emails AQ sent them for you.
- Contact form messages: your name, email, message and the IP address it came from (to stop spam).
- Services orders: when you use our data services, the order files and details you send us to work on. If you share an MLS or vendor-portal login for that work, it is stored encrypted, seen only by the AppraiseQ staff handling your request, never emailed, and deleted after 30 days.
What we use it for
Only to run the service you signed up for: to send your reminders, statements and alerts, to show your orders on your dashboard, to bill you, to do the services work you ask for, and to answer you. We do not sell your data, we do not use it for advertising, and we do not share it with your vendors.
Support access. To help you or fix a problem, a member of the AppraiseQ team can open your account and see what you see. Every such visit and every change made during it is logged. The team can also cancel your subscription or delete your account, for example when you ask us to; only you can start a subscription.
We never email your vendors. AQ sends mail only to your own sign-up address. Where AQ drafts a statement for a vendor, it is sent from your own mailbox, and only after you approve it. The only other people AQ emails are team members you added who accepted your invite, and only the jobs you assign them.
Where it is held and who helps us
| Provider | What it does | Where |
|---|---|---|
| Hetzner | Our server, which holds your AQ account and mail | Finland (EU) |
| Google Drive | Nightly backups of our server, encrypted before they leave it (Google can't read them) | Google's data centres |
| Cloudflare | Receives mail at your forwarding address and passes it straight to our server (holding it briefly only if our server is unreachable) | Global network |
| Resend | Delivers the emails AQ sends you | Global network |
| PayPal | Takes tracker subscription payments (PayPal account or card) for RS Solutions | Under PayPal's own privacy terms |
Each provider handles your data only to do that job for us. Services work is done by our team in India.
Cookies
This website sets no cookies and runs no analytics or ad trackers. The tracker at app.appraiseq.com sets one cookie to keep you signed in, and nothing else.
How long we keep it
While your account is open. When you delete your account in Settings, your account and forwarded mail are removed from our server at once; if you ask us to delete it instead, within 30 days. Copies in our encrypted backups expire on their own within 12 months. Contact form messages are kept for up to 2 years.
Your choices
- Stop forwarding at any time by turning off the forwarding filter in your Gmail settings. Nothing more reaches AQ.
- Download your data or delete your account yourself, any time: in the tracker, Settings → Your data. Deleting removes your account and forwarded mail at once.
- Fix anything AQ read wrong by opening the order in the tracker, or ask us through our contact form from the email address on your account.
- Cancel your subscription on the Billing page of the tracker, or in PayPal.
Security
Our server accepts connections only over HTTPS, passwords are stored only as salted hashes, repeated wrong passwords lock the account for 15 minutes, and backups are encrypted before they leave the server.
Changes
If we change this policy in a way that matters, we will email account holders before it takes effect.