Privacy Policy
Last Updated: January 15, 2025
1. Introduction
nepestate ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our real estate investment platform and services (the "Service").
By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.
2. Information We Collect
2.1 Personal Information
When you register, invest, or use our Service, we collect:
- Account Information: Email address, password, username, phone number
- Profile Information: Full name, display name, occupation, home country, current residence
- Identity Verification (KYC/AML): Government-issued ID, passport, proof of address, tax identification numbers
- Financial Information: Bank account details, investment amounts, transaction history, source of funds
- Investment Preferences: Investment interests, deal participation, club memberships
2.2 Operator Information
For users applying as operators, we additionally collect:
- Business information and experience
- Professional references
- Background check information
- Property deal details and documentation
2.3 Automatically Collected Information
- Device Information: IP address, browser type, operating system, device ID
- Usage Data: Pages visited, features used, time spent on platform, click patterns
- Location Data: Country and city based on IP address
- Cookies and Tracking: Session cookies, authentication tokens, analytics data
3. How We Use Your Information
We use your information to:
3.1 Provide Services
- Process your registration and maintain your account
- Facilitate real estate investments and transactions
- Connect investors with operators
- Manage clubs and group investments
- Process payments and distributions
3.2 Legal and Compliance
- Verify your identity (KYC/AML requirements)
- Comply with legal obligations in multiple jurisdictions
- Prevent fraud, money laundering, and other illegal activities
- Report to tax authorities as required by law
3.3 Communication
- Send transaction confirmations and investment updates
- Provide customer support
- Send important platform updates and security alerts
- With your consent, send marketing communications about new deals
3.4 Platform Improvement
- Analyze usage patterns to improve our Service
- Develop new features and investment opportunities
- Personalize your experience based on your preferences
4. How We Share Your Information
4.1 With Other Users
- Public Profiles: Operator profiles are visible to all users
- Deal Information: Your name may be visible to operators when you express interest
- Club Members: Your profile may be visible to other members of clubs you join
4.2 With Service Providers
We share information with third-party service providers for:
- Payment processing (Stripe, local payment providers)
- Identity verification and KYC services
- Cloud hosting and data storage (AWS)
- Email services
- Analytics and monitoring
4.3 Cross-Border Operations
Due to our international nature, your information may be shared with:
- Local operators in countries where deals are located
- Local legal entities for property ownership structures
- Banking partners in multiple countries
- Regulatory authorities as required
4.4 Legal Requirements
We may disclose information when required by:
- Court orders or legal process
- Government authorities for tax reporting
- Law enforcement agencies
- To protect our rights and safety
4.5 Business Transfers
In case of merger, acquisition, or sale of assets, your information may be transferred to the successor entity.
5. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including:
- United States (platform operations)
- Nepal, Colombia, Dubai (deal operations)
- Countries where our service providers operate
We ensure appropriate safeguards are in place for international transfers through:
- Standard contractual clauses
- Data processing agreements
- Compliance with local data protection laws
6. Data Retention
We retain your information for:
- Account Data: Duration of account plus 7 years for financial records
- KYC Documents: 5 years after last transaction (regulatory requirement)
- Investment Records: Minimum 7 years for tax purposes
- Communications: 2 years or as required by law
7. Your Rights
Depending on your location, you may have the right to:
- Access: Request copies of your personal information
- Correction: Update or correct inaccurate information
- Deletion: Request deletion (subject to legal retention requirements)
- Portability: Receive your data in a structured format
- Opt-out: Unsubscribe from marketing communications
- Restriction: Limit processing of your information
To exercise these rights, contact: privacy@nepestate.com
8. Security Measures
We implement industry-standard security measures including:
- Encryption of sensitive data in transit and at rest
- Two-factor authentication options
- Regular security audits and penetration testing
- Secure cloud infrastructure with AWS
- PCI DSS compliance for payment processing
- Employee access controls and training
9. Children's Privacy
Our Service is not intended for individuals under 18 years of age. We do not knowingly collect information from children under 18. If we discover we have collected information from a child under 18, we will delete such information.
10. Cookies and Tracking Technologies
We use cookies and similar technologies for:
- Essential Cookies: Authentication, security, and platform functionality
- Analytics Cookies: Understanding usage patterns (Google Analytics)
- Preference Cookies: Remembering your settings and preferences
You can control cookies through your browser settings, but disabling certain cookies may limit functionality.
11. Third-Party Links
Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
12. California Privacy Rights (CCPA)
California residents have additional rights including:
- Right to know what personal information is collected
- Right to know if information is sold or disclosed
- Right to say no to the sale of personal information
- Right to equal service and price
We do not sell personal information to third parties.
13. European Privacy Rights (GDPR)
For European Economic Area residents:
- Legal Basis: We process data based on contract performance, legal obligations, legitimate interests, and consent
- Data Controller: nepestate, Inc.
- Supervisory Authority: You may lodge complaints with your local data protection authority
14. Updates to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via:
- Email notification
- Prominent notice on our platform
- Requiring acknowledgment for continued use
15. Contact Information
For privacy-related questions or concerns:
Email: privacy@nepestate.com
Data Protection Officer: dpo@nepestate.com
Mailing Address:
nepestate, Inc.
[Address Line 1]
[City, State ZIP]
[Country]
For Investment-Related Inquiries: support@nepestate.com
16. Jurisdiction-Specific Provisions
Nepal
We comply with Nepal's Individual Privacy Act 2018 and report to relevant authorities as required.
Colombia
We adhere to Colombian data protection laws (Law 1581 of 2012) and register with the RNBD as required.
United Arab Emirates (Dubai)
We comply with UAE Federal Law No. 45 of 2021 on data protection and DIFC data protection regulations.
United States
We comply with applicable federal and state privacy laws, including CCPA and state-specific regulations.
By using nepestate, you acknowledge that you have read and understood this Privacy Policy.