Privacy Policy

Buy Box Cartel LLC ("Buy Box Cartel," "we," "our," or "us") operates BuyBoxCartel.com, a platform connecting real estate wholesalers with cash buyers and investors.

This policy explains what personal information we collect, why we hold it, who we share it with, and how you can ask us to change or delete it. It applies to our website, our applications, and to calls, texts and emails we send.

When you create an account or use the platform, we collect:

• Identity and contact — name, email address, phone number, business name
• Account — password (stored only as a one-way encrypted hash, never in readable form), settings, team membership
• Payment — handled by our payment providers. We receive confirmation and subscription status; we never see or store your full card number
• Business information — buy box criteria, target markets, deal history, proof of funds documents you upload
• Communications — messages, support tickets, and notes from calls with our team

This section applies to you if you appear in our records without having signed up. We want to be direct about it rather than bury it.

To identify likely cash buyers and property owners, we obtain information from public records and from commercial data providers. This can include name, business or LLC name, postal address, phone number, email address, property ownership and transaction history, and inferred investment preferences.

If your details reached us this way, you did not give them to us and you did not agree to anything. You can ask us at any time to tell you what we hold, correct it, stop contacting you, or delete it entirely. See section 9. We will not require you to create an account to make that request.

• Usage — pages visited, features used, searches run, timestamps
• Device and connection — IP address, browser and device type, operating system
• Cookies and similar — to keep you signed in, remember preferences, and understand how the product is used
• Call records — where our team calls you, we log the number, time and duration. If a call is recorded, you will be told at the start of that call
• Lightning Leads Chrome extension — on listing sites such as Zillow, Redfin and Realtor.com the extension reads the property address on the page so it can show its Analyze button. Only when you press Analyze (or choose it on an address you highlighted) does it send that one address to Buy Box Cartel, to open the property card in Chrome's side panel under your account. It does not read or send anything else from the sites you visit, does not track your browsing, and keeps the list of addresses you have analyzed on your own computer

• To provide the platform, your account, and the deals and listings you ask for
• To contact you about deals, your account, and transactions you are part of
• To take payment and manage subscriptions
• To verify identity and proof of funds where a transaction requires it
• To improve the product, diagnose faults, and keep the service secure
• To meet legal and record-keeping obligations

We do not sell your personal information, and we do not share it with third parties for their own marketing.

We share information with service providers who process it on our behalf, under contract, and only for the purposes above. The categories, and the providers we currently use:

• Messaging and calls — Twilio (SMS and voice), SendGrid (email), Sendbird and Pusher (in-app messaging and notifications)
• Payments and subscriptions — Stripe, Whop
• Hosting and storage — Supabase, Heroku, Vercel, Redis
• Property and market data — BatchData, Rentometer, Mapbox, SpotCrime and similar providers
• Customer relationship and support — Salesmate, Intercom, ClickUp
• Analytics, logging and monitoring — PostHog, New Relic, Papertrail
• Advertising — Meta (Facebook and Instagram). Our website uses the Meta Pixel, which tells Meta which pages and deals you view, so we can show our deal ads to people who have looked at deals. When we advertise a deal, we may also send Meta a scrambled copy of the email and phone number of buyers who signed up for deals, so the ad can reach them. Meta matches the scrambled details and then deletes them. You can opt out in your Facebook or Instagram ad settings, or email support@buyboxcartel.com and we'll leave you out.
• Artificial intelligence services — OpenAI and Anthropic, used to summarise and analyse deal information. We do not send them your payment details or your password

We may also disclose information where the law requires it, to protect our rights or someone's safety, or as part of a merger or sale of the business.

• Account information — while your account is open, and for a period afterwards where we need it for legal, tax or dispute reasons
• Transaction records — as long as required by law
• Opt-out records — kept indefinitely, because we need them to know not to contact you again. This is the one record we cannot delete on request without risking contacting you by mistake
• Call recordings, where made — retained only as long as needed for training and dispute resolution

Where you have agreed to receive text messages from us, we use your mobile number to send the messages you agreed to and nothing else. Message frequency varies. Message and data rates may apply.

You can stop messages at any time by replying STOP to any message, or by contacting us at support@buyboxcartel.com. You may also withdraw consent by any other reasonable means, including by telling a member of our team during a call. We will action it within ten business days and will send you a single confirmation message.

Reply HELP to any message, or email support@buyboxcartel.com, for help.

Whether or not you have an account with us, you can ask us to:

• Tell you what personal information we hold about you
• Correct anything that is wrong
• Delete your information
• Stop contacting you by phone, text or email
• Provide a copy of your information in a portable format

Email support@buyboxcartel.com with your request. We will respond within the timeframe the applicable law requires, and in any case within 45 days. We will not charge you, and we will not treat you differently for asking.

Depending on where you live, you may have additional rights under state privacy law, including in Oregon, California, Colorado, Connecticut, Texas, Utah and Virginia.

We protect information with encryption in transit, access controls, and one-way hashing of passwords. No system is perfectly secure, and we cannot guarantee absolute security.

The platform is not intended for anyone under 18, and we do not knowingly collect information about children.

If we change this policy we will update the effective date above, and we will tell account holders directly where the change is significant.

Questions: support@buyboxcartel.com, or write to Buy Box Cartel LLC, 5441 S Macadam Ave Ste R, Portland, OR 97239, United States.