Privacy Policy

Pull Signal is a real estate intelligence platform. We read public records to find early signs of development activity, place them on the parcel they affect, and help our subscribers find out who owns that parcel.

That means we handle two very different kinds of personal information, and this policy is organized around the difference:

• Part A — information about you, if you visit our website, request information, or use the platform as a subscriber.
• Part B — information about property owners and people connected to them, which we obtain from public records and other publicly available sources. If you have found this policy because your name appeared in Pull Signal, Part B is the section you want, and Section B.7 explains how to ask us to stop.

We have written this in plain language. It describes what we do.

Part A — Information about you

This part applies to visitors to pullsignal.ai, people who contact us, and subscribers and their authorized users.

A.1 What we collect

We do not collect Social Security numbers, government identification numbers, financial account numbers, biometric data, precise device geolocation, health information, or any special category of sensitive personal information about you.

A.2 How we use it

• To provide the platform, create and maintain your account, and authenticate you.
• To send the alerts and digests you have asked for, and to respond when you contact us.
• To operate, secure, troubleshoot, and improve the platform.
• To bill you, and to enforce our Terms of Service.
• To comply with law.

We do not use your account information or your activity to build advertising profiles, and we do not sell it.

A.3 Your watchlist is confidential

We do not sell, rent, or share the parcels you track or research. We do not disclose to any other Pull Signal user, or to any third party, which parcels you are watching or looking up. We treat that as your confidential information under our Terms of Service.

Where we use information about platform activity to improve the product, we use it only in aggregated and de-identified form that cannot reasonably be used to identify you, your organization, or the parcels you are interested in.

A.4 Cookies and tracking

We use two cookies, both strictly necessary: a session cookie that keeps you logged in, and a security cookie that protects against cross-site request forgery. Some interface preferences are kept in your browser's local storage, which stays on your device.

We do not use Google Analytics, Meta or LinkedIn advertising pixels, HubSpot, Segment, Mixpanel, Hotjar, FullStory, Clarity, or any other analytics, advertising, or session-replay tool. There are no third-party tracking scripts on our site or in the platform. Because we use only strictly necessary cookies, we do not display a cookie consent banner.

Map tiles are loaded from Esri, CARTO, and OpenFreeMap. Because your browser requests those images directly, those providers receive your IP address and the map area you are viewing. We do not send them your identity or your account information.

We do not respond to Do Not Track browser signals, because there is no common standard for them. We do honor recognized opt-out preference signals as described in Section C.3.

A.5 Email and text messages

We send transactional email — alerts, digests, account and billing messages — from our own systems through Amazon SES. You can turn alerts and digests off in your settings.

Text messaging is not currently available. No user can enable SMS in the platform. If we introduce it, we will ask for your express written consent first and will not send you text messages without it.

A.6 How long we keep it

We keep your account information for as long as your subscription is active and for a reasonable period afterward for records, disputes, and legal obligations. After termination, you may ask us for a copy of your My Projects and Watchlist entries for thirty (30) days, and we may delete your data after that.

Server request logs are retained by our hosting provider and age out automatically within one to three days.

Part B — Information about property owners

If you did not sign up for Pull Signal and are reading this because your name, your company, or your property appeared in it, this part is for you.

B.1 Where the information comes from

Everything in Pull Signal comes from public records and other publicly available sources. Specifically:

• County property appraiser records — parcel ownership, owner of record name, owner mailing address, lot size, assessed value, sale history, land use classification.
• Florida Division of Corporations (Sunbiz) — entity filings, registered agents, officers and managers.
• Municipal and county records — commission and council agendas and minutes, planning and zoning items, staff reports, permit filings, public land transactions.
• State and regional records — transportation plans, utility and infrastructure filings, statewide parcel mapping.
• Publicly accessible web sources — retrieved through an automated web search when a subscriber requests an owner lookup, including professional networking profiles, licensing databases, court records, and news.

We do not buy data from list brokers, people-search services, or data vendors. We have no commercial data-purchasing relationship of any kind. Everything we hold was publicly available at the time we retrieved it.

B.2 What we process about property owners

For every parcel we cover, we process the owner of record's name and mailing address from the county property appraiser.

When a subscriber requests an owner lookup, we additionally search for and may return: business affiliations and entity relationships, officers and registered agents, a professional networking profile, business contact details including phone numbers and addresses, and a short background summary assembled from public sources. This process runs against individuals as well as companies.

Some of this is assembled and summarized by artificial intelligence, and may be incomplete or incorrect. Section B.7 explains how to correct or remove it.

B.3 States where we do not perform lookups

We do not perform owner lookups where the owner of record's mailing address is in:

Texas · Oregon · Vermont · California · Connecticut · New Jersey

For those parcels, no lookup runs, nothing is sent to any third-party search or enrichment provider, and any owner information we previously stored for that parcel is deleted when the parcel is next opened.

This restriction is applied using the owner of record's mailing address as shown in county records. That address is not always where a person actually lives — for example, where a property is held by a company with a registered agent in another state. We apply the restriction based on the information available to us.

B.4 What we store, and for how long

We are describing this precisely rather than generally, because we think you are entitled to know.

We do not currently apply a fixed retention period to most of the records above. They are retained until deleted on request, refreshed from source, or removed by the subscriber who created them. We are implementing scheduled retention limits and will update this policy when they are in place.

B.5 Who else receives this information

We use service providers to operate the platform. They receive information only to perform services for us, under contract.

We do not disclose owner information to anyone else, except to our subscribers through the platform, and as described in Section C.5.

B.6 Artificial intelligence and our search provider

Owner lookups are performed by sending a request to OpenAI, which searches publicly available web sources and returns a result. We instruct OpenAI not to retain owner lookup requests. OpenAI states that it retains API requests for a limited period — currently up to thirty (30) days — for abuse monitoring, regardless of that instruction. We do not control that retention.

We do not use owner information, or anything our subscribers enter, to train artificial intelligence models, and our agreements do not permit our providers to do so.

B.7 How to have your information removed

If you are a property owner and you do not want Pull Signal to return information about you, email us:

privacy@pullsignal.ai

Tell us your name as it appears in property records and, if you can, the property address or parcel identifier. We may ask for enough information to be confident we are matching the right person — we ask for the minimum necessary and we do not use it for anything else.

When we honor a request, we will: add you to a suppression list so future lookups are refused; delete the owner information we hold about you; and keep only the minimum record needed to keep the suppression in effect. We will confirm when it is done.

We honor these requests from any property owner, anywhere, regardless of whether a law requires it.

Two limits we want to be honest about. First, we cannot remove your information from the public records it came from — those are held by county and state agencies, and you would need to approach them directly. Second, because our platform reads public records continuously, information about a property may reappear; the suppression list is how we prevent that, which is why we keep it.

Part C — Rights, security, and legal

C.1 Whether we "sell" personal information

Our subscribers pay for access to the Pull Signal platform, and the platform discloses information about property owners to them. Under some state privacy laws — including California's — a disclosure of personal information to a third party for monetary or other valuable consideration is treated as a "sale," and disclosure for certain advertising purposes is treated as "sharing," regardless of the business's intent or how central the activity is to its product.

We are telling you plainly: our handling of property owner information may constitute a "sale" of personal information under those laws. We take that position because we would rather describe our business accurately than rely on a narrow reading.

To be clear about what we do not do: we do not sell or share subscriber account information, we do not sell or share what our subscribers are researching, we do not disclose personal information for cross-context behavioral advertising, and we do not participate in any advertising exchange.

To opt out of any sale or sharing of personal information about you, email privacy@pullsignal.ai. For property owners, the removal process in Section B.7 accomplishes this and more.

C.2 Your privacy rights

Depending on where you live, you may have the right to know what personal information we hold about you, to get a copy of it, to correct it, to delete it, to opt out of its sale or sharing, and not to be discriminated against for exercising these rights. Some states also give you a right to appeal if we decline a request.

We extend these rights to everyone we hold information about, whether or not the law where you live requires it. Email privacy@pullsignal.ai and describe what you want. We will respond within forty-five (45) days, and will tell you if we need more time.

We will verify your identity in proportion to the sensitivity of the request. We do not charge for a reasonable request. If we decline one, we will tell you why and how to appeal.

You may use an authorized agent. We may ask for proof of their authority and for confirmation directly from you.

C.3 Opt-out preference signals

Where we can detect a recognized opt-out preference signal, such as Global Privacy Control, we treat it as a request to opt out of sale or sharing for that browser.

C.4 Security

We describe our security truthfully rather than aspirational.

• All traffic to the platform uses HTTPS, and all database connections require TLS.
• Data is encrypted at rest — stored files with AES-256, and the database with our provider's platform encryption.
• Passwords must be at least twelve characters and include multiple character types. We do not store passwords in readable form.
• Access to production systems is limited to the people who need it.
• All of our infrastructure is located in the United States.

We are a small and early company. We have not completed a third-party security audit, penetration test, or SOC 2 examination, and we will not claim otherwise. No system is perfectly secure, and we cannot guarantee that unauthorized access will never occur.

If a security breach affects your personal information, we will notify you and any required regulator as the law requires, including under Florida's Information Protection Act.

C.5 When we disclose information for legal reasons

We may disclose personal information if we believe in good faith that it is required by law, subpoena, court order, or other legal process; necessary to protect our rights, safety, or property, or those of our users or the public; or in connection with a merger, acquisition, financing, or sale of assets, in which case the recipient will be bound by this policy or one at least as protective.

Where the law allows and it is practical, we will notify the person concerned before disclosing.

C.6 Children

Pull Signal is a business tool and is not directed to anyone under eighteen. We do not knowingly collect personal information from children. If you believe a child has provided us information, email privacy@pullsignal.ai and we will delete it.

C.7 Where we operate

Pull Signal is a United States company and our systems are located in the United States. We do not offer the platform outside the United States. If you access it from elsewhere, understand that your information will be processed in the United States under United States law.

C.8 Changes to this policy

We will update this policy as the platform changes. We will post the new version with a revised effective date. If a change materially affects how we handle personal information, we will notify subscribers by email at least thirty (30) days in advance.

C.9 Contact

Pull Signal, Inc.
1830 Lake Drive
Delray Beach, Florida 33444

Privacy: privacy@pullsignal.ai

General: info@pullsignal.ai