Effective and last updated: October 22, 2026
Looking for our security overview? Read about encryption, tenant isolation, and AI boundaries on the Security page.
AI Everywhere Corporation, a Delaware corporation, doing business as OwnerLM (referred to in this policy as OwnerLM, we, us, or our), provides a portfolio context platform, managed artificial intelligence services for real estate owners, and related compute services through ownerlm.com, our applications, our application programming interfaces, and the other products and services that link to this policy (collectively, the Service).
This Privacy Policy describes how we collect, use, share, and protect personal information through the Service, through OwnerLM clusters installed at customer sites, and through our marketing, sales, and support activities described in this policy.
California Notice at Collection and State Privacy Rights Notice: See the State Privacy Rights Notice near the end of this policy for important information about your rights under applicable state privacy laws, including a chart of the categories of personal information we collect and disclose.
If you have questions about this policy, contact us at privacy@ownerlm.com.
We collect personal information in the categories described below. The categories depend on how you use the Service, which integrations you connect, and whether OwnerLM hardware is installed at a property you own, manage, or visit as part of a customer deployment.
Account and workspace data. When you create an account or are added to a workspace, we collect your name, email address, organization name, role, and whether you are the primary owner of the account. We also collect the username and password or single sign on credentials used to access the Service, your preferences, and other information you add to your profile. We support single sign on through Google and Microsoft.
Property, portfolio, and deal data. Customers provide information about properties and portfolios, including property addresses, unit counts, year built, ownership entities, financial information, key performance indicators, notes, and photos. This information may relate to a business property and may also include personal information where it identifies an individual owner, manager, or other person.
Uploaded documents and files. Customers upload documents and files to the Service, including PDF, Excel, CSV, and Word files, images, audio, and video. We extract text, structure, and embeddings from uploaded content so it can be searched, summarized, cited, and used by the Service on behalf of the customer who provided it.
Conversations and meeting content. Where a customer uses meeting, conversation, or note features, we collect transcripts, recordings, agendas, notes, attendee names, and statements made by attendees. The customer who enables recording or transcription is responsible for providing required notices and obtaining required consents, as described in the Customers as controllers section below.
Email content. If you connect a mailbox to the Service, or if you send mail to an inbound address we provide for your workspace, we collect the email body, attachments, and metadata such as sender, recipients, date, and subject. We access only the mailbox or messages you authorize or direct to the Service.
SMS and chat messages. If you use text message or chat features, we collect the messages you send and receive through the Service, opt in records, and action tokens used to confirm actions you take by message.
Bank data. If you connect a bank or financial account through Plaid, we receive account balances, transactions, and related account information through secure application programming interfaces provided by Plaid. We never receive or store your bank login credentials. Those credentials are handled by Plaid.
Property management system data. If you connect a property management system or another business system, we receive the data you authorize through secure application programming interfaces, which may include balances, transactions, units, leases, and resident information. We never receive or store your login credentials for those systems.
File storage and calendar integration data. If you connect a file storage service or a calendar service, we collect the files, folders, events, and related information within the scope you authorize. You can disconnect an integration at any time, as described in the Your choices section.
Contacts. We collect information about brokers, vendors, lenders, partners, and other contacts that you add to the Service or import into it. Our artificial intelligence tools may suggest contacts or contact details, but a user must confirm a suggestion before it is added as a contact of record.
Transactional and payment data. We collect information needed to complete purchases and maintain subscriptions, including plan details, order and invoice history, and billing contact information. Payment card information is collected and processed directly by Stripe, our payment processor. We do not store payment card numbers. Stripe may use payment data in accordance with its own privacy policy.
Marketing and communications data. We collect your preferences for receiving marketing communications, details about your engagement with those communications, and information you provide when you contact us, request a demonstration, attend an event, complete a survey, or otherwise communicate with us through the Service, by email, by phone, through chat features, or on social media.
AI usage records. When you use artificial intelligence features, we collect your inputs and prompts, the responses generated for you, citations to your source material, and token or credit counts associated with your use.
Other data you provide. We collect other information you choose to provide that is not listed above, and we will use it as described in this policy or as disclosed at the time of collection.
We may combine personal information we receive from you with personal information we obtain from other sources, including the following.
Public sources, such as government agencies, public records, public websites, and other publicly available sources.
Enrichment data fetched on your behalf. At your direction or as part of a feature you use, we may fetch information from public sources about a property, market, or business, including ratings and reviews, weather information, market and economic indicators, and content from competitor websites. We use this information to provide the analysis or output you requested.
Data providers and partners, such as information services, data licensors, marketing partners, and event co sponsors.
Customers and users in your workspace, who may provide information about you as a team member, contact, meeting attendee, or other participant.
Service providers that provide services on our behalf or help us operate the Service or our business.
Business transaction partners. We may receive personal information in connection with an actual or prospective business transaction, such as a merger, acquisition, financing, or sale of assets.
Third party services you connect. When you log into the Service with, or otherwise link your account to, a third party service such as Google or Microsoft for single sign on, or Plaid or Stripe for financial or payment functions, we receive the information made available to us based on your account settings and authorization with that service.
We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and your interaction over time with the Service and our communications, including the following.
Device data, such as your computer or mobile device operating system type and version, manufacturer and model, browser type, screen resolution, device type, IP address, unique device identifiers, language settings, and general location information such as city, state, or geographic area inferred from IP address.
Online activity data, such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to the Service, navigation paths between pages or screens, information about your activity on a page or screen, access times and duration of access, last seen information, feature usage, and whether you opened our emails or clicked links within them.
Error and support data, such as error reports, diagnostic information, session information, and the content of support conversations with our team.
Communication interaction data, such as your interactions with our email, text, or other communications, including whether you open or forward an email. We may do this through pixel tags, also known as clear GIFs, embedded in our emails.
We do not collect precise geolocation from your device unless a feature you use requires it and you authorize it. If a feature offers location controls, you can disable access in your device settings.
Where OwnerLM clusters or related hardware are installed at a customer site, the Service collects operational telemetry from that equipment and, where the customer connects building systems, from those systems. This category is a core part of the Service and includes the following.
Power draw and electrical performance for the cluster.
Temperature and other thermal data for the equipment and its immediate environment.
Network performance, including throughput, latency, and connection status.
GPU utilization, compute job performance, and related hardware health data.
Uptime, availability, fault, and maintenance data.
Where the customer connects them, building systems data such as heating, ventilation, and air conditioning telemetry, building automation system telemetry, access events, and IoT sensor data from the property.
This telemetry is operational data about equipment and building systems. It may become associated with a property, a customer account, or individuals where, for example, access events or sensor data identify a person who entered an area or used a system. We treat telemetry that identifies an individual as personal information under this policy.
Compute customer data. Businesses that buy compute capacity through OwnerLM, directly or through our own or partner marketplaces, provide account and contact data, billing data, and usage data, including hours used, capacity reserved, application programming interface usage, and support communications. We collect that data to provide, bill for, secure, and support the compute service.
We offer features that let users invite team members, share reports and site pages, assign tasks, and add contacts. We collect contact details and other information about those individuals as described above so we can deliver invitations, shares, assignments, and related messages. Do not share another person’s contact details or other personal information with us unless you have their permission or another lawful basis to do so.
Cookies are small text files stored on your device. We use essential cookies only for authentication, session management, security, and remembering the choices needed to keep you signed in and the Service working.
We do not use third party advertising cookies or cross-site tracking cookies. We do not do interest based advertising, and we do not use cookies or similar technologies to build advertising profiles about you or to serve you targeted ads on other sites.
Some automatic collection described above is carried out through server logs, session records, and pixel tags in emails we send, rather than through advertising trackers. You can configure most browsers to block or delete cookies. If you block essential cookies, parts of the Service that require sign in may not work.
Artificial intelligence technologies. Features of the Service use large language model providers to process inputs you provide and generate responses for you. We use those providers under enterprise terms that prohibit them from training their models on your data. A provider processes the content needed to complete the request you made and returns the output to your workspace.
For information about choices relating to marketing emails, account data, integrations, and state privacy rights, see the Your choices section and the State Privacy Rights Notice below.
We use personal information for the purposes described below, or as otherwise described at the time of collection.
Service delivery and operations. We use personal information to provide the Service, create and maintain your account and workspace, operate OwnerLM clusters and compute services, enable security features, facilitate invitations, shares, and task assignments you direct, communicate with you about the Service including announcements, updates, security alerts, and support and administrative messages, communicate about events or programs in which you participate, and provide support and respond to your requests, questions, and feedback.
Service personalization. We use personal information to understand your needs and interests, personalize your experience with the Service and our related communications, remember your selections and preferences, and surface your own portfolio information, documents, and prior work back to you inside your workspace.
Service improvement and analytics. We use personal information to analyze use of the Service, understand user activity such as which pages and features are used, troubleshoot and improve the Service and the rest of our business, and develop new products and services. Where we use aggregated or de-identified data for these purposes, we apply the rules in the Our data rules section below.
Direct marketing. We may send you direct marketing communications about OwnerLM, and we may personalize those messages based on your needs and interests and your engagement with our communications. You may opt out of marketing communications as described in the Your choices section. We do not use Raw Customer Data, as defined below, for direct marketing to other customers.
Compliance and protection. We use personal information to comply with applicable laws, lawful requests, and legal process, such as responding to subpoenas, investigations, or requests from government authorities; to protect our, your, or others’ rights, privacy, safety, or property, including by making and defending legal claims; to audit our internal processes for compliance with legal and contractual requirements and our internal policies; to enforce the terms that govern the Service; and to prevent, identify, investigate, and deter fraudulent, harmful, unauthorized, unethical, or illegal activity, including cyberattacks and identity theft.
Corporate events. We may use and share certain personal information in the context of actual or prospective corporate events, as described in the How we share personal information section below.
Aggregated and de-identified data. We may create aggregated, de-identified, or anonymized data from personal information and other information we collect, subject to the limits in the Our data rules section below. We make data de-identified by removing or altering information that identifies a specific individual or customer, and we will not attempt to re-identify de-identified data, except for the purpose of testing whether our de-identification processes comply with applicable law. We may use aggregated and de-identified data internally to operate, secure, analyze, and improve the Service, including understanding portfolio and compute operations at an aggregate level for our own operations. We do not sell, share for commercial purposes, or otherwise commercialize aggregated or de-identified data, or operational telemetry derived from a customer, without that customer’s explicit written consent given under a separate signed engagement for that purpose. Absent that consent, external commercialization does not happen. If a customer signs such an engagement, the state law opt out rights described in the State Privacy Rights Notice will then apply to that sharing as described there.
Further uses. In some cases we may ask for your consent to use your personal information for a purpose that is not compatible with the purpose for which it was first collected. Where we ask, we will not use it for that further purpose without your consent.
These rules govern Customer Data across the Service and override any inconsistent general statement elsewhere in this policy.
Customer Data means the data a customer and its authorized users provide to, upload to, connect to, or generate in the Service, including property and portfolio data, uploaded documents, email and meeting content, financial data received through connected systems, and resident, lease, and transaction data received through connected systems.
We never sell Raw Customer Data or other personal or financial data.
We never share Raw Customer Data across customers. Your workspace data is isolated from other customers through row-level security and per tenant storage controls described in the Security section, and access is scoped by role to the portfolios and properties a user is authorized to see.
We never use Raw Customer Data or personal or financial data to train artificial intelligence models. Artificial intelligence processing of your content is performed to provide the output you or your workspace requested, under enterprise no training terms with our model providers.
We do not sell personal information. We also do not sell, share for commercial purposes, or otherwise commercialize a customer’s data, including aggregated or de-identified data and operational telemetry derived from that customer, sometimes called data exhaust, without that customer’s explicit written consent given under a separate signed engagement for that purpose. Absent that consent, it does not happen. Internal use of aggregated or de-identified data and operational telemetry to operate, secure, and improve the Service is permitted. Examples of permitted internal use include aggregate compute utilization, aggregate power and thermal performance, and de-identified operational benchmarks used to run and improve the Service. If a customer signs such a separate engagement, the sharing described in that engagement will be carried out only as agreed in it, will not include Raw Customer Data in identifiable form unless that engagement expressly provides otherwise and the law permits it, and the state law opt out rights in the State Privacy Rights Notice will then apply as described there.
Inference for a customer’s own artificial intelligence features may run on that customer’s own on site nodes, in our cloud, or through our model providers, depending on the feature and configuration. We do not make a blanket promise that data never leaves a site or building.
We retain personal information for as long as your account is active and as needed to fulfill the purposes for which we collected it, including satisfying legal, accounting, reporting, and financial record requirements, establishing or defending legal claims, and preventing fraud.
To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it and whether we can achieve those purposes through other means, and applicable legal requirements.
When you delete an item in the Service, the extracted data, embeddings, and citations derived from that item are also deleted, subject to routine backup cycles and legal retention duties described below.
When you close your account, we will permanently delete your personal information and Customer Data within 30 days after closure, except where we must retain certain information for legal or financial reasons, such as invoices, payment records, tax records, and records needed to establish or defend legal claims. Information retained for those reasons is isolated from further processing except as needed for that reason, and is deleted when the reason ends.
When we no longer require personal information, we will delete it, anonymize it, or isolate it from further processing.
We share personal information only as described in this policy, in other applicable notices, or at the time of collection. We do not sell personal information. We do not share personal information for cross context behavioral advertising or targeted advertising, and we do not share Raw Customer Data across customers.
Affiliates. We may share personal information with our corporate parent, subsidiaries, and affiliates, for the purposes described in this policy and subject to its limits.
Service providers and subprocessors. We share personal information with third parties that provide services on our behalf or help us operate the Service or our business, such as hosting and information technology, customer support, artificial intelligence model providers, email delivery, analytics relating to Service operation and improvement, research, security, and payment and financial connection services. Our subprocessors act under data processing agreements that limit their use of personal information to providing services to us and require appropriate safeguards. Enterprise customers may request a detailed subprocessor list under a nondisclosure agreement by contacting security@ownerlm.com. A Data Processing Addendum is available for enterprise customers at security@ownerlm.com.
Payment processors. Payment card information you use to make a purchase on the Service is collected and processed directly by Stripe. We do not store card numbers. Stripe may use payment data in accordance with its privacy policy.
Financial connection providers. Bank data is received through Plaid under your authorization. Plaid processes that data in accordance with its own terms and privacy policy for the connection you authorized.
Third parties designated by you. We share personal information with third parties where you instruct us to do so or provide consent. This includes people you share a report, site page, or workspace content with through a share link you create, tools and services you connect through an integration, and external tools you authorize through our application programming interfaces or Model Context Protocol tools. When you create a share link or authorize a tool, information accessed through that link or tool is governed by your direction and by the recipient’s own practices. You can revoke a share or disconnect a tool as described in the Your choices section.
Partners. We may share personal information with third parties with whom we partner to jointly offer products or services, co sponsor events or promotions, or provide a feature you use, subject to the data rules in this policy. We do not give partners Raw Customer Data for their own marketing or commercial use. Any partner use of a customer’s data for a commercial purpose beyond providing the Service requires that customer’s explicit written consent under a separate signed engagement, as described in the Our data rules section.
Professional advisors. We share personal information with professional advisors, such as lawyers, auditors, bankers, and insurers, in the course of the professional services they render to us.
Authorities and others. We share personal information with law enforcement, government authorities, and private parties as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described in this policy.
Business transferees. We may disclose personal information in the context of actual or prospective business transactions, such as investments in OwnerLM, financing of OwnerLM, or the sale, transfer, or merger of all or part of our business, assets, or shares. For example, we may share certain personal information with prospective counterparties and their advisors under confidentiality protections. We may also disclose personal information to an acquirer, successor, or assignee as part of a merger, acquisition, sale of assets, or similar transaction, or in an insolvency, bankruptcy, or receivership in which personal information is transferred as a business asset. We will require a successor to honor the commitments in this policy for personal information collected under it, or to obtain consent where the law requires it.
Aggregated and de-identified information. We may use aggregated or de-identified information internally to operate, secure, analyze, and improve the Service. We do not sell, share for commercial purposes, or otherwise commercialize aggregated or de-identified data, or operational telemetry derived from a customer, without that customer’s explicit written consent given under a separate signed engagement for that purpose. Absent that consent, external commercialization does not happen. If a customer signs such an engagement, the sharing described in that engagement will be carried out as agreed, and the state law opt out rights in the State Privacy Rights Notice will then apply to that sharing as described there.
Other users. Information you make available to other users of the Service through a workspace, share, comment, task assignment, or similar feature will be visible to those users as you directed. That information can be copied or stored by the recipients, and we are not responsible for their further use of it.
Access or update your information. If you have an account, you may review and update certain account information by logging into your account. You may also contact us at privacy@ownerlm.com to request an update.
Opt out of marketing communications. You may opt out of marketing related emails by following the opt out or unsubscribe instructions at the bottom of the email, or by contacting us at privacy@ownerlm.com. If you opt out of marketing emails, you may continue to receive service related and other non marketing emails.
Delete your content or close your account. You can delete certain content through your account. Deleting an item removes the extracted data, embeddings, and citations derived from it, as described in the Retention section. If you wish to close your account, contact us at privacy@ownerlm.com or use the account closure controls in the Service where available. Account closure triggers permanent deletion within 30 days, subject to legal and financial retention as described in the Retention section.
Disconnect integrations. You can disconnect a connected mailbox, bank connection, property management system, file storage service, calendar service, or other integration at any time in the Service or by contacting us. Disconnecting stops future collection from that source. It does not delete information already received; you may delete that information through your account or request deletion from us.
Share links and authorized tools. You can revoke a share link, change sharing permissions, and revoke access for an application programming interface key or Model Context Protocol tool you authorized, through the Service. Revocation stops future access through that link, key, or tool.
Global Privacy Control. We honor Global Privacy Control signals as valid requests to opt out of the sale or sharing of personal information, as required by applicable law. We do not sell personal information and we do not share it for targeted advertising, so a Global Privacy Control signal will be recorded as an opt out that applies if our practices ever change or if you have signed an engagement of the kind described in the Our data rules section.
Cookies. For information about the essential cookies we use and how to control them in your browser, see the Cookies and tracking technologies section above. Blocking essential cookies may prevent sign in and other core functions from working.
Blocking images and clear GIFs. Most browsers and devices allow you to configure your device to prevent images from loading, which will also block clear GIFs. Follow the instructions in your browser or device settings to do so.
Do Not Track. Some internet browsers may be configured to send Do Not Track signals to online services you visit. We currently do not respond to Do Not Track signals. To find out more about Do Not Track, visit allaboutdnt.com.
Declining to provide information. We need to collect certain personal information to provide the Service. If you do not provide information we identify as required, we may not be able to provide the related service or feature.
Linked third party platforms. If you connect to the Service through a third party platform, you may use the settings in your account with that platform to limit the information we receive from it. Revoking our access does not affect information we already received from that platform, which you may delete as described above.
Customers use the Service to upload, sync, and process information about third parties, including residents and tenants, vendors, employees and contractors, meeting attendees, and other individuals whose information appears in documents, email, leases, transactions, and connected systems.
For that information, the customer is the controller, or business, and OwnerLM acts as a processor, or service provider, on behalf of the customer. We process that information only on documented instructions from the customer, as needed to provide the Service, and as required by law.
The customer is responsible for providing required notices to those individuals, obtaining required consents, including recording and transcription consent where a customer enables those features, and establishing a lawful basis for providing the information to OwnerLM and for the customer’s use of it in the Service.
Individuals who are the subject of a customer’s data and who wish to exercise rights in relation to it should contact the relevant customer first. We will support the customer in responding, and if you contact us directly at privacy@ownerlm.com we will refer your request to the customer where appropriate, unless the law requires us to act directly.
A Data Processing Addendum reflecting these roles is available for enterprise customers at security@ownerlm.com.
The Service may contain links to websites, applications, and other online services operated by third parties, and our content may be integrated into pages or services not associated with us. These links and integrations are not an endorsement of, or a representation that we are affiliated with, any third party. We do not control third party websites, applications, or online services, and we are not responsible for their actions or their privacy practices. We encourage you to read the privacy policies of the other websites, applications, and online services you use.
We employ technical, organizational, and physical safeguards designed to protect the personal information we collect, including the following.
Encryption in transit using TLS 1.2 or higher, and encryption at rest using AES 256.
Row level security for tenant isolation, per tenant storage, and role based access scoped to the portfolios and properties a user is authorized to see.
Breach checked passwords and controls against the use of passwords known to have appeared in prior breaches.
Audit logs of access and key actions in the Service.
Access controls, least privilege practices, and review of service providers and subprocessors that process personal information on our behalf.
Our SOC 2 Type II program is in progress. If you have security questions, or to request our Data Processing Addendum, contact security@ownerlm.com.
However, security risk is inherent in all internet and information technologies, and no system can be guaranteed completely secure. We cannot guarantee the security of your personal information, and transmission of information to the Service is at your own risk to the extent permitted by law.
OwnerLM is operated from the United States, and personal information we collect is processed and stored in the United States. If you use the Service from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States, where privacy laws may not be as protective as those in your state, province, or country. We do not target the Service at individuals in the European Economic Area or the United Kingdom as a separate offering under this policy.
The Service is not intended for use by anyone under 18 years of age, and we do not knowingly collect personal information from children under 18. We do not knowingly collect, sell, or share the personal information of consumers under 16 years of age. If you are a parent or guardian and believe we have collected personal information from your child in a manner prohibited by law, contact us at privacy@ownerlm.com. If we learn that we have collected personal information from a child without the consent of the child’s parent or guardian as required by law, we will comply with applicable legal requirements to delete the information.
We reserve the right to modify this Privacy Policy at any time. If we make material changes, we will notify you by updating the effective date of this policy and posting the revised policy on the Service or through other appropriate means, such as an email or in product notice for material changes affecting Customer Data. Modifications are effective upon posting of the modified version, or as otherwise indicated at the time of posting. Your use of the Service after the effective date of a modified policy indicates that the modified policy applies to your interactions with the Service and our business, subject to applicable law.
If you have questions about our practices, or if you would like to exercise a privacy right, contact us by any of the methods below.
Email for privacy questions and requests: privacy@ownerlm.com
Email for security questions and Data Processing Addendum requests: security@ownerlm.com
Mail: AI Everywhere Corporation, DBA OwnerLM, 1612 Grand Boulevard, Kansas City, MO 64108
Phone: 816.300.7645
Except as otherwise provided, this section applies to residents of United States states that have privacy laws applicable to us that grant their residents the rights described below, collectively the State Privacy Laws. This notice is also our California Notice at Collection.
This section describes how we collect, use, and share personal information of residents of these states, and the rights those residents may have. Not all rights listed below are available in every state, and some rights apply only where a state law grants them to you and applies to us. We may decline a request in certain cases as permitted by law. We may not be able to process your request if you do not provide sufficient detail to allow us to confirm your identity or understand and respond to the request.
For purposes of this section, Personal Information has the meaning given to personal data, personal information, or similar terms in the State Privacy Laws, and Sensitive Personal Information has the meaning given to sensitive personal information, sensitive data, or similar terms in those laws, except that neither term includes information exempted from the scope of the State Privacy Laws. In some cases we may provide a different privacy notice to a specific category of residents, such as job applicants, in which case that notice will apply instead of this section for that category.
Subject to applicable State Privacy Laws, you may have some or all of the following rights.
Know and be informed. You can request information about how we have collected and used your Personal Information, including the categories of Personal Information we collected, the categories of sources from which we collected it, the business or commercial purpose for collecting it, the categories of third parties with which we share it, the categories of Personal Information we disclosed for a business purpose, and the categories of third parties to whom it was disclosed for a business purpose.
Access. You can request a copy of the Personal Information we have collected about you, and in some states a copy in a portable format.
Appeal. You can appeal our denial of a request you validly submitted. To appeal, email privacy@ownerlm.com with the word Appeal in the subject line and describe the request and the denial you received.
Correction. You can ask us to correct inaccurate Personal Information we have collected about you.
Deletion. You can ask us to delete Personal Information we have collected from you, subject to legal exceptions.
Opt out of sale. We do not sell Personal Information. You can nevertheless submit an opt out request at any time, and it will be recorded and honored if our practices ever change, and it will apply to any sharing under a data engagement of the kind described below.
Opt out of sharing for targeted advertising. We do not share Personal Information for cross context behavioral advertising or targeted advertising, and we do not process Personal Information for targeted advertising purposes. You can nevertheless submit an opt out request, and it will be recorded on the same basis as an opt out of sale.
Opt out of profiling and automated decision making. We do not use Personal Information to engage in profiling or automated decision making that produces legal or similarly significant effects, such as significant impacts on financial services, housing, education, employment, health care, or criminal justice. Our artificial intelligence features generate drafts, summaries, and analyses for a user to review and act on; they do not make decisions with legal or similarly significant effects about individuals on their own.
Limit use of Sensitive Personal Information. We process certain categories of Sensitive Personal Information as described in this policy, principally financial account related data received through Plaid and property management connections you authorize, and precise account credentials are never received by us. We do not process Sensitive Personal Information for the purpose of inferring characteristics about a consumer. Where your state law gives you the right to limit the use of Sensitive Personal Information, you may exercise it by emailing privacy@ownerlm.com.
Nondiscrimination. You are entitled to exercise the rights described above free from discrimination prohibited by the State Privacy Laws.
Consumers under 16. We do not have actual knowledge that we collect, sell, or share the Personal Information of consumers under 16 years of age, and we do not knowingly do so. The Service is not intended for anyone under 18.
We do not sell Personal Information, and we do not sell, share for commercial purposes, or otherwise commercialize a customer’s data, including aggregated or de-identified data and operational telemetry derived from that customer, without that customer’s explicit written consent given under a separate signed engagement for that purpose. Absent that consent, it does not happen. Internal use of aggregated or de-identified data to operate, secure, and improve the Service is permitted and is not a sale.
If a customer ever signs such an engagement, then, for Personal Information covered by that engagement, the state law rights to opt out of sale or sharing will apply as described in this notice, including the right to opt out by email and through a Global Privacy Control signal, and we will honor those opt outs as required by applicable law for the data and consumers concerned.
To exercise any of the rights above, email privacy@ownerlm.com, call 816.300.7645, or write to AI Everywhere Corporation, DBA OwnerLM, 1612 Grand Boulevard, Kansas City, MO 64108.
For opt out of sale or sharing requests, you may email privacy@ownerlm.com, call the number above, or broadcast a Global Privacy Control signal from your browser. We honor Global Privacy Control signals as valid opt out requests for the sale or sharing of Personal Information as required by applicable law. When we detect a Global Privacy Control signal, we treat it as a request to opt out of the sale or sharing of your Personal Information for that browser or device.
Verification of identity. We may need to verify your identity to process know, access, appeal, correction, or deletion requests, and we reserve the right to confirm your state residency. To verify your identity, we may require information that matches our records, a signed declaration, or other information where permitted by law. We will only use information provided for verification for that purpose.
Authorized agents. Under some State Privacy Laws, you may use an authorized agent to make a request on your behalf. We may need to verify the agent’s identity and authority. We may require a copy of a valid power of attorney, or, if you have not given the agent a power of attorney, we may ask for your written and signed permission for the agent to act, the information needed to verify your identity, and your direct confirmation that you authorized the agent to submit the request.
Response timing. We will respond to verifiable requests within the period required by applicable law, generally 45 days for California requests, with an extension where permitted and explained to you. Appeals will be answered within the period required by applicable law.
Sources and purposes. We collect the categories of Personal Information listed in the chart below from the sources, and use them for the business and commercial purposes, described in the main body of this policy.
Retention criteria. The criteria for deciding how long to retain Personal Information are set out in the Retention section above: retention while the account is active and as needed for the purposes collected, permanent deletion within 30 days after account closure subject to legal and financial retention, deletion of a deleted item’s extracted data, embeddings, and citations along with the item, and isolation of any information retained for legal reasons from further processing.
De identification. We do not attempt to re-identify de-identified information derived from Personal Information, except for the purpose of testing whether our de-identification processes comply with applicable law. Internal use of aggregated or de-identified data to operate, secure, and improve the Service is permitted. External sale or commercialization of aggregated or de-identified data, or of operational telemetry derived from a customer, requires that customer’s explicit written consent under a separate signed engagement, and absent that consent it does not happen.
Personal Information we collect, use, and disclose. The chart below summarizes the Personal Information we collect, the purposes for which we collect it, and the parties to whom we may disclose it, using both the categories in the Personal information we collect section of this policy and the statutory categories in the California Consumer Privacy Act, at California Civil Code Section 1798.140. This chart describes our practices currently and during the 12 months preceding the effective date of this policy. Information you voluntarily provide, such as in free form fields or uploaded files, may contain other categories of Personal Information not described below if you choose to include it.
| Personal Information we collect | CCPA statutory category | Purposes | Categories of third parties to whom we disclose it for a business purpose | Categories of third parties to whom we sell or share it |
|---|---|---|---|---|
| Account and workspace data: name, email address, organization, role, primary owner status, profile information, single sign on identifiers | Identifiers; Customer records; Protected classification characteristics only where you voluntarily provide them | Service delivery and operations; personalization; security; compliance and protection | Affiliates; service providers including hosting and single sign on providers; third parties designated by you | None |
| Property, portfolio, and deal data: addresses, unit counts, year built, ownership entities, financials, key performance indicators, notes, photos | Customer records; Commercial information; Visual information in photos; Identifiers where a person is identified | Service delivery and operations; personalization; improvement and analytics for your workspace; compliance and protection | Affiliates; service providers; third parties designated by you through shares and authorized tools | None |
| Uploaded documents and files: PDF, Excel, CSV, and Word files, images, audio, video, and extracted text, structure, and embeddings | Identifiers; Customer records; Commercial information; Audio, electronic, and visual information; Other categories you include in a file | Service delivery and operations; search, summary, and citation features you use; security; compliance and protection | Affiliates; service providers including hosting and artificial intelligence model providers under no training terms; third parties designated by you | None |
| Conversations and meeting content: transcripts, recordings, agendas, notes, attendee names and statements | Audio and electronic information; Identifiers; Customer records | Service delivery and operations; transcription, summary, and follow up features you or your customer enable; compliance and protection | Affiliates; service providers including transcription and artificial intelligence providers; third parties designated by the customer who enabled the feature | None |
| Email content where a mailbox is connected or an inbound address is used: body, attachments, sender, recipients, date, subject | Identifiers; Customer records; Electronic information; Commercial information where included | Service delivery and operations; ingestion, search, and workflow features you authorize; security; compliance and protection | Affiliates; service providers including email and hosting providers; third parties designated by you | None |
| SMS and chat messages, opt in records, and action tokens | Identifiers; Electronic information; Customer records | Service delivery and operations; confirming actions you take; security; compliance with messaging consent rules | Affiliates; service providers including messaging providers; third parties designated by you | None |
| Bank data through Plaid and property management system data: balances, transactions, units, leases, and resident information received through secure application programming interfaces, never login credentials | Customer records; Commercial information; Financial information, which may be Sensitive Personal Information; Identifiers for residents and other individuals in the data | Service delivery and operations; portfolio financial features you authorize; security; compliance and protection | Affiliates; service providers including Plaid and property management system providers acting on your authorization; third parties designated by you | None |
| File storage and calendar integration data within the scope you authorize | Identifiers; Customer records; Electronic information; Commercial information where included | Service delivery and operations; features you authorize; security | Affiliates; service providers including the storage and calendar providers you connect; third parties designated by you | None |
| Contacts you add or import: brokers, vendors, lenders, and partners, with details you provide | Identifiers; Customer records; Professional or employment related information | Service delivery and operations; contact and relationship features; communications you direct | Affiliates; service providers; third parties designated by you | None |
| AI usage records: inputs, prompts, responses, citations, token and credit counts | Internet or other electronic network activity information; Electronic information; Inferences drawn only within your workspace to provide your output | Service delivery and operations; providing the output you requested; billing for usage; security; improvement of the Service for your workspace | Affiliates; service providers including artificial intelligence model providers under enterprise no training terms; third parties designated by you | None |
| Enrichment data fetched on your behalf from public sources: ratings and reviews, weather, market and economic indicators, competitor site content | Identifiers where a person is named in public content; Commercial information; Internet or other electronic network activity information | Service delivery and operations; analysis you requested; personalization of your workspace | Affiliates; service providers and public sources accessed on your behalf; third parties designated by you | None |
| Usage and device telemetry: last seen, page views, feature usage, error reports, device and session information, support conversations | Internet or other electronic network activity information; Identifiers including IP address and device identifiers; Electronic information | Service delivery and operations; security; service improvement and analytics; support; compliance and protection | Affiliates; service providers including hosting, security, and support providers | None |
| Building and compute telemetry from OwnerLM clusters: power draw, temperature and thermal data, network performance, GPU utilization, uptime, and where connected by the customer, HVAC and building automation telemetry, access events, and IoT sensor data | Internet or other electronic network activity information; Sensory data where sensor data is collected; Geolocation related data only at property level, not precise device location; Identifiers where access events identify a person | Service delivery and operations for clusters and compute; monitoring, maintenance, and security; billing for compute; compliance and protection | Affiliates; service providers including hosting, network, and maintenance providers; the customer that owns or manages the site; third parties designated by that customer | None |
| Compute customer account and usage data: account and contact data, billing data, hours used, capacity reserved, application programming interface usage, support communications | Identifiers; Customer records; Commercial information; Internet or other electronic network activity information | Service delivery and operations for compute services; billing; security; support; compliance and protection | Affiliates; service providers including hosting, marketplace, and payment providers; third parties designated by the compute customer | None |
| Payment data needed to complete transactions, processed by Stripe; we do not store card numbers | Customer records; Commercial information; Financial information, which may be Sensitive Personal Information | Service delivery and operations; payment processing; billing records and financial retention; compliance and protection | Stripe as payment processor; affiliates; service providers for accounting and billing; professional advisors | None |
California Notice at Collection. The categories of Personal Information we collect, the purposes for collecting it, and our retention criteria are described in this policy and in the chart above. We do not sell or share your Personal Information, including the Personal Information of consumers under 16 years of age, and we have not sold or shared Personal Information in the preceding 12 months. We do not use or disclose Sensitive Personal Information for purposes other than those permitted by the California Consumer Privacy Act and its regulations, including providing the Service you requested, security, and compliance, and we do not use it to infer characteristics about you.
Shine the Light law. Under California’s Shine the Light law, at California Civil Code Section 1798.83, California residents may ask companies with whom they have formed a business relationship primarily for personal, family, or household purposes to provide the names of third parties to which they disclosed certain personal information during the preceding calendar year for their own direct marketing purposes, and the categories of personal information disclosed. You may send requests for this information to privacy@ownerlm.com. In your request, include the statement Shine the Light Request, provide your first and last name and mailing address, and certify that you are a California resident. We reserve the right to require additional information to confirm your identity and California residency. We will not accept Shine the Light requests via telephone, mail, or facsimile, and we are not responsible for notices that are not labeled or sent properly, or that do not have complete information. We do not disclose personal information to third parties for their own direct marketing purposes.
Financial incentive programs. We do not offer financial incentive programs in exchange for Personal Information under this policy. If that changes, we will describe the program and obtain consent as required by law before enrolling you.
Nevada residents have the right to opt out of the sale of certain personal information for monetary consideration. We do not currently engage in such sales and we do not sell personal information. If you are a Nevada resident and would like to make a request to opt out of any potential future sale, email privacy@ownerlm.com. Your request will be recorded and honored if our practices ever change, and it will apply to any sharing under a signed data engagement of the kind described in this notice.
If you have questions or concerns about our privacy policies or information practices, or you wish to exercise a state privacy right, contact us using the details in the How to contact us section above, by email at privacy@ownerlm.com, by phone at 816.300.7645, or by mail at AI Everywhere Corporation, DBA OwnerLM, 1612 Grand Boulevard, Kansas City, MO 64108.