SMARTSTACK, INC.
Privacy Policy
Effective date: October 29, 2026
This Privacy Policy explains how Smartstack, Inc. ("Smartstack," "we," "us") collects, uses, shares and protects information when you use smartstackre.com and the Smartstack platform, including SmartClose (together, the "Services"). The Services are built for commercial real estate professionals (sponsors, lenders, brokers and their advisors) acting for business purposes.
1. Information we collect
Information you give us:
- Account information: name, email address, phone number, company, title, role and sign-in details.
- Deal information: property, project and financing details, loan requests, lending criteria, documents you upload to a deal room, checklists, tasks, messages and notes.
- Billing information: subscription and payment details. Card payments are processed by our payment processor; we do not store full card numbers.
- Communications: messages you send us, support requests and meeting requests.
Information we receive when you connect a third-party account:
- Sign-in with Google or Microsoft: your name, email address, profile picture and an account identifier, used to create and secure your Smartstack account.
- Calendar connection (optional): if you connect Google Calendar or Microsoft Outlook Calendar, we access your calendar only to create, update and cancel the meetings you schedule through Smartstack, and to check availability when you ask us to suggest meeting times. We store the access tokens needed to do this, encrypted.
Information collected automatically: device and browser type, IP address, pages viewed, actions taken in the Services, and dates and times of access, collected through server logs and essential cookies. We keep an audit trail of actions taken in deal rooms so every party has an accurate record.
2. How we use information
- To provide, operate and secure the Services, including deal rooms, closing checklists, lender introductions and requests for proposals.
- To introduce you to other members when you ask us to, based on the criteria you and they provide.
- To schedule meetings and send calendar invitations you request.
- To process payments, including fees collected at closing.
- To communicate with you about your account, deals and the Services.
- To keep records, prevent fraud and misuse, and meet legal, regulatory and audit obligations.
- To improve the Services using aggregated or de-identified information.
We do not sell your personal information, and we do not use it for third-party advertising.
3. Google and Microsoft user data
Smartstack's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In particular, information we receive from Google or Microsoft accounts:
- is used only to provide the sign-in and calendar features you have chosen to use;
- is not sold, and is not used or transferred for advertising, retargeting or credit-worthiness or lending decisions;
- is not used to train generalized artificial intelligence or machine learning models;
- is not read by people, except with your permission, for security purposes, to comply with law, or in aggregated, anonymized form for internal operations; and
- is transferred to others only as needed to provide or improve those features, to comply with law, or as part of a merger or acquisition with notice to you.
You can disconnect your calendar at any time in your Smartstack settings, or revoke access from your Google Account (myaccount.google.com/permissions) or Microsoft account. When you disconnect, we delete the stored tokens.
4. How we share information
- With other members of a deal room: what you post in a deal room is visible to the parties you invite or approve for that deal. When a lender is invited to a deal, it sees the loan package and the documents you mark as shareable.
- With service providers that host, store, email, process payments or otherwise help us run the Services (currently including hosting, database, email-delivery and payment providers), under contracts that limit their use of the information.
- With parties to a closing, such as title and settlement agents, as needed to complete a transaction you are part of and to collect fees at closing.
- With a licensed partner broker, where state law requires one to act on a loan introduction.
- For legal reasons: to comply with law or legal process, to protect rights, safety and property, or to enforce our terms.
- In a merger, acquisition or sale of assets, subject to this Policy.
Equity investments are offered through a separate site operated under a registered broker-dealer, which has its own privacy policy. Smartstack does not collect investor accreditation, suitability or holdings information.
5. Cookies
We use cookies and similar technologies that are needed to sign you in, keep your session secure and remember your preferences. We do not use advertising cookies.
6. Retention
We keep account information while your account is open. Deal-room records, including documents, messages and the audit trail, are kept after a deal closes or ends so the parties have a complete record and so we can meet legal and audit obligations. When information is no longer needed, we delete or de-identify it.
7. Security
We use administrative, technical and physical safeguards, including encryption in transit, encryption of stored access tokens, access controls and logging. No system is completely secure, so please use a strong password and tell us right away if you suspect unauthorized access.
8. Your choices and rights
You can review and update your account information in your settings. You can ask us to access, correct, export or delete your personal information by emailing privacy@smartstackre.com. Some information may be kept where the law requires it, or where it forms part of a shared deal-room record. Depending on where you live, you may have additional rights under state privacy law; we will honor them as required, and we will not discriminate against you for using them.
9. Children
The Services are for business users 18 or older. We do not knowingly collect information from anyone under 18.
10. Where information is processed
Smartstack is based in the United States, and information is stored and processed in the United States.
11. Changes
We may update this Policy. If we make material changes, we will notify you by email or in the Services before they take effect. The effective date above shows when it was last updated.