SAStorage AnalystVersion 1.0 — Effective 2026-08-26

PRIVACY POLICY

Storage Analyst

Version 1.0 — Effective Date: August 26, 2026

1. WHO WE ARE AND WHAT THIS POLICY COVERS

Storage Analyst is operated by Casey Reid, an individual residing in Texas and doing business as "Storage Analyst" (“we,” “us,” or “our”). This Privacy Policy describes how we collect, use, disclose, and protect personal information in connection with our websites, applications, and services (collectively, the “Services”), including our waiting list, and the choices and rights available to you.

The Services are business software for real-estate investors and operators. This Policy covers (a) personal information of our users and prospective users, and (b) personal information about other individuals that our users store in the Services, as described in Section 7.

2. INCORPORATION OF TERMS OF SERVICE

This Privacy Policy expressly incorporates the Terms of Service governing your use of the Services, and you agree and acknowledge that all terms therein, including provisions concerning indemnity, warranties, limitations of liability, waivers, dispute resolution by binding arbitration, and any and all other provisions, are hereby part of this Privacy Policy as if fully set forth herein.

3. INFORMATION WE COLLECT

Information you provide to us. This includes:

  • Account and profile information: name, email address, company name, password credentials, and account settings.
  • Waiting list information: name and email address submitted through our waiting-list form, and any other information you choose to include.
  • Billing information: payment details processed by our payment processor, Stripe. We do not receive or store full payment-card numbers; we receive limited billing metadata such as card brand, last four digits, and transaction status.
  • Deal and facility data: information you enter about properties, deals, underwriting assumptions, financial models, and pipeline activity.
  • Contact records about other people: information you choose to store about third parties such as facility owners and brokers (for example, names, phone numbers, email addresses, and mailing addresses). See Section 7.
  • Uploaded documents: files you upload, such as rent rolls, operating statements, leases, offering memoranda, and surveys, which may contain personal information about additional individuals (for example, tenant names and unit or payment details). See Section 7.
  • Communications: information in messages you send us, including support requests and feedback.

Information collected automatically. When you use the Services we collect log and usage data (such as IP address, browser and device information, pages viewed, features used, and timestamps) and use cookies and similar technologies necessary to operate, secure, and understand use of the Services. We use only cookies and similar technologies that are essential to operate and secure the Services (for example, authentication and session cookies); we do not use advertising cookies, and we do not currently use cookie-based analytics.

4. HOW WE USE INFORMATION

We use personal information to:

  • provide, operate, maintain, secure, and support the Services;
  • process transactions and manage subscriptions, renewals, and billing;
  • generate analysis and reports you request, including through artificial-intelligence features (see Section 5);
  • operate the waiting list and communicate with you about access, features, and updates;
  • send marketing communications where you have consented, with the ability to opt out at any time;
  • send transactional and service communications (such as billing, security, and legal notices);
  • monitor, analyze, and improve the Services, including through aggregated and de-identified data (see Section 6);
  • detect, investigate, and prevent fraud, abuse, and security incidents; and
  • comply with legal obligations and enforce our agreements.

5. ARTIFICIAL-INTELLIGENCE PROCESSING

The Services use artificial-intelligence technologies, including large language models provided by Anthropic, to generate analysis from the information you submit. When you use AI features, relevant portions of your data are transmitted to our AI provider through our secure server-side infrastructure to generate the requested output. Under our commercial agreement with our AI provider, your content is not used to train the provider’s models. AI-generated output is provided for informational purposes only, may contain errors or inaccuracies, and is subject to the disclaimers in our Terms of Service. You are responsible for reviewing and verifying any AI-generated output before relying on it.

6. AGGREGATED AND DE-IDENTIFIED DATA; NO SALE OF PERSONAL INFORMATION

We may create aggregated and de-identified data from information collected through or about use of the Services. We use such data only to operate, analyze, improve, and develop the Services and their features; we maintain it in de-identified form; and we do not attempt to re-identify it or permit others to do so. We do not sell aggregated or de-identified data as a standalone product.

We do not sell personal information, and we have not sold personal information in the preceding twelve (12) months. We do not “share” personal information with third parties for cross-context behavioral advertising (as that term is defined under the California Consumer Privacy Act), and we do not use or disclose sensitive personal information for purposes requiring a right to limit under applicable law.

7. INFORMATION ABOUT INDIVIDUALS WHO ARE NOT OUR USERS

Our users store information in the Services about other individuals—for example, contact records about facility owners and brokers, and documents that contain information about tenants. For this information, our user determines what is collected and how it is used, and we process it on the user’s behalf to provide the Services. The Services do not send emails, text messages, calls, or physical mail to these individuals, and we do not use their information for our own marketing.

If you are such an individual and wish to access, correct, or delete information about you held in a user’s account, please contact that user directly, as they control the information. You may also contact us at me@caseyreid.com; where the information is controlled by one of our users, we will route your request to them and reasonably cooperate in its resolution, and where we are required by law to act on the request directly, we will do so.

8. HOW WE DISCLOSE INFORMATION

We disclose personal information only as follows:

  • Service providers (processors): vendors that process information on our behalf to run the Services, currently including Supabase (database and authentication hosting), Vercel (application hosting), Stripe (payment processing), and Anthropic (AI processing as described in Section 5). If you connect a bring-your-own-key integration (such as a third-party market-data service), your data is exchanged with that provider under your own agreement with them.
  • Professional advisors: lawyers, accountants, and insurers where reasonably necessary.
  • Legal and safety: where required by law, subpoena, court order, or other legal process, or where reasonably necessary to protect the rights, property, or safety of us, our users, or others.
  • Business transfers: in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, in which case this Policy will continue to apply to the transferred information.

9. DATA RETENTION

We retain personal information for as long as your account is active and as reasonably needed to provide the Services. Following termination of your account, your data is available for export for thirty (30) days as described in our Terms of Service, after which we delete or de-identify it in accordance with our retention practices, except where retention is required by law (for example, billing and tax records), needed to resolve disputes or enforce agreements, or maintained as aggregated, de-identified data under Section 6. Waiting-list information is retained until you are invited and create an account, or until you ask us to remove you, whichever comes first. Residual copies in encrypted backups are deleted on our standard backup rotation schedule of seven (7) days.

10. SECURITY

We use commercially reasonable administrative, technical, and organizational safeguards designed to protect personal information, including encryption of data in transit and at rest, row-level access controls enforced at the database layer, server-side management of all AI-provider credentials, and secret-scanning and code-security tooling in our development process. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We will notify affected users and regulators of security incidents as required by applicable law.

11. YOUR PRIVACY RIGHTS

Depending on where you live, you may have some or all of the following rights with respect to your personal information: to know or access the personal information we hold about you; to obtain a portable copy; to correct inaccurate information; to delete information; to opt out of targeted advertising, sale, or certain profiling (noting that we do not engage in these practices); and not to be discriminated against for exercising your rights.

Texas residents. The Texas Data Privacy and Security Act (“TDPSA”) provides Texas residents rights of access, correction, deletion, portability, and opt-out. If we decline to act on your request, you may appeal by contacting us at me@caseyreid.com with the subject line “Privacy Appeal,” and we will respond within forty-five (45) days. If your appeal is denied, you may contact the Texas Attorney General.

California residents. The California Consumer Privacy Act, as amended, provides California residents rights to know, access, correct, delete, and port personal information, and to opt out of sale or sharing (we do not sell or share personal information as those terms are defined). We describe our collection practices by category in Section 3. We will not discriminate against you for exercising your rights.

Other states. Residents of other states with comprehensive privacy laws (including Colorado, Connecticut, Virginia, and others) may have similar rights, which we will honor as required by applicable law.

Exercising your rights. To exercise any right, contact us at me@caseyreid.com. We will verify your identity using information associated with your account and respond within the time required by applicable law. You may use an authorized agent where permitted, subject to verification.

12. CHILDREN

The Services are business software intended for adults and are not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided us personal information, contact us at me@caseyreid.com and we will promptly delete it.

13. DO NOT TRACK AND GLOBAL PRIVACY CONTROL

Because we do not sell or share personal information or engage in cross-context behavioral advertising, there is no sale or sharing for browser-based opt-out preference signals to effectuate. We treat Global Privacy Control signals as an opt-out of any future sale or sharing to the extent required by applicable law.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will post the updated Policy with a revised effective date and, for material changes, provide notice by email, in-app notification, or other electronic means at least thirty (30) days before the changes take effect, unless a shorter period is required by law or necessary to address an immediate security or legal concern. Your continued use of the Services after the effective date constitutes acceptance of the updated Policy to the extent permitted by law.

15. CONTACT US

Casey Reid — Storage Analyst

Attn: Privacy

422 N. Casa Grande Cir., Duncanville, TX 75116

me@caseyreid.com

16. GOVERNING LAW AND DISPUTE RESOLUTION

This Privacy Policy and any dispute arising out of or related to it or our privacy practices will be governed by the laws of the State of Texas, without regard to its conflict-of-laws principles. You agree to abide by the dispute resolution provisions in our Terms of Service, including, but not limited to, binding arbitration set forth in Section 18 of our Terms of Service, for any and all disputes, claims, or controversies arising out of or related to this Privacy Policy or the Services. Nothing in this section limits the rights of Texas residents or other individuals under applicable privacy laws, including the TDPSA.

17. SEVERABILITY

If any provision of this Privacy Policy is held to be invalid, illegal, or unenforceable, the remaining provisions will continue in full force and effect. Any invalid provision will be modified to the minimum extent necessary to make it valid and enforceable while preserving its original intent.

18. ENTIRE AGREEMENT

This Privacy Policy, together with our Terms of Service and any other agreements expressly incorporated by reference, constitutes the entire agreement between you and us with respect to the subject matter hereof and supersedes all prior or contemporaneous communications and proposals, whether electronic, oral, or written, with respect to the privacy practices described herein.

Terms of Service · Privacy Policy