Who We Are
AppraVia Technologies, LLC is a limited liability company organized under the laws of the State of Kansas. We operate the Appravia platform, a software-as-a-service application designed to help real estate appraisers and appraisal firms manage orders, track invoices, and organize workflow.
Mailing Address: 15621 W 87th St, Ste 452, Lenexa, KS 66219
For privacy-related questions, contact us at privacy@appravia.com.
Scope of This Policy
This Privacy Policy applies to all visitors to appravia.com, all registered users and Subscribers, and all data submitted to or processed through the platform, including data about third parties (such as appraisal clients, borrowers, or property owners) that a Subscriber uploads.
If you visit our public website without creating an account — for example, browsing product pages, reading our blog, or submitting a contact, demo, or newsletter form — we collect a more limited set of information described in Section 3 (Data We Collect). Subscribers and Platform users are subject to the broader collection and processing described throughout this Policy.
Data We Collect
A. Information You Provide Directly
| Category | Examples | When Collected |
|---|---|---|
| Account Information | Name, email address, business name, phone number, password | Registration |
| Billing Information | Payment method details (processed by payment provider — we do not store raw card numbers), billing address | Subscription signup |
| Profile Data | Appraiser license number, state(s) of licensure, firm name, preferences | Account setup |
| User-Submitted Content | Order data, invoice records, appraisal documents, notes, uploaded files, activity logs | Ongoing platform use |
| Communications | Support tickets, feedback submissions, emails sent to us | As submitted |
| Marketing Form Data | Name, email, company, role, phone, and any free-text fields submitted via demo requests, contact forms, or newsletter signups on appravia.com | Voluntary website form submission |
B. Information Collected Automatically
| Category | Examples |
|---|---|
| Usage Data | Pages visited, features used, actions taken within the app, session duration, error logs |
| Device & Browser Data | IP address, browser type and version, operating system, screen resolution, referring URL |
| Authentication Logs | Login timestamps, session tokens, failed login attempts |
AppraVia Mobile App
The AppraVia Mobile app (for iPad and iPhone, and later Android) lets registered users of the Platform inspect properties and work on appraisal reports in the field. It uses the same account and the same secure storage as the web Platform, and everything in this Policy applies to it. This section explains what is specific to the app.
Device Permissions
The app asks for each permission only when you first use the feature that needs it. You can turn any of them off in your device’s Settings; the rest of the app keeps working.
| Permission | What It’s Used For |
|---|---|
| Camera | Taking subject, comparable, and Workfile photos when you tap a photo button. |
| Photo library | Adding photos you choose to a report. The app only receives the photos you select; it does not scan your library. |
| Location (while using the app) | Setting a comparable’s or rental’s position on site (“Use my location”), measuring its distance from the subject, and showing where you are on the map. The app never uses location in the background, and your location is not tracked or stored. Only a position you choose to save becomes part of the report. |
| Microphone | Recording voice memos, which are saved to the report’s Workfile. The microphone is used only while you are recording. |
| Face ID / Touch ID | Unlocking the app after time away (app lock). The check is done by your device; the app only learns whether it succeeded and never receives your face or fingerprint data. |
Information Stored on Your Device
The app keeps your sign-in session (so you stay signed in), your preferences, cached Quick Responses and address lookups, handwritten note pages, temporary copies of photos and files until they finish uploading, a copy of your active assigned orders and their reports so the app works without a connection, and any Workfile files you choose to download for offline use. The sign-in session is kept in the device’s secure Keychain; the app’s databases are encrypted with a key that never leaves the device; photo and downloaded-file folders are excluded from device backups. Signing out removes your copies from the device (work not yet sent stays, unreadable to anyone else, until you sign in again on that device). Report data and files you save are stored on the Platform, not only on the device. Deleting the app removes the information stored on the device.
Maps and Addresses
On iPad and iPhone, maps are provided by Apple Maps; on Android, by Google Maps. To place the subject and comparables on the map, their addresses are sent to Apple’s or Google’s location services. “Directions” opens your device’s own maps app.
Crash and Error Reports
If the app crashes or encounters an error, a technical report is sent to our error-monitoring provider. The report includes the app version, device model, operating-system version, and details of the error. It does not include report contents, photos, or client information. We use these reports only to find and fix problems.
App Updates
Updates to the app may be delivered directly to the app by our app-delivery provider. These requests include the app version and device platform.
No Tracking or Advertising
The app contains no advertising, does not use advertising identifiers, does not track you across other companies’ apps or websites, and does not sell your data.
Accounts
You cannot create an account in the app. You sign in with an existing Platform account. Accounts are created and removed by your company’s administrator on the Platform. To ask us to delete your account and its data, see Section 11 (Your Rights) or contact privacy@appravia.com.
How We Use Your Data
| Purpose | Description | Legal Basis |
|---|---|---|
| Service Delivery | Operating, maintaining, and providing all features of the Appravia platform | Contract performance |
| Account Management | User authentication, account settings, access control, password recovery | Contract performance |
| Billing | Processing payments, issuing invoices, managing subscriptions and renewals | Contract performance |
| Customer Support | Responding to requests, resolving issues, troubleshooting | Legitimate interest / Contract |
| Security | Detecting, preventing, and responding to fraud, abuse, and security threats | Legitimate interest |
| Service Improvement | Analyzing aggregate usage patterns to improve performance and features. We do not use individual appraisal content for this purpose. | Legitimate interest |
| Legal Compliance | Meeting obligations under applicable law, responding to lawful requests | Legal obligation |
| Communications | Service updates, security notices, billing alerts, and (with your consent) product announcements | Contract / Consent |
| Marketing & Lead Follow-Up | Responding to demo requests, contact-form inquiries, and (with opt-in) newsletter or product-update emails to website visitors and prospects | Consent / Legitimate interest |
Marketing Communications & Opt-Out
If you opt in to marketing emails, newsletters, or product announcements, we may use your contact information to send periodic updates. Every marketing email includes an unsubscribe link, and you can opt out at any time. Transactional and security communications (billing receipts, security notices, account changes, terms-of-service updates) are sent regardless of marketing preferences and cannot be opted out of while you maintain an active account.
Sensitive Appraisal & Financial Data
Documents and data stored within Appravia may include appraisal reports and work files, borrower financial information, lender and AMC engagement records, PII of property owners and clients, and commercially sensitive fee and business data. We treat all User-Submitted Content as confidential by default:
- Access to User-Submitted Content is restricted to you and your authorized users, our engineering and support staff on a strict need-to-know basis, and our infrastructure providers under confidentiality obligations.
- We do not read, review, analyze, or use the substantive contents of your appraisal files for any purpose other than storing and displaying them to you.
- We do not disclose the contents of your uploaded files to any third party unless compelled by law or court order, in which case we will notify you to the extent legally permitted.
Sharing & Disclosure of Information
We do not sell, rent, or trade your personal information or User-Submitted Content. We share data only in the following limited circumstances: with service providers who help us operate the platform (under contractual confidentiality obligations); when required by law, subpoena, or court order; when necessary to protect our rights or the safety of others; and in connection with a business transfer (with prior notice and your right to delete your data).
Third-Party Service Providers
| Provider | Role | Data Involved |
|---|---|---|
| Supabase | Database hosting, authentication, file storage | All User Data, account credentials, uploaded files |
| Vercel | Application hosting & content delivery | Request logs, IP addresses, usage data |
| Stripe | Billing & subscription management | Billing details, payment methods, transaction records |
| Resend | Transactional email delivery | Email address, notification content |
| DocuSeal | Electronic signature for engagement letters | Signer name, email address, engagement letter documents |
| Telnyx | SMS text notifications | Phone number, notification content |
| Postmark | Inbound email processing (MailVia) | Sender email address, email content, order details |
| Anthropic (Claude) | AI-assisted email parsing & processing, in-app Help chat responses | Inbound email content, order details for classification, help-chat questions you ask |
| Voyage AI | Generates embeddings used by the in-app Help chat to retrieve the most relevant help articles for your question | The text of your help-chat question only — no order data, no account credentials |
| Geocoding, mapping services, & calendar integration | Property addresses, location coordinates, calendar event details (appointment times, titles) | |
| RentCast | Public-record property data lookups for the optional Public Records add-on (comparable property characteristics, sales history and assessor records) | The comparable property addresses a user chooses to look up. No client, borrower, report or account personal information is sent |
| Apple | Maps and address lookup in the iOS app; app distribution (App Store / TestFlight) | Property addresses, map locations |
| Sentry | Crash and error reporting for the mobile app | App version, device model, OS version, error details; no report contents |
| PowerSync (JourneyApps) | Keeps the mobile app’s offline copy of a user’s assigned orders and reports up to date | For users of the mobile app: their active assigned orders (including contact details on the order), report contents, sketch and file lists, notes, preferences and Quick Responses |
| Expo (EAS) | Builds the mobile app and delivers app updates | App version, device platform, IP address of update requests |
| Backblaze (B2) | Off-site nightly backups of database snapshots and Storage objects for disaster recovery | Encrypted copies of all database tables and uploaded files; retained on a rolling 30-day schedule |
Google Calendar Integration
If you choose to connect your Google Calendar, AppraVia will request limited access to read and write calendar events related to your appraisal appointments. We access only the calendar data necessary to sync appointment information. We do not access, store, or share any other data from your Google account. You may revoke calendar access at any time through your Google Account permissions settings. AppraVia's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
For more information about how these providers handle your data, see Google's Privacy Policy and Stripe's Privacy Policy.
We do not use advertising networks or social tracking pixels on the platform.
Data Security
We implement administrative, technical, and physical safeguards to protect your data, including:
- Encryption in transit: All data transmitted between your browser and our servers is encrypted via TLS (HTTPS).
- Encryption at rest: Stored data is encrypted at the database and file storage layer.
- Access controls: Role-based access limits who on our team can access your data.
- Authentication security: We support and encourage strong passwords and multi-factor authentication.
- Infrastructure security: Our hosting providers (Supabase, Vercel) maintain their own SOC-level security programs.
Data Breach Notification
In the event of a confirmed data breach reasonably likely to result in harm, we will notify affected Subscribers without unreasonable delay — and within any timeframe required by applicable state or federal law. Our notification will describe what happened, what data was involved, our response, and steps you can take to protect yourself.
Data Retention
| Data Type | Retention Period |
|---|---|
| Account & Profile Data | Duration of account, plus 90 days after deletion |
| User-Submitted Content (orders, files, invoices) | Duration of account, plus 90 days after account closure for export |
| Billing Records | 7 years (tax and accounting obligations) |
| Usage & Access Logs | Up to 12 months for security purposes |
| Support Communications | 3 years |
| Data required by law | As required by applicable law or regulation |
Cookies & Tracking Technologies
| Cookie Type | Purpose | Can You Opt Out? |
|---|---|---|
| Strictly Necessary | Authentication, session management, security tokens. Required for the Service to function. | No — required for login |
| Functional | Remembering your preferences, UI state, and settings. | Partial — may affect experience |
| Analytics | Aggregate, anonymized usage statistics to improve the Service. No individual appraisal content is analyzed. | Yes — contact us to opt out |
| Marketing & Advertising | If enabled, used on the public website (appravia.com) to measure marketing-campaign effectiveness and, where applicable, deliver relevant ads on third-party platforms. May include tools such as Google Ads, Meta Pixel, or LinkedIn Insight Tag. None of these are deployed inside the authenticated Platform (app.appravia.com). | Yes — opt out via cookie preferences or your browser settings |
Do Not Track & Global Privacy Control
We honor browser-level Do Not Track ("DNT") and Global Privacy Control ("GPC") signals where applicable by suppressing non-essential analytics and advertising cookies for that session. Strictly necessary cookies (those required for authentication and security) cannot be suppressed without breaking core Service functionality.
Your Rights & Choices
Depending on your location and applicable law, you may have the following rights regarding your personal data. To exercise any of these rights, contact us at privacy@appravia.com.
Request a copy of the personal data we hold about you.
Request correction of inaccurate or incomplete personal data.
Request deletion of your personal data, subject to legal retention requirements.
Request an export of your data in a machine-readable format.
Request that we restrict processing of your data in certain circumstances.
Object to processing based on our legitimate interests.
Unsubscribe from marketing emails at any time via the unsubscribe link or by contacting us.
Close your account at any time. See Section 9 for post-closure data handling.
We will respond to verifiable requests within 30 days. We may ask you to verify your identity before processing requests. We will not discriminate against you for exercising your privacy rights.
California Privacy Rights (CCPA / CPRA)
We do not sell personal information. We do not share personal information with third parties for cross-context behavioral advertising. In the past 12 months, we have collected: identifiers (name, email, IP address); commercial information (billing records, subscription history); internet activity (usage logs, session data); and professional information (appraiser license, business name).
California-specific rights include the right to Know, right to Delete, right to Correct, and the right to Non-Discrimination. To submit a CCPA request, contact us at privacy@appravia.com with the subject line "CCPA Privacy Request." We will respond within 45 days.
GLBA Notice for Financial Information
We act as a service provider processing NPI on your behalf. We maintain safeguards for NPI consistent with GLBA's Safeguards Rule, do not use NPI for our own marketing or business purposes, and do not disclose NPI to third parties except as necessary to provide the Service or as required by law.
As the party that controls and submits this data, you bear the primary compliance obligation under GLBA. If your practice requires a formal data processing addendum, please contact us at privacy@appravia.com.
Children's Privacy
The Appravia platform is a professional business tool not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected such information, we will delete it promptly.
International Users
Appravia is operated in the United States. If you access the Service from outside the United States, your data will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to this transfer. The Service is not currently designed or marketed for use in the European Economic Area (EEA).
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will post a prominent notice within the Appravia dashboard, send an email notification to the address on your account, and update the "Last Revised" date at the top of this page. Material changes become effective 14 days after notice is provided.
Contact Us & Privacy Requests
Privacy & Data Requests
AppraVia Technologies, LLC
15621 W 87th St, Ste 452, Lenexa, KS 66219
Privacy: privacy@appravia.com | Support: support@appravia.com
Response time: We will respond to verifiable privacy requests within 30 days. For California residents making CCPA requests, we will respond within 45 days and may extend by an additional 45 days with notice.