← Back

Privacy Policy

Last Updated: October 31, 2026

NestCalc.ai LLC ("LoboSan," "we," "us," or "our") is a Wyoming limited liability company. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the LoboSan application (the "Service"). By using the Service, you consent to the practices described in this policy.

1. Information We Collect

Account Information

When you create an account, we collect your email address and an encrypted password. Authentication is managed by Supabase. We do not store your password in plaintext.

Property & Deal Data

You may enter property details such as address, purchase price, loan terms, rental income estimates, operating expenses, and investment strategy preferences. This data is stored in your Supabase account so you can save and retrieve analyses.

Payment Information

If you subscribe to a paid tier on the LoboSan website, payment is processed by Stripe. We do not receive or store your full credit card number. Stripe provides us with a tokenized reference, your subscription status, and billing history. See Stripe's Privacy Policy for details on how Stripe handles your payment data.

If you purchase a paid subscription or pass inside one of our mobile apps, payment is processed by the app store you bought through - the Apple App Store or Google Play - under that store's own privacy policy. Stripe is not involved in those purchases. We do not receive or store your card details; the store provides us only your purchase and subscription status.

Usage Data

We automatically collect technical information such as browser type, device type, pages visited, and timestamps. This data helps us improve performance and diagnose issues.

In our mobile apps we also use Firebase Analytics and Firebase Crashlytics, provided by Google, to record app interaction events, crash logs, and diagnostic information. These services use a resettable app-instance identifier. This data is not linked to your account or your identity, is never used for tracking or advertising, and no advertising identifier is collected on either platform. To request deletion of this data, contact us at support@nestcalc.ai.

On the LoboSan website we use Google Analytics 4, provided by Google, only if you choose "Accept" in our cookie banner. It records the pages you visit and product events such as running an analysis, viewing plans and completing a purchase, together with your browser and device type, the page that referred you, and your approximate area (city, region, country) estimated from your IP address. Google Analytics does not log or store your IP address, and we never send it your name, email address, property addresses, deal figures or payment details. Google signals and advertising features are turned off, and this data is never used for advertising or remarketing. If you choose "Reject," or make no choice, Google Analytics is not loaded and sets no cookies. Pages for NestCalc.ai order links are never measured.

Location-Related Data

When you enter a property address, we send it through our server-side proxy to two third-party geocoding providers: LocationIQ (locationiq.com) receives address fragments as you type to power autocomplete suggestions, and Smarty (smartystreets.com) receives the address when verification runs to confirm it against the US postal registry. These providers receive the address only - we do not share your IP address with them.

Approximate location. In our mobile apps, our analytics provider (Google Firebase) estimates your general area (city, region, country) from your device's IP address. We use it only for aggregate usage statistics and never collect your precise location.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Process your subscription and manage your account
  • Run investment calculations and generate deal projections
  • Generate AI-powered deal narratives, market intelligence, and macro dashboards
  • Fetch real-time economic data (mortgage rates, treasury yields) for your analyses
  • Improve, personalize, and expand the Service
  • Communicate with you about your account, updates, or support requests
  • Detect and prevent fraud or abuse

3. Third-Party Services

We rely on the following third-party services to operate LoboSan. Each service receives only the minimum data required to perform its function:

  • Supabase - Authentication and database. Stores your account credentials (hashed), saved deals, and cached API responses. Hosted in the United States.
  • Stripe - Payment processing for paid subscriptions purchased on the LoboSan website. Receives your email and payment method. We never see or store your full card number.
  • Apple App Store / Google Play - Payment processing for subscriptions and one-time purchases made inside our mobile apps. We receive your purchase and subscription status, never your payment card details.
  • Perplexity Sonar - Market intelligence for paid tiers. Receives the property city and state to generate local market analysis. No personal data is sent.
  • Anthropic Claude (Haiku) - AI deal narratives for paid tiers. Receives anonymized property metrics (numbers only, no address or personal data) to generate investment commentary.
  • Google Gemini - Powers macro economic dashboards for all tiers. Receives economic indicator queries. No personal or property-specific data is sent.
  • Google (Firebase) - Analytics and crash reporting in our mobile apps. Receives app interaction events, crash logs, diagnostics, and a resettable app-instance identifier. No advertising identifier is collected, and the data is not used for advertising.
  • Google Analytics - Website analytics, only with your consent. Receives page views, product events, browser and device type, the referring page, and an approximate location estimated from your IP address, which Google does not store. No name, email, property address or payment data is sent, and the data is not used for advertising.
  • FRED API (Federal Reserve Economic Data) - Provides real-time treasury yields and mortgage rate data for all tiers. No personal data is sent.
  • LocationIQ - Autocomplete typeahead, accessed through our server-side proxy. Receives partial address strings as you type. Your IP address is not forwarded.
  • Smarty - Address verification, accessed through our server-side proxy. Receives addresses entered into the calculator. Your IP address is not forwarded.
  • Netlify - Hosting and serverless functions. Serves the application and processes API requests. See Netlify's Privacy Policy.

4. Cookies & Local Storage

LoboSan uses browser local storage to:

  • Maintain your authentication session (Supabase JWT token)
  • Store your current deal inputs so they persist between page reloads
  • Remember UI preferences (e.g., last active tab)
  • Remember your cookie choice (Accept or Reject) for up to 13 months

Analytics cookies. If you accept analytics cookies, Google Analytics sets first-party cookies on lobosan.com (named _ga and _ga_ followed by an identifier) that let it tell visits apart. They expire after 13 months. If you reject, or make no choice, they are never set.

Your choice. You can change your choice at any time with the "Cookie Settings" link at the bottom of every page. When you withdraw consent, we stop sending data to Google Analytics and delete its cookies from your browser. Data collected before you withdrew is kept for the period in Section 5; to ask for its deletion, contact us at support@nestcalc.ai.

We do not use advertising cookies or third-party tracking cookies. Our mobile apps use the Firebase SDKs described above, which store a resettable app-instance identifier on the device; they set no advertising identifier. If Stripe or Supabase set cookies for session management, those are governed by their respective privacy policies.

5. Data Retention

We retain your account data and saved deals for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law (e.g., payment records for tax compliance).

Cached API responses (market data, macro dashboards) are stored in our database with a 6-hour time-to-live and are automatically overwritten. These caches contain no personal data.

Website analytics data in Google Analytics is kept for 14 months and then deleted automatically.

6. Data Security

We implement reasonable technical and organizational safeguards to protect your data:

  • All data in transit is encrypted via HTTPS/TLS
  • Passwords are hashed by Supabase (bcrypt)
  • API endpoints validate JWT tokens and request origin
  • Payment data is handled entirely by our payment processors - Stripe (PCI-DSS compliant) for website purchases, and the Apple App Store or Google Play for in-app purchases
  • Serverless functions enforce origin validation and authentication

No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access - Request a copy of the personal data we hold about you.
  • Correction - Request correction of inaccurate or incomplete data.
  • Deletion - Request deletion of your personal data, subject to legal retention requirements.
  • Portability - Request your data in a portable, machine-readable format.
  • Opt-Out of Sale - We do not sell your personal data. We do not share your data with third parties for their marketing purposes.

California Residents (CCPA): You have the right to know what personal information we collect, request its deletion, and opt out of any sale of personal information. We do not sell personal information. To exercise your rights, contact us at support@nestcalc.ai.

European Residents (GDPR): If you are located in the European Economic Area, you have additional rights including the right to lodge a complaint with your local data protection authority. Our lawful basis for processing is contract performance (providing the Service), legitimate interest (improving the Service) and, for website analytics cookies, your consent, which you can withdraw at any time through Cookie Settings.

8. Children's Privacy

LoboSan is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at support@nestcalc.ai.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you via email or an in-app notice. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

  • Email: support@nestcalc.ai
  • Mailing Address: NestCalc.ai LLC, 30 N Gould St Ste R, Sheridan, WY 82801
  • Entity: NestCalc.ai LLC - a Wyoming limited liability company

Effective Date: March 30, 2026