Privacy Policy
Last updated: May 13, 2026
1. Introduction
iSloka (operated by iBrothers Group) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect when you use iSloka, why we collect it, how we use and store it, who we share it with, and what rights you have over your data.
By using iSloka, you agree to the practices described in this policy. If you do not agree, please discontinue use of the Service. Questions? Email privacy@isloka.com.
2. What We Collect
We collect the following categories of information:
Account Information
Your email address and password when you create an account. Passwords are hashed using bcrypt by Supabase before storage — we never see or store your password in plaintext.
Usage Information
The property listing content you paste into iSloka, the Deal Reports we generate for you, timestamps of report generation, and the count of reports associated with your account. This data is what makes the Service work and is stored in our database.
Payment Information
Payment processing is handled entirely by Stripe, Inc. iSloka never sees, stores, or has access to your credit card number, CVV, or full payment details. We receive only a Stripe customer ID and subscription status for billing management.
Technical Information
IP address, browser type and version, pages visited, error logs, and basic analytics (page views, feature usage). This data helps us maintain the Service, diagnose issues, and understand usage patterns in aggregate.
3. How We Use It
We use the information we collect to:
- ›Provide, operate, and improve the iSloka Deal Report service
- ›Authenticate your account and maintain your session
- ›Process subscription billing and manage your plan
- ›Send transactional emails: welcome message, payment receipts, and password resets
- ›Respond to your support requests and questions
- ›Detect, prevent, and investigate fraud or abuse of the Service
- ›Analyze aggregate usage patterns to improve the product (never individually identified)
We do NOT sell your data — ever.
We do NOT use your listing content or Deal Reports to train AI models without your explicit written consent.
4. Who We Share With
We share data only with the sub-processors required to operate iSloka. Each has a data protection agreement with us and their own privacy policy. We do not share data with advertisers, data brokers, or any other third parties.
| Sub-processor | Purpose | Location |
|---|---|---|
| Supabase | Authentication, database storage | USA |
| Vercel | Web hosting and CDN | USA |
| Anthropic | AI report generation (Claude) | USA |
| OpenAI | Text parsing | USA |
| Stripe | Payment processing and billing | USA |
| Resend | Transactional email delivery | USA |
Your listing content is transmitted to Anthropic (and OpenAI where applicable) solely to generate your Deal Report and is subject to their respective data handling policies.
5. Cookies & Local Storage
iSloka uses essential cookies only. Specifically, we use Supabase session cookies to maintain your authenticated session across page loads. These cookies are strictly necessary for the Service to function and cannot be disabled while using iSloka.
We do not use advertising cookies, third-party tracking pixels, or behavioral targeting technologies. We do not participate in any ad networks or cross-site tracking programs.
6. Your Rights
You have the following rights with respect to your personal data:
EU / UK users: You have rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local supervisory authority. California users: You have rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of sale of personal information (we do not sell data). To exercise any of these rights, email privacy@isloka.com.
7. Data Retention
Active accounts: We retain your account information and Deal Reports for as long as your account is active and in use.
After cancellation or deletion: Your authentication credentials are removed immediately upon account deletion. Deal Reports and associated listing content are anonymized (dissociated from your identity) within 30 days.
Billing records: Transaction records associated with paid subscriptions are retained for 7 years to comply with applicable tax and accounting regulations, even after account deletion.
8. Security
We take reasonable technical and organizational measures to protect your data, including:
- ›Encryption in transit via HTTPS, enforced by Vercel
- ›Encryption at rest, managed by Supabase's infrastructure
- ›bcrypt password hashing — passwords are never stored in plaintext
- ›Row-level security (RLS) policies ensuring users can only access their own data
- ›No founder or employee access to Stripe card or payment data
No security system is perfect. If you believe your account has been compromised or you suspect a security breach, please report it immediately to privacy@isloka.com.
9. Children's Privacy
iSloka is not directed at, marketed to, or intended for use by children under the age of 18. We do not knowingly collect personal information from minors. If you believe that a child under 18 has provided us with personal information, please contact us at privacy@isloka.com and we will promptly delete that information.
10. International Users
iSloka is hosted and operated in the United States. If you access the Service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to this transfer and processing.
11. Changes to This Policy
We may update this Privacy Policy periodically. For material changes — such as collecting new categories of data or sharing data with new categories of third parties — we will email notice to the address associated with your account at least 14 days before the changes take effect.
We encourage you to review this policy periodically. The "Last updated" date at the top reflects the most recent revision. Continued use of the Service after the effective date constitutes acceptance of the updated policy.
12. Contact
For any privacy-related questions, data requests, or concerns, please contact us: