Privacy Policy

Effective Date: November 17, 2025

Winston Oak Ltd., dba Winston Oak Developments ("we," "us," or "our") operates a property technology (prop tech) application that facilitates real estate-related services. We are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website, mobile application, or services (collectively, the "Services"). By using our Services, you agree to the practices described in this Privacy Policy.

This Privacy Policy applies to personal information we collect from users in the United States, with specific provisions for California residents under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). We comply with all applicable California and federal laws regarding the collection, use, and sharing of personal information.

Please note that we do not sell your personal information to third parties.

1. Information We Collect

We collect personal information that you provide directly to us, as well as information collected automatically or from third parties. The types of personal information we may collect include:

  • Contact and Account Information: Name, email address, phone number, mailing address, and account credentials (e.g., username and password).

  • Identity Verification Information: Government-issued identification (e.g., driver's license or passport), date of birth, Social Security number (or last four digits), selfies or biometric data for verification purposes, and other details required for identity confirmation.

  • Financial and Credit Information: Bank account details, payment method information, credit history, and related financial data for credit checks and fraud prevention.

  • Real Estate-Related Information: Details about your property interests, rental history, or other information relevant to our prop tech services.

  • Device and Usage Information: IP address, browser type, device identifiers, operating system, location data (inferred from IP), and interactions with our Services (e.g., pages viewed, time spent).

  • Other Information: Any additional data you provide, such as through forms, surveys, or communications with us.

We may also collect information from third-party sources, such as credit reporting agencies or verification services, to assist with identity verification and fraud prevention.

2. How We Use Your Information

We use your personal information for the following purposes, all of which are conducted in a lawful manner under California and federal law:

  • To provide and maintain our Services, including processing transactions and facilitating real estate-related activities.

  • For identity verification to confirm your identity and prevent fraud.

  • To conduct credit checks for fraud prevention in connection with real estate services.

  • To detect, prevent, and investigate fraudulent or unauthorized activities.

  • To communicate with you, including responding to inquiries, sending updates, and providing customer support.

  • To improve our Services, such as analyzing usage patterns and developing new features.

  • For legal compliance, such as responding to subpoenas, court orders, or regulatory requirements.

  • For other purposes disclosed at the time of collection or with your consent.

We only use your personal information for the purposes described above or compatible purposes, and we minimize data collection to what is necessary.

3. Sharing Your Information

We may share your personal information with third parties for the purposes outlined in this Privacy Policy. All sharing is done for proper and lawful reasons under California and federal law, such as identity verification, credit checks, and fraud prevention. We require these third parties to use your information only for the specified purposes and in accordance with applicable laws.

  • Service Providers: We share information with vendors that assist us in operating our Services, including:

    • Stripe.com: For payment processing, identity verification, and fraud prevention.

    • Veriff.com: For identity verification services.

    • Payscore.com: For credit screening and fraud prevention.

    • Plaid.com: For financial account connections and verification.

    • Credit reporting agencies, including but not limited to Equifax, TransUnion, and Experian: For obtaining credit reports solely for fraud prevention purposes.

  • Other Third Parties: We may share information with legal authorities, advisors, or in connection with business transactions (e.g., mergers or acquisitions), but only as required or permitted by law.

  • Affiliates: We may share information within our corporate family for internal business purposes.

We do not sell your personal information to third parties. However, under certain privacy laws like the CCPA/CPRA, some sharing (e.g., with analytics providers) may be considered a "sale" or "sharing." See Section 5 for your rights to opt out.

For more details on how Stripe handles your information, please review Stripe's Privacy Policy at https://stripe.com/privacy.

4. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, use, or disclosure. However, no system is completely secure, and we cannot guarantee absolute security.

5. Your Rights and Choices

You have certain rights regarding your personal information, depending on your location.

  • Access, Correction, and Deletion: You may request access to, correction of, or deletion of your personal information.

  • Opt-Out of Marketing: You can opt out of receiving promotional emails by following the unsubscribe instructions.

  • Do Not Track: We do not respond to browser Do Not Track signals, but you can manage cookies through your browser settings.

California Residents (CCPA/CPRA Rights):

  • Right to Know: Request details about the personal information we collect, use, disclose, and sell/share.

  • Right to Delete: Request deletion of your personal information, subject to exceptions.

  • Right to Correct: Request correction of inaccurate information.

  • Right to Opt-Out of Sale/Sharing: We do not sell personal information, but to opt out of any potential sharing (e.g., for targeted advertising), email us at privacy@winstonoak.com.

  • Right to Limit Use of Sensitive Personal Information: Request limits on the use of sensitive data (e.g., SSN, financial info).

  • Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

To exercise these rights, contact us at privacy@winstonoak.com. We may verify your identity before responding. You can also authorize an agent to make requests on your behalf.

6. Children's Privacy

Our Services are not intended for children under 13 years of age (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we learn we have collected such information, we will delete it.

7. International Data Transfers

Your information may be processed and stored in the United States or other countries. By using our Services, you consent to such transfers.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a new effective date. Your continued use of the Services after changes constitutes acceptance.

9. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Winston Oak Developments 861 sixth ave, #310, San Diego, CA 92101 Email: privacy@winstonoak.com Phone: 858-373-9441