Effective date: May 28, 2026
Our commitment in plain language
We use your data to improve your experience and publish aggregate market insights. We never sell your personal information or share your deal activity with other users.
Offer Relay ("we," "us," "our") operates the wholesale real estate marketplace at offerrelay.app. We connect wholesalers who have properties under contract with investors who are looking to buy. This Privacy Policy describes how we collect, use, and protect information when you use our platform.
Questions? Email us at [email protected].
We use Stripe to process all payments. Your credit card number, billing address, and payment credentials are entered directly on Stripe's secure infrastructure and are never transmitted to or stored on Offer Relay's servers. We retain only a non-sensitive Stripe customer ID to manage your subscription.
Because proof of funds documents contain sensitive financial information, we apply a higher standard of handling to them than to any other data on the platform. This section explains exactly what we do — and do not do — with these documents.
Your document is transmitted directly to our private storage infrastructure over an encrypted HTTPS connection. It is never routed through an intermediary, processed client-side, or handled by any third party other than our storage provider (Supabase, which uses AES-256 encryption at rest on AWS S3). The document is stored in a private, access-controlled bucket that is not publicly accessible by URL.
When our verification team needs to review your document, the system generates a short-lived, time-expiring access link — valid for 60 seconds — that allows the document to be viewed in a read-only context. This link expires automatically and cannot be reused. No persistent download link is ever created. Our team cannot save, copy, or export your document — access is view-only and session-scoped. Even Offer Relay staff cannot generate a downloadable copy of your document outside this review window.
As part of our verification process, we use an automated document integrity check to identify signs of AI-generated or digitally altered documents. This analysis is performed programmatically — your document content is not read or interpreted by a human as part of this step. The result of the check (a risk score and flag, if any) is stored internally; the document itself is not retained for this purpose beyond the verification window.
Access to proof of funds documents is restricted to Offer Relay's verification team through authenticated admin credentials. The document is never visible to wholesalers, other investors, or any other platform user — at any point in the verification process or afterward. It is not referenced, linked, or surfaced anywhere on the platform.
Once your verification is confirmed, your proof of funds document is permanently deleted from our storage within 7 days. We do not retain the document file after verification is complete. Only the outcome of the verification — approved or flagged for review — is retained on your account record. If verification is declined, the document is deleted within 7 days of that determination. You may also request immediate deletion at any time by contacting [email protected].
In plain terms
We see your document for long enough to confirm you're a real investor with real capital. After that, it's gone. We can't download it, share it, or pull it up again — and after 7 days, it doesn't exist on our systems at all.
We do not, and will not:
As the platform grows, we accumulate aggregated, anonymized market data — deal pricing, investor demand by region, time-to-close by market, and deal quality trends. We use this data to:
Any published market data is aggregate only — no individual user's deals, activity, or identity is ever included in external reports.
We use a small number of trusted third-party services to operate the platform. Each receives only the data necessary to provide their service:
Stripe
Payment processing and subscription management
Email address, subscription tier — no card numbers ever touch our servers
Stripe Privacy Policy →Supabase
Database, authentication, and file storage
Account data, deal records, and uploaded contract documents
Supabase Privacy Policy →Vercel
Platform hosting and delivery
Standard server access logs (IP, user agent, request path)
Vercel Privacy Policy →We take reasonable technical and organizational measures to protect your information:
No system is perfectly secure. If you believe your account has been compromised, contact us immediately at [email protected].
Permanently deleted within 7 days of verification being confirmed or declined. No copy is retained after deletion. See Section 3 for the full handling policy.
Retained for as long as your account is active. If you close your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain records for legal, tax, or compliance purposes.
Anonymized, aggregate data derived from platform activity — deal pricing trends, regional demand, time-to-close averages — contains no personal identifiers and may be retained indefinitely for platform improvement and market reporting.
You have the right to:
To exercise any of these rights, email [email protected]. We will respond within 30 days.
The platform is not intended for anyone under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users by email and update the effective date at the top of this page. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.
For any privacy-related questions, requests, or concerns, contact us at [email protected]. We take privacy questions seriously and will respond promptly.
© 2026 Offer Relay. All rights reserved.