Privacy Notice

Privacy roles depend on the activity, data and purpose. A “Workspace User” is a person acting for an organization to manage properties, publications or related business activity through a Territi workspace. A “Property Experience User” is a person exploring or interacting with property experiences, whether anonymously or through an account or profile. The same person may hold both roles, and having an account, profile or payment relationship does not by itself determine the role. A workspace organization generally controls personal data it submits about its personnel, property contacts, owners and prospective clients. When JeanKAI Labs, LLC handles that data on the organization's documented instructions to provide the service, JeanKAI Labs, LLC acts as a processor or service provider for the organization.

“Property Experience Data” means personal or derived information processed when a Property Experience User explores or interacts with a property experience, including the limited activity, preferences, contact choices and communications described in this Notice. The specific purpose and context determine which data is collected and which privacy controls apply.

JeanKAI Labs, LLC determines the purposes and means of processing aggregate publication activity, direct contact routing, service security, and the Eligible Training Content and research, quality, training and development data described in this Notice. For those purposes, JeanKAI Labs, LLC acts as a controller or business to the extent applicable law assigns that role. Customer-controlled personal data handled only to provide the service is not repurposed for Territi training.

When a Territi customer receives an authorized direct contact request, that customer independently controls its follow-up and any later use of the disclosed data. Each party remains responsible for the legal duties that apply to its role.

JeanKAI Labs, LLC also determines the purposes and means of processing account administration, service security, abuse prevention and legal compliance data.

For transactions it processes, Paddle will independently determine how it handles the buyer, payment, tax, fraud and transaction data needed to perform its Merchant of Record duties. Its privacy notice will govern that processing.

We collect account and professional-profile data; workspace membership and roles; business contact information; private property dossiers; listing, ownership, legal, administrative, location and media details; photographs, video, audio, floor plans and maps; publication and tour settings; prompts, instructions, corrections, comments, generated text, narration and audio; voluntary direct contact requests and consent evidence; support communications; payment-provider customer, subscription, transaction and adjustment identifiers; and security and service-usage events.

We may create derived information from Customer Content and service use, including classifications, labels, annotations, embeddings, system, output or publication quality evaluations, trends, aggregate statistics and deidentified datasets used to operate and develop Territi. Direct visitor identity, contact and message data is excluded from training datasets. Individual visitor activity enters training only through a purpose-limited workflow that uses authorized, minimized and pseudonymous or deidentified activity under separate regional privacy governance and contextual notice. Quality evaluations are not person-quality, solvency, credit or housing-eligibility scores.

Territi does not receive complete payment-card details from the payment provider. Property dossiers, documents and customer support communications may contain personal or sensitive information. Customers must minimize unnecessary sensitive content and provide any required notices, lawful bases, permissions and consents.

Territi provides aggregate publication analytics and a separately governed individualized visitor-personalization and agent-support mode. Aggregate analytics uses daily activity counters only. It does not create visitor profiles, analytics cookies, persistent visitor or session identifiers, fingerprints, individual browsing histories or cross-property tracking, and counts are not linked to contact requests. The individualized mode operates under the controls described in Section 8. Aggregate counters record publication views, tour starts, scene views and interaction totals without exact event times, device data, referrers or IP addresses. Hosting and security systems may process network data needed to deliver and protect the service; that data is not added to the counters.

Basic publication browsing does not create a reusable individual activity history or combine a person's activity across properties. The separately governed individualized mode explains the data used in context, applies regional privacy requirements and obtains any required choice before collecting or combining individual activity.

Identity and contact data may include a voluntarily provided name, phone number, email address, preferred contact channel and additional information included in a contact request. We may verify a contact channel to confirm the request, prevent abuse and protect the service.

Visitor conversations and contact submissions may contain personal or sensitive information. Visitors must minimize unnecessary sensitive content. Direct visitor identity, contact and message data is excluded from training datasets; authorized individual activity enters training only through the purpose-limited workflow described in this Notice.

Data comes from customers and workspace administrators; visitors who open publications or voluntarily use contact tools; identity, verification and billing providers; service telemetry and security controls; and classifications, summaries and aggregate measurements generated from those activities.

We use data to authenticate users; provision and administer workspaces; host private dossiers; generate, publish and deliver tours; route voluntary direct contact requests; provide aggregate analytics; meter AI usage and entitlements; support billing; communicate about the service; prevent abuse; diagnose incidents; comply with law; and enforce agreements.

We measure publication activity in aggregate to understand usage and improve the service. The individualized visitor-personalization and agent-support mode operates under separate activation, notice, legal-authority and data-rights controls. Historical privacy access, withdrawal and deletion controls remain available together with necessary security operations.

A customer receives individual visitor information only when the visitor voluntarily requests contact and authorizes the applicable disclosure. The personalized visitor and agent-support service mode uses independent activation controls and any regional consent or other valid legal basis; a feature setting, customer acceptance or plan entitlement never replaces visitor privacy authority.

We use Eligible Training Content and permitted derived information to research, train, fine-tune, test, evaluate, validate, improve and develop Territi's current and future models, algorithms, analytics, systems, assistants, products, services and features, including artificial-intelligence and machine-learning functionality. This is a disclosed condition of the workspace service. Direct Property Experience Data enters this purpose only through a separately authorized workflow with regional authority, contextual notice and the applicable user controls. These activities may include controlled human review for quality assurance, classification, labeling, evaluation, training, security and development.

We may aggregate or deidentify information to understand property, visitor and product patterns, measure quality, build evaluation datasets, reduce errors and improve results. Resulting systems and improvements may benefit Territi, visitors and other customers, but we apply safeguards reasonably designed to prevent them from identifying a person or customer or revealing or reconstructing private Customer Content or a personal visitor profile.

Depending on context and applicable law, our legal bases include performing a contract, taking requested pre-contract steps, following a customer's lawful instructions, legitimate interests in operating, securing, researching and improving the service after considering affected rights, compliance with legal obligations and consent or another valid basis where required. Customer-content training is not based on consent where the contract and another lawful basis apply. Where processing does rely on consent, you may withdraw it without affecting prior lawful processing.

Territi may process Customer Content in its own automated and AI-enabled systems for the purposes in Section 5. The creation workflow analyzes authorized property material to prepare text, property analysis, narration and audio. Visitor-personalization models operate only through the separately governed individualized workflow described in this Notice.

When a requested feature depends on a provider, Territi sends only relevant prompts and content to contracted artificial-intelligence or voice-synthesis providers so they can return text, property analysis, speech or audio and secure their service. Territi may use an artificial-intelligence provider to host fine-tuned models dedicated to Territi.

Providers processing Customer Content or Property Experience Data for Territi are authorized under applicable contracts, instructions and data controls. Provider data-sharing and general model-improvement opt-ins remain disabled. Territi does not authorize them to use that information to train or improve their general models or for independent purposes. Provider retention and controls depend on the applicable service configuration and contract.

Before information is used for training or evaluation, Territi filters it against the applicable development-data rules and minimizes, redacts, pseudonymizes or deidentifies it as appropriate. Direct visitor identity, contact and message data, customer identifiers, payment data, credentials, sensitive data and private legal or administrative documents are excluded. The purpose-limited visitor-development workflow accepts pseudonymous activity only under separate regional authority, contextual notice and withdrawal controls. Authorized personnel or contractors may review limited eligible content under role-based access, confidentiality and security controls.

AI-generated property output is an estimate and may be incomplete or wrong. Territi does not use AI to rate a visitor's quality, financial capacity, creditworthiness or legal eligibility for a property, and customers must review generated information before publishing or acting on it.

We use contracted providers for hosting and database services, workflow execution, artificial intelligence and voice synthesis, transactional communications, phone verification, bot protection, error monitoring and, only when expressly enabled, privacy-configured product analytics. They may process Customer Content or Property Experience Data only for the relevant contracted service, security and support purposes; an artificial-intelligence provider may also process Eligible Training Content to host fine-tuned models dedicated to Territi. Provider use for independent or general model training is not authorized. Product analytics is disabled unless configured, and autocapture and session recording are not enabled by default. Territi maintains a current internal subprocessor inventory and can provide additional information to an authorized contractual or privacy contact upon written request, subject to reasonable confidentiality protections.

We may also disclose data to professional advisers, authorities or counterparties when reasonably necessary for legal compliance, security, a corporate transaction or the protection of rights. We do not sell personal data, sell original Customer Content as a standalone dataset or content product, or share personal data for cross-context behavioral advertising.

For the optional partner program, our contracted affiliate-management provider processes referral identifiers and eligible purchase and subscription information received through the payment integration to administer affiliate attribution, commissions and corrections. Territi does not send property dossiers, tour content or visitor contact requests to this integration. Applying a partner code is voluntary and does not grant platform access.

Content selected for an active property publication is intentionally made available to visitors with its public link. A tour draft, status or generated playback payload does not independently make a property public.

Publication analytics stores bounded daily counters for publication views, tour starts, scene views and interaction totals. Reports use completed UTC days and suppress small counts. The counters do not identify a person, create an individual history, follow a visitor across properties or become linked to a later contact request.

Before authorized contact, customers receive only aggregate or deidentified publication statistics and do not receive a visitor identity, browsing record, profile, score or inferred preference brief.

When a visitor requests contact, the displayed statement authorizes sharing the verified contact information and message only for that request with the responsible customer. Contact verification creates a protected short-lived session for security and request completion; it does not create a reusable buyer profile. Marketing remains a separate choice.

Customers independently control their follow-up and are responsible for marketing permission, fair-housing compliance and lawful use of disclosed contact data. A contact request does not automatically authorize future advertising or commercial campaigns.

Separately governed visitor-personalization and agent-support processing is distinct from basic publication browsing and direct contact. The individualized mode applies the applicable regional notices, choices, activation controls and data-rights mechanisms before individualized collection or use.

JeanKAI Labs, LLC and its providers may process data in countries other than yours, including the United States. Where required, we use contractual and organizational safeguards for international transfers, and mandatory local protections continue to apply.

We generally keep account, workspace, property and publication content while the account or service relationship is active, then delete or anonymize original Customer Content according to customer instructions, backup cycles, security needs, disputes and legal obligations. Billing, tax and transaction records may be retained for the periods required by payment providers, accounting and applicable law.

We may retain aggregated or deidentified information and models, model weights, evaluations, benchmarks, algorithms, systems and other improvements developed from Eligible Training Content when they do not reasonably identify a person or customer or permit reconstruction of the original Customer Content. Raw dataset staging copies are deleted within 30 days after the dataset closes or its job ends, whichever is later. Supported provider training and validation file objects are deleted within 7 days after a fine-tuning job reaches a terminal state, and obsolete dedicated fine-tuned models are deleted within 30 days after retirement, subject to provider capabilities, security, disputes and legal holds. Provenance and deletion evidence may be kept for up to three years without raw content.

Daily publication counters are kept for 180 days. Reports use completed UTC days and omit counters below five; they do not identify unique visitors or individual conversion. Historical raw analytics is no longer collected or exposed in reports and follows its existing 30-day cleanup. A profile created under a separately authorized governed configuration and its authorized signals may be retained for up to 180 days after the latest profile activity unless the visitor requests deletion, objects or withdraws permission sooner. An account or feature configuration alone never extends retention.

Phone-verification audit records expire after 7 days; expired visitor sessions are deleted, and an inactive verified visitor identity without a live session or retained consent may be kept for up to 180 days. A profile linked to an authorized contact and the related consent evidence may be retained as reasonably needed to respond, prove compliance, prevent abuse and resolve disputes. Abandoned upload reservations expire after two hours. Temporary tour-generation intake or orphan artifacts default to a 24-hour cleanup window, configurable from 1 to 720 hours for an authorized deployment.

Pseudonymous recommendation-consent evidence detached from an expired profile may be retained for up to three years to prove the choice and withdrawal; contact-link evidence may be retained with the corresponding contact record as reasonably needed to respond, prove compliance and resolve disputes. Security records and audit trails are retained as reasonably needed. When deletion is not immediately possible, we restrict use until secure deletion or anonymization.

You can apply a partner code in the final onboarding step. When you apply it, we save the referral to your account. You have up to 30 days to complete registration; once completed, we retain the association for the bonus and eligible purchases. We do not use referral cookies or save this referral in browser storage. We retain restricted evidence of grants, promotional usage and a protected identifier derived from the verified account identity to prevent repeat benefits, including after account deletion. That identifier is pseudonymous, not anonymous, and is not shared with partners. It is retained for this eligibility and abuse-prevention purpose, subject to applicable rights and legal obligations.

We use role-based access, row-level database policies, private storage boundaries, encryption in transit, privileged-key isolation, rate limits, bot protection, audit controls and least-privilege provider integrations. Human access to Customer Content and internal Property Experience Data is limited by role and need and subject to confidentiality and security controls. No system is perfectly secure, so users must protect their identity-provider and email accounts and report suspected compromise promptly.

Depending on your location, you may request access, correction, deletion, restriction, objection or portability; withdraw consent; and complain to a data-protection authority. We may verify identity and authority before acting, and lawful exceptions may apply.

A visitor can use the privacy control to turn off and delete an authorized property-intent profile without losing basic browsing. That action deletes its property-intent signals, stops new profile use and removes any active agent-linked brief from Territi; it does not affect processing or disclosures that were lawful before the action. The control remains available whenever an authorization record is associated with the browser.

For data independently controlled by a Territi workspace organization after an authorized disclosure, contact that organization first. We will support its response as required by the service contract and applicable law. Use the legal/privacy contact in Operator Details for Property Experience Data and other requests controlled by JeanKAI Labs, LLC.

A deletion or objection request does not require deletion of information that has been lawfully aggregated or deidentified so that it is no longer personal data, or of a model or improvement that does not reasonably identify a person or permit reconstruction of the original personal data, except where applicable law requires otherwise.

Territi uses necessary cookies and similar technologies for authentication, security, session continuity and locale continuity. A contracted bot-protection provider may process limited device and interaction signals to distinguish legitimate use from abuse. Optional analytics runs only when configured and with the visitor choice required by applicable law. Territi does not use cross-site behavioral advertising.

The partner program uses the code you voluntarily apply during onboarding. The server validates the referral and shares the partner and purchase identifiers needed with the affiliate-management provider to attribute eligible purchases. We do not load affiliate-tracking scripts in your browser. You can remove the code before completing registration. Not applying a code does not affect your access request, purchases or direct-registration welcome.

Basic publication browsing does not create a profile identifier. The separately governed profile mode sets a unique pseudonymous property-intent identifier only under the applicable regional privacy process and required visitor choice. A declined or disabled choice may be remembered with the same non-unique value for all visitors and does not identify a profile. The identifier does not contain direct contact details and is not disclosed to agents.

Legal acceptance is recorded as versioned evidence against the authenticated account. A non-material document clarification may receive a new displayed revision without forcing renewed acceptance; the minimum accepted version advances when a material change requires it. Territi does not use a separate legal-consent cookie or an anonymous pre-authentication consent intent.

Territi is a business service for adults and is not directed to anyone under 18. We do not knowingly create accounts for children.

We may update this Notice to reflect legal, provider, security or product changes. The page identifies the current version and effective date, and material changes will be announced through a reasonable channel. Renewed acceptance will be collected where required.

This Notice governs aggregate publication analytics and the separately governed individualized visitor service mode. The individualized mode presents the required just-in-time information, applies regional privacy governance and collects any visitor choice or consent required by applicable law before processing begins. Implementations within the data categories, purposes, recipients, retention periods and safeguards described here do not require a new customer acceptance solely because the underlying model or feature changes. We will update this Notice if our practices materially exceed this scope.

Use the legal/privacy contact in Operator Details for questions or rights requests. The formation jurisdiction and registered address shown there identify the responsible entity for formal notices.