Privacy Policy

Last updated: June 23, 2026

Investor Roster (“Investor Roster,” “we,” “us,” or “our”) is operated by High Peaks Capital LLC dba Investor Roster, a New York limited liability company with its principal place of business at 600 Fishers Station Drive, Suite 114, Victor, NY 14564. This Privacy Policy describes how we collect, use, share, and protect personal information when you use the Investor Roster website at investorroster.com (the “Service”).

By using the Service you agree to this Privacy Policy. If you do not agree, do not use the Service.

1. Information we collect

We collect the following categories of information:

Account information.When you sign up, we collect your email address and any name or company information you provide. We use email for authentication via magic link — we do not store passwords.

Payment information.We use Stripe, Inc. (“Stripe”) to process subscription payments. We do not see or store full payment card numbers, bank details, or other sensitive payment data on our servers. Stripe collects this information directly and we receive only a customer identifier and limited subscription metadata (status, plan, trial end date) from Stripe.

Content you create. When you use the Service, you create content that is stored in your account: saved lists of firms, notes, tasks, follow-up reminders, deal records, activity logs, and any private firm or contact records you add. This content is visible only to you and is never shared with other subscribers.

Usage information. We log basic technical information needed to operate the Service: pages visited, features used, timestamps, IP address, browser type, and error logs. We use this information for security, debugging, and product improvement, not for advertising or profiling.

Submissions. If you submit information through public forms (for example, the co-GP self-submission form at /submit), we collect what you provide. Public submissions are reviewed by our team and may be added to the public reference database.

We do not collect information from children under 18. The Service is intended for use by real estate professionals.

2. How we use information

We use the information we collect to:

• Operate, maintain, and improve the Service.
• Authenticate your account and send transactional emails (magic links, billing notifications, service announcements).
• Process subscription payments through Stripe.
• Respond to support requests and communications you send us.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations.

We do not sell your personal information to third parties. We do not share your personal information with third parties for their own marketing purposes.

3. How we share information

We share information only with the following categories of third parties:

Service providers (processors). We use the following processors to operate the Service. Each processes data on our behalf under contractual data-protection obligations:

Legal compliance. We may disclose information if required by law, subpoena, court order, or other legal process, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Investor Roster, our users, or others.

Business transfers. If Investor Roster is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such transfer that materially changes how your information is handled.

4. Cookies and similar technologies

We use cookies that are strictly necessary to operate the Service:

• Authentication cookies — set by Supabase to keep you logged in across pages.
• Session cookies— temporary cookies used for security and request handling.
• First-party analytics & attribution cookies — a first-party cookie that lets us count a website visit once per browser session, and, if you arrive from one of our ads or links, a first-party cookie that records which marketing source referred you (for example a UTM tag or referring site). These contain no advertising identifiers and are not shared with any third party.

We use our own first-party usage analytics to understand how the Service is used and how visitors find us — for example which features are used, basic signup-and-conversion counts, and the marketing source that referred a visitor. This data is stored in our own database and is not sent to any third-party analytics provider. We do not use advertising cookies or third-party tracking pixels. If we add a third-party analytics service in the future, this Privacy Policy will be updated and we will obtain consent where required.

5. Data security

We use industry-standard security measures to protect your information, including encryption in transit (HTTPS for all traffic), encryption at rest for sensitive data, role-based access controls on our database, and regular security review of our codebase. No system is perfectly secure, however, and we cannot guarantee the absolute security of any information transmitted to or stored by us.

6. Data retention

We retain account and content information for as long as your subscription is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. If you cancel your subscription and request account deletion, we will delete your personal information within 30 days, except where retention is required by law.

Payment records held by Stripe are retained according to Stripe’s own retention policies and applicable law.

7. Your rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

• Access— request a copy of the personal information we hold about you.
• Correction— ask us to correct inaccurate or incomplete information.
• Deletion— ask us to delete your account and personal information.
• Portability— request a copy of your account content in a portable format.
• Objection / restriction — object to or restrict certain uses of your information.

To exercise any of these rights, contact us at the address in Section 11. We will respond within 30 days. We may need to verify your identity before fulfilling certain requests.

8. California residents

If you are a California resident, the California Consumer Privacy Act (“CCPA”) gives you additional rights, including the right to know what personal information we collect, the right to delete that information, and the right to opt out of any “sale” of your personal information. We do not sell personal information as that term is defined under the CCPA.

To exercise CCPA rights, contact us at the address in Section 11.

9. International users

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice in the Service before the changes take effect. The “Last updated” date at the top of this page reflects the most recent revision.

11. Contact us

Questions about this Privacy Policy, requests to exercise your rights, or other privacy-related communications can be sent to: