Last Updated: April 2026

About This Policy

This Privacy Policy describes how Hauser OS Inc. ("Hauser OS Inc.," "we," "our," or "us") collects, uses, processes, and shares information when you use the Hauser platform, website, tools, and related technology services (collectively, the "Platform").

Who Holds Your Data

Hauser OS Inc. is a technology company. It owns and operates the Platform and is the data controller for all platform usage — including your account, your scoring history, your uploaded documents, your platform interactions, and any partner recommendations surfaced inside the app. Hauser OS Inc. does not hold a California real estate license.

Real estate brokerage services are provided separately by Avenida Real Estate Inc. (CA DRE #02247189), which operates under the registered trade name "Hauser" as a DBA. Avenida is the data controller for client and transaction data created through buyer representation engagements, subject to your Buyer Representation Agreement and applicable California real estate law.

In short: Hauser OS Inc. handles your home data and platform experience. Avenida Real Estate Inc. handles the brokerage transaction and client relationship. Both entities are wholly owned subsidiaries of Thoughtful Holdings Inc., a non-operating holding company that does not directly receive or process your personal information.

By using the Platform, you acknowledge that we collect, use, disclose, and retain information as described in this Privacy Policy. Your use of the Platform is governed by our Terms of Service.

1. Information We Collect

We collect information in the following categories:

Information You Provide Directly

• Account registration: name, email address, phone number, password

• Profile information: home search preferences, target markets, budget parameters

• Uploaded documents: inspection reports, disclosure packages, and other property materials you submit for analysis via the Platform ("Uploaded Content")

• Communications: messages, inquiries, and other content you send to us

Information Generated Through Platform Use

• Property searches, saved properties, and due diligence activity

• Scores, analyses, and outputs generated by the Platform in connection with your account

• Queries submitted to AI features and AI-generated responses associated with your session

• Financial tool inputs and outputs (mortgage, affordability, HELOC, etc.)

• Contractor and Service Provider lists you build within the directory feature, including providers you add manually and providers you save from third-party listing sources

Third-Party Property Data

To power Platform scoring and analysis, we obtain property data from third-party providers including property data APIs, public records aggregators, MLS data providers, permit databases, environmental data sources, and satellite imagery services. This data is associated with properties you search or analyze, not with you personally, unless you initiate a transaction or upload property-specific documents.

Third-party data providers have their own privacy practices. We obtain this data pursuant to applicable provider agreements and use it solely to operate and improve the Platform.

Third-Party Business Listings

The Platform’s contractor directory feature draws from publicly available business information, including data sourced from Google Business listings and similar providers. This information describes businesses, not you, and is used to allow you to identify and save Service Providers within your account. Hauser OS Inc. does not vet or verify this information; refer to the Terms of Service for the limitations of the directory feature.

Device and Usage Information

• IP address, browser type, operating system, and device identifiers

• Pages visited, session duration, and interaction patterns

• Referring URLs and exit pages

• Cookies and similar tracking technologies (see Section 7)

Payment Information

Payment processing is handled by third-party payment processors. We do not store complete payment card numbers or sensitive financial credentials on our servers. We retain transaction records (amount, date, service purchased) for accounting and legal compliance purposes.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account and authenticate your identity

• Deliver Platform features including property scoring, document analysis, AI features, and financial tools

• Process and analyze Uploaded Content to generate property intelligence reports

• Communicate with you about your account, transactions, and service updates

• Process payments and maintain financial records

• Improve Platform performance, scoring methodology, and AI features using aggregate and de-identified data

• Detect, investigate, and prevent fraud, security incidents, and misuse of the Platform

• Comply with applicable law, regulatory requirements, and legal obligations

• Enforce these Terms and our other policies

We collect only the information we reasonably need to deliver the Platform, operate the business, improve our services, and market Hauser to prospective users. We do not sell your personal information. We do not use Uploaded Content, property intelligence outputs, scoring history, financial tool inputs, AI interaction data, or logged-in app activity for third-party advertising, retargeting, or cross-site behavioral advertising. We do not provide raw Uploaded Content to third parties for the purpose of training third-party foundation models or other third-party AI systems.

Automated Processing

Hauser uses automated processing — including the HauserEQ scoring system, computer vision analysis, and AI-assisted document parsing — to generate analytical outputs about properties and to power Platform features. These outputs are informational and are intended to support your decision-making. Final decisions about purchasing, financing, repairing, or otherwise acting on a property remain entirely with you. Automated processing does not produce legal or similarly significant decisions about you as an individual.

3. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

Affiliated Entities

Hauser OS Inc. shares information with Avenida Real Estate Inc. as necessary to deliver coordinated services under the Hauser brand. For example, if you transition from Platform use to engaging buyer representation services, relevant account and property data may be shared with Avenida to enable that engagement. Both entities are wholly owned subsidiaries of Thoughtful Holdings Inc. and operate under shared data governance standards. Thoughtful Holdings Inc. is a non-operating holding company and does not directly process your personal information.

Service Providers

We engage third-party service providers who process data on our behalf to support Platform operations. Currently, these include:

• Cloud infrastructure and hosting: Amazon Web Services (AWS), where Platform data and infrastructure are hosted in U.S. regions

• Authentication and identity management: Amazon Cognito (an AWS service), used to create and maintain your account and to generate the anonymized account identifier referenced in this Policy

• Document parsing and AI extraction: Pulse (Pulse Software, Corp.), an enterprise document intelligence service used to parse and extract structured data from uploaded documents such as inspection reports and disclosures. Pulse acts as a data processor on Hauser’s behalf and is SOC 2 Type II certified and ISO 27001 compliant. Hauser has enabled Zero Data Retention (ZDR) with Pulse, meaning documents sent to Pulse for processing are not retained by Pulse after structured data is returned to Hauser, and are not used to train or improve Pulse’s services

• Payment processing: Stripe (or successor providers), which processes payment card and bank account information directly

• Email and communication delivery providers

• Analytics and performance monitoring tools (see Section 8)

• Marketing, advertising, and conversion measurement providers: We may use advertising platforms, pixels, tags, and campaign measurement tools on our public marketing website to understand campaign performance, measure conversions, retarget website visitors, and reach prospective customers. These tools are not used to target advertising based on Uploaded Content, property intelligence outputs, scoring history, financial tool inputs, AI interaction data, or logged-in app activity

• Third-party property data API providers, including PropertyLens, public records aggregators, and permit data providers

Service providers are contractually required to use your information only as directed by us and to implement appropriate security measures. We may add or change service providers from time to time as our infrastructure evolves; the categories of service providers above are stable, while specific vendors may change.

Transaction Parties — Brokerage Services

If you engage buyer representation services through Avenida Real Estate Inc. dba Hauser, certain information may be shared with transaction parties including escrow companies, title companies, listing agents, and lenders, solely as necessary to facilitate and close your real estate purchase. This sharing is governed by your Buyer Representation Agreement and applicable California law.

Legal Requirements

We may disclose information when required by law, court order, subpoena, or other legal process; when necessary to protect the rights, property, or safety of Hauser OS Inc., our users, or the public; or in connection with fraud prevention or security investigations.

Business Transfers

In the event of a merger, acquisition, reorganization, or sale of substantially all of our assets, your information may be transferred to the acquiring entity. We will provide notice of any such transfer and your rights with respect to your information.

4. California Privacy Rights (CCPA / CPRA)

We do not sell your personal information. We do not use Uploaded Content, property intelligence outputs, scoring history, financial tool inputs, AI interaction data, or logged-in app activity for cross-context behavioral advertising.

Our public marketing website may use advertising pixels, cookies, tags, and similar technologies to measure campaign performance, retarget website visitors, and advertise Hauser to prospective customers. To the extent this activity is considered “sharing” personal information for cross-context behavioral advertising under California privacy law, California residents may opt out as described below.

California residents have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

Right to Know

You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the purposes for which it is used, and the categories of third parties with whom it is shared. Where you request a copy of your personal information, we will provide it in a portable, machine-readable format (such as JSON or CSV) where technically feasible.

Right to Delete

You may request deletion of personal information we hold about you, subject to exceptions required by law — including California DRE recordkeeping requirements, which mandate retention of transaction records for a minimum of three years.

Right to Correct

You may request correction of inaccurate personal information we hold about you.

Right to Opt Out of Sale or Sharing

We do not sell personal information. Our public marketing website may use advertising pixels, cookies, tags, and similar technologies that could be considered “sharing” personal information for cross-context behavioral advertising under California privacy law. California residents may opt out of such sharing through our cookie controls, where available, by using recognized browser-based opt-out signals where required by law, or by contacting us at ccpa@hauserhq.com or legal@hauserhq.com.

We do not use Uploaded Content, property intelligence outputs, scoring history, financial tool inputs, AI interaction data, or logged-in app activity for cross-context behavioral advertising.

Right to Limit Use of Sensitive Personal Information

We collect certain sensitive personal information (such as financial data) only as necessary to provide requested services. We do not use sensitive personal information for secondary purposes that would require a right to limit.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. We will not deny services, charge different prices, or provide a different level of service based solely on your exercise of privacy rights.

Categories of Personal Information Collected

The following table summarizes the categories of personal information we collect, consistent with CCPA disclosure requirements:

How to Submit a Request

To exercise your California privacy rights, contact us at ccpa@hauserhq.com or legal@hauserhq.com. We will confirm receipt within 10 business days and respond substantively within 45 days. We may extend the response period by an additional 45 days when reasonably necessary, in which case we will notify you of the extension and the reason. We may request verification of your identity before processing your request.

California “Shine the Light” Disclosure

California Civil Code §1798.83 permits California residents to request information about how a business shares personal information with third parties for those third parties’ direct marketing purposes. Hauser OS Inc. does not share personal information with third parties for their direct marketing purposes.

5. Personalized Partner Recommendations

Hauser may, in the future, offer a Recommendations feature that surfaces relevant offers from participating partners — including mortgage lenders, insurance carriers, and home-related retailers — based on your property intelligence data (EQ) and platform activity (IQ). This section describes how that feature is intended to operate when it becomes available. If and when Recommendations are activated for your account, they will appear within a dedicated section of the Hauser app and you will be able to disable the feature at any time in your account settings.

Commercial Relationships with Partners

Some partner recommendations may involve commercial relationships between Hauser and participating partners. Today, Hauser does not receive compensation for surfacing recommendations or for matching them to users. If this changes in the future and Hauser receives compensation in connection with a recommendation, referral, completed transaction, or user action, we will disclose that relationship in the relevant recommendation experience before you choose to proceed.

How Matching Will Work

If activated, partner recommendations will be matched using your account’s anonymized identifier — an opaque token assigned at registration that contains no personal information. This identifier cannot be used by any partner to identify you, contact you, or correlate your identity against external datasets. Partners will receive only this token and the minimum anonymized signals necessary to return relevant offer parameters. They will not receive your name, email address, phone number, property address, or any other personally identifying information at the matching stage.

How Recommendations Will Be Delivered

If activated, all partner recommendations will be presented inside the Hauser app only. You will not receive unsolicited communications — email, phone, or otherwise — from a partner as a result of recommendations being surfaced to you. Partners will not have access to your contact information unless and until you explicitly initiate a specific request.

Initiating Contact with a Partner

If you choose to act on a recommendation — for example, submitting a mortgage inquiry or requesting an insurance quote — you will be presented with a clear, in-context disclosure of exactly what information will be shared with that specific partner for that specific purpose. You must affirmatively consent before any personally identifying information is transmitted. Each such action will be a discrete consent event; acting on one recommendation will not enroll you in any partner’s marketing database or authorize future contact.

Partner Obligations

Partners who participate in the Hauser Recommendations feature will be contractually prohibited from attempting to de-anonymize the tokenized identifier, correlate it against external datasets, or use it for any purpose other than returning offer parameters to Hauser. Any such attempt will constitute a breach of their partner agreement and may constitute a violation of applicable law.

Your Controls

If activated, you will be able to disable the Recommendations feature at any time in your account settings. Disabling will hide the Recommendations section from the app entirely and stop all partner matching. Re-enabling will restore the feature instantly. Communication preferences for any Hauser-sent communications related to Recommendations — such as email digests or notifications — will be governed by your communication settings and will operate independently of the in-app feature itself.

6. Data Retention

We retain personal information only as long as needed for the purposes described in this Policy, with retention windows that vary by data type:

Account Data (No Transaction)

We retain your account information for the duration of your active account plus up to 24 months after account closure for security, fraud prevention, and legal compliance purposes. You may request deletion of your account at any time.

Transaction Records (Avenida Brokerage Services)

Transaction records — including offers, executed agreements, and related communications — are retained for a minimum of three years as required by California DRE regulations. We may retain records longer where required by law or for legitimate legal defense purposes.

Uploaded Content

Inspection reports, disclosure documents, and other materials you upload are retained for the duration of your active account plus up to 24 months after account closure to support continuity of property records and the homeowner dashboard. You may request deletion of Uploaded Content at any time, subject to legal retention requirements. Uploaded Content that has been transferred via Folio Transfer to a new owner is retained as part of that property’s folio for the duration of the receiving owner’s account, independent of the originating owner’s account status.

Security and Audit Logs

Security logs, access logs, and audit data are retained for up to 24 months for security monitoring, fraud prevention, and incident investigation purposes.

De-identified and Aggregate Data

We may retain de-identified or aggregate data derived from your usage indefinitely for Platform improvement, scoring methodology refinement, and research purposes. De-identified data cannot be used to identify you.

7. Security

We implement administrative, technical, and physical safeguards designed to protect your information from unauthorized access, disclosure, alteration, and destruction. These include:

• Encryption of data in transit (TLS) and at rest

• Access controls limiting employee access to personal information to those with a legitimate operational need

• Regular security reviews and monitoring

No security system is impenetrable. We cannot guarantee absolute security of your information.

Uploaded File Security

Uploaded files may be scanned, sandboxed, quarantined, rejected, or deleted for security, malware prevention, fraud prevention, and Platform-integrity purposes. We may also perform automated processing on uploaded files (such as parsing, classification, and structured data extraction) as described in Section 1.

Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you without unreasonable delay and in accordance with applicable California law (Cal. Civ. Code § 1798.82) and any other applicable breach notification requirements. Notification will be sent to the email address associated with your account and will describe the nature of the breach, the categories of information affected, and steps you can take to protect yourself.

8. Cookies and Tracking Technologies

Website vs. Logged-In App

Hauser uses cookies and similar technologies differently depending on whether you are visiting our public marketing website or using the logged-in Hauser app.

Our public marketing website may use cookies, pixels, tags, and similar technologies for analytics, campaign measurement, conversion tracking, retargeting, and advertising to prospective customers.

The logged-in Hauser app does not use third-party advertising cookies or retargeting pixels, and we do not use Uploaded Content, property intelligence outputs, scoring history, financial tool inputs, AI interaction data, or logged-in app activity for third-party advertising, retargeting, or cross-context behavioral advertising.

What We Use

We may use the following categories of cookies and similar technologies:

• Strictly necessary: Required for Platform operation, authentication, security, and account access. These cannot be disabled.

• Functional: Remember your preferences and settings.

• Analytics: Measure website and Platform usage, performance, and interaction patterns.

• Marketing and advertising: Used on our public marketing website to measure campaign performance, understand conversions, retarget website visitors, and advertise Hauser to prospective customers.

Analytics and Marketing Tools We Use

We use Google Analytics to help us understand website and Platform usage and improve performance. Google Analytics may collect device data, usage data, and interaction data as described in Section 1.

We may also use advertising and conversion measurement tools, such as ad platform pixels or similar technologies, on our public marketing website. These tools may help us measure campaign performance, understand whether marketing efforts lead to sign-ups or other conversions, and retarget visitors who have interacted with our public website.

We do not use these tools to share Uploaded Content, property intelligence outputs, scoring history, financial tool inputs, AI interaction data, or logged-in app activity with advertising platforms.

What We Do Not Use in the Logged-In App

Within the logged-in Hauser app, we do not use third-party advertising cookies, retargeting pixels, or cross-site behavioral advertising technologies. We do not use your uploaded documents, property analyses, scores, financial tool inputs, AI interactions, or account activity to target third-party advertising.

Your Choices

You may modify your browser settings to reject or delete cookies. Disabling strictly necessary cookies will impair Platform functionality.

Where we provide cookie controls, you may use those controls to manage analytics and marketing cookies. Analytics and marketing cookies can be disabled without affecting core logged-in app features, though some website features or campaign attribution may be affected.

California residents may also exercise applicable opt-out rights as described in Section 4.

Do Not Track and Opt-Out Preference Signals

Some browsers offer a “Do Not Track” (DNT) signal that communicates a preference not to be tracked. Because there is no uniform industry standard for how DNT signals should be interpreted, Hauser does not currently respond to DNT signals.

Where required by applicable law, we will recognize legally required browser-based opt-out preference signals, such as Global Privacy Control, for activities that constitute sale or sharing of personal information.

9. Email and Marketing Communications

We may send you communications related to your account, transactions, security, and Platform updates. These communications are necessary for the operation of the Platform and you cannot opt out of them while you maintain an active account.

We may also send marketing communications about Hauser features, new tools, partner recommendations, and similar content. You can opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email or by updating your communication preferences in your account settings. Opt-out requests are processed promptly in accordance with the federal CAN-SPAM Act.

Opting out of marketing emails does not affect transactional or service-related communications.

10. Third-Party Links and Integrations

The Platform may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you access through or in connection with the Platform.

11. Children

The Platform is intended solely for adults engaged in real estate or homeownership activities. We do not knowingly collect personal information from individuals under 18 years of age, and specifically not from children under 13 in compliance with the Children’s Online Privacy Protection Act (COPPA). If we become aware that we have collected personal information from a minor, we will delete it promptly. Parents or guardians who believe their child has provided personal information may contact legal@hauserhq.com to request deletion.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Updates are effective upon posting to hauserhq.com/legal/privacy-policy. We will provide notice of material changes via email or Platform notification at least 14 days before they take effect. Your continued use of the Platform after the effective date means the updated Policy will apply to information collected and processed after that date.

13. Contact Us

Privacy & Legal: Hauser OS Inc. — legal@hauserhq.com

CCPA Requests: ccpa@hauserhq.com

Real Estate Licensing: Avenida Real Estate Inc. — CA DRE #02247189

Mailing Address: 16185 Los Gatos Blvd., Suite 205, Los Gatos, CA 95032

Hauser OS Inc. and Avenida Real Estate Inc. are wholly owned subsidiaries of Thoughtful Holdings Inc. Real estate services are provided by Avenida Real Estate Inc. dba Hauser (CA DRE #02247189). Hauser OS Inc. provides technology and data services only.