Privacy Policy

1. Introduction

Trestle Platform LLC ("Trestle," "we," "us," or "our") operates the Trestle platform at trestlecre.com (the "Platform"). This Privacy Policy describes how we collect, use, store, and protect your information when you use the Platform.

By accessing or using the Platform, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Platform.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, organization name, and role (broker, lender, or administrator).

2.2 Deal and Property Information

When you submit deals through the Platform, we collect information contained in uploaded documents and data you enter, including:

• Property addresses, descriptions, and characteristics
• Tenant names, lease terms, and rental information
• Purchase prices, acquisition details, and financing requirements
• Offering memoranda, lease agreements, title reports, and broker comp reports

2.3 Financial and Credit Data

Through our automated pipeline, we retrieve publicly available financial data about tenants from third-party sources, including government filings, proprietary financial databases, and publicly available credit ratings. This data is associated with the deals you submit.

2.4 Usage Information

We automatically collect information about how you interact with the Platform, including pages viewed, features used, timestamps, event-level interaction data (such as clicks and form submissions), and general usage patterns. We also use a session-replay tool that records anonymized recordings of user interactions for product analytics and debugging purposes. Sensitive form fields (including passwords and payment card entry) are automatically masked and are not captured in recordings.

2.5 Payment Information

When you make a purchase, your payment card details are transmitted directly to our third-party payment processor over an encrypted connection. Trestle does not receive or store your full card number, CVV, or expiration date. We do retain limited billing metadata (such as the last four digits of the card, cardholder name, billing country, and transaction identifiers) for accounting, refund, and dispute purposes.

3. How We Use Your Information

We use the information we collect to:

• Provide Platform services — run automated due diligence, credit analysis, environmental screening, appraisals, and underwriting on submitted deals
• Facilitate marketplace activity — present pre-screened deal information to lenders on the marketplace, match deals to capital partners based on lending criteria, and process offers
• Improve the Platform — analyze usage patterns, identify issues, and develop new features
• Communicate with you — send in-app notifications about deal status, offers, and Platform updates
• Ensure security — detect and prevent fraud, abuse, or unauthorized access

4. Third-Party Services

The Platform integrates with third-party services to provide its functionality. These include:

• Authentication and identity management — for secure account access and session management
• Payment processing — a PCI-compliant third-party payment processor (Stripe, Inc.) handles credit card processing for subscription and credit purchases. Full card details are transmitted directly to the processor; Trestle does not receive or store them.
• Product analytics and session replay — a third-party analytics provider records event-level usage data and anonymized session recordings to help us understand how users interact with the Platform. Sensitive fields are masked and are not captured.
• Transactional email delivery — a third-party email service sends account, billing, and notification emails on our behalf.
• AI and machine learning services — for document parsing, data extraction, and analysis
• Government and public data sources — for financial filings, environmental records, and regulatory data
• Proprietary financial data providers — for credit analysis, financial ratios, and market data
• Cloud infrastructure and database providers — for data storage and Platform hosting

Each third-party service has its own privacy practices. We only share the minimum data necessary for each service to perform its function. We do not share your personal information with these providers beyond what is required for Platform operation.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Marketplace activity — Deal information submitted by brokers may be presented to lenders on the marketplace as part of the Platform's core functionality. Lenders see deal summaries, property details, and underwriting data for deals that match their lending criteria.
• Service providers — We share data with the third-party services listed in Section 4, solely to provide Platform functionality.
• Legal compliance — We may disclose information if required by law, regulation, legal process, or governmental request.
• Business transfers — In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• With your consent — We may share information with your explicit consent.

6. Data Retention

We retain your account information for as long as your account is active. Deal data, including uploaded documents and pipeline results, is retained for as long as needed to provide the Platform's services and for a reasonable period thereafter for legal, audit, and business purposes.

You may request deletion of your account and associated data by contacting us at the email address provided below. We will process deletion requests within 30 days, subject to any legal retention requirements.

7. Cookies and Similar Technologies

The Platform uses cookies and similar technologies for several purposes:

• Authentication and session management — essential cookies required for the Platform to function. These cannot be disabled while using the Platform.
• Product analytics — cookies set by our third-party analytics provider to identify unique users and measure feature usage. See Section 2.4 for details on what is collected.
• Payment processing — cookies set by our payment processor during checkout to secure the transaction and detect fraud.

We do not use advertising cookies and do not participate in cross-site advertising networks. We do not sell or share your browsing activity with advertising platforms.

8. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your information, including encrypted data transmission (TLS/SSL), secure authentication, and access controls on our database and infrastructure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate personal information
• Request deletion of your personal information
• Object to or restrict certain processing of your personal information
• Request a portable copy of your personal information

To exercise any of these rights, please contact us at the email address below. We will respond to your request within 30 days.

10. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information. We do not sell personal information. You have the right to request disclosure of the categories and specific pieces of personal information we have collected, and the right to request deletion of your personal information.

11. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last updated" date at the top of this page. Your continued use of the Platform after any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us at info@trestlecre.com.