Privacy Policy

Effective date: July 27, 2026

1. Who we are and what this covers

Osprey LLC ("Osprey," "we," "us," or "our") operates the website at getosprey.ai and the Osprey real-estate analysis service, including our Telegram bot. This policy describes what information we collect, how we use it, who we share it with, and the choices you have. It applies to visitors to our website, people who join our waitlist, and account holders who use the service.

Osprey LLC is a Nevada limited liability company, and the service is intended for users in the United States. We do not knowingly collect information from children under 13, and the service is not directed to them.

2. Information we collect

We collect the following categories of information:

Waitlist information — the name, email address, and (optionally) phone number you submit to join our waitlist.
Account information — your name, email address, and password. Passwords are stored only as a salted cryptographic hash; we never store or have access to your plain-text password.
Searches a real-estate agent sets up before you have an account — if a real-estate agent or brokerage uses Osprey to work with clients, they can set up a property search and give it a label of their own choosing. That search holds investment criteria — target markets, property types, price range, financing assumptions, and a minimum cash-flow target — and nothing else. We do not ask for, receive, or store your name, your email address, or any other information about you before you create your own account. If your agent wants you to have the account, they send you a referral link themselves; we are not told who they send it to. See section 13.
Investor profile — the criteria you configure, including target markets and property types, price range, financing terms (such as interest rate and down payment percentage), your minimum cash-flow threshold, and any preferences or notes you or the service records about the kinds of deals you like and dislike.
Messaging information — if you connect Telegram, we store your Telegram chat identifier so we can deliver messages to you, and we process the content of the messages you send to the bot in order to respond to them.
Property and analysis data — listings matched to your criteria, the underwriting figures we calculate, and any analyses, scenarios, reports, or share links generated in your account.
Technical information — standard server and security log data such as IP address, browser and device type, and pages requested, generated automatically when you use the site.

We do not collect Social Security numbers, government identifiers, financial account or payment card numbers, precise geolocation, or biometric data. Please do not send sensitive information of that kind to our bot or support address.

3. How we use your information

To provide the service: match listings to your criteria, underwrite them, and deliver verdicts, analyses, and reports to you
To create and secure your account and authenticate your sessions
To respond to your messages, questions, and support requests
To operate, maintain, debug, and improve the website and service
To send you product updates and, where you have consented, marketing communications
To comply with legal obligations and enforce our terms

4. How we use AI — please read

Osprey uses artificial intelligence in two places: to interpret the plain-English messages you send our Telegram bot, and to answer your questions about a specific deal. The underwriting math itself is deterministic software, not AI.

AI output can be wrong. Responses generated by AI may be inaccurate, incomplete, or out of date. They are informational only and are not investment, legal, tax, financial, or real-estate brokerage advice. Always verify figures independently before acting on them.

Who processes this content. To process the requests described above, we send the relevant content — which can include the text of the messages you send the bot, your buy-box criteria, property addresses, and the underwriting figures for deals in your feed — to our AI provider, OpenRouter, and the upstream model providers it routes to.

We do not permit this content to be used to train AI models. We have opted out of the training/logging option OpenRouter otherwise offers on free model endpoints, so your content is used to generate your response and is not retained by OpenRouter or its upstream providers to improve their models. If that ever changes — for example, if we move to a different provider or plan — we will update this section and give you prominent notice before the change takes effect, not after.

You can also avoid sending anything to our AI provider at all by using only the keyword commands in Telegram (handled entirely by our own software) or the dashboard instead of plain-English messages. Questions about this: privacy@getosprey.ai.

5. Cookies and tracking

Osprey uses first-party, strictly necessary cookies only. These are limited to your authenticated session and cross-site request forgery protection — the cookies that keep you logged in and keep your account secure. They are not used for advertising or profiling.

We do not use analytics tools, advertising networks, pixels, session recording, or any other third-party tracking technology on our website. Because we set no non-essential cookies, we do not display a cookie consent banner. You can block or delete cookies in your browser settings, but the service will not be able to keep you signed in if you block essential cookies.

6. Who we share information with

We share information with the following categories of third parties, only as needed to run the service:

Hosting and infrastructure (Vercel) — serves the website and processes request and security logs.
Database (Neon) — stores your account, investor profile, and analysis data.
Messaging(Telegram) — delivers messages to you and relays the messages you send us. Your use of Telegram is also governed by Telegram's own privacy policy.
AI processing (OpenRouter and the upstream model providers it routes to) — interprets your messages and generates answers, subject to the important limitation described in Section 4.
Property data (RentCast) — supplies listing and rent data to us. We send property queries, not your personal information, to this provider.
Legal and corporate — we may disclose information if required by law, subpoena, or legal process, to protect our rights or the safety of others, or in connection with a merger, acquisition, financing, or sale of assets.

7. No third-party tracking across websites

Nevada law requires us to tell you whether a third party may collect information about your activities over time and across different websites when you use our service. No third party collects information about your online activities across other websites through Osprey. We run no advertising networks, analytics trackers, or cross-site pixels.

8. We do not sell your information

Osprey does not sell your covered information, and we have never done so. Under Nevada law (NRS 603A), a "sale" means exchanging covered information for money so that the recipient can license or resell it to others. Our disclosures to the service providers listed in Section 6 are made so they can perform services for us and are not sales.

If you are a Nevada consumer and wish to submit a verified request directing us not to sell your covered information, you may do so at our designated request address: privacy@getosprey.ai. We will respond within 60 days of receiving a verified request. If we need more time, we may extend that period by up to 30 additional days and will notify you of the extension.

9. Reviewing, correcting, and deleting your information

You can review and change most of your information at any time by signing in and editing your profile and settings, which is where your buy box, financing terms, cash-flow threshold, learned preferences, and Telegram connection all live.

For anything you cannot change yourself — including requests to access, correct, or delete your account and the information associated with it, or to be removed from our waitlist — email privacy@getosprey.ai. We will verify your request and respond within 60 days. Deleting your account removes your profile, verdicts, analyses, and share links; we may retain limited records where we are required or permitted by law to do so.

10. Share links you create

Osprey lets you create a share link to a read-only page for a property analysis. Anyone who has the link can view that page without signing in, and the page displays the name of the person who prepared it. Share links are unlisted and we ask search engines not to index them, but you should treat them as public. Only share a link with people you intend to see it, and revoke it from the property page when you are done.

If your account is connected to a real-estate agent, share links created on your account are visible to your agent, and your agent can create share links on your account while they manage it. In that case the share page names your agent as the person who prepared the analysis, not you. All share links on your account are deactivated if the connection ends — see section 13.

11. Marketing communications

If you provide your phone number and consent, you may receive recurring marketing text messages and calls from Osprey or service providers acting on our behalf, including messages sent using automated technology. Consent is not a condition of any purchase. Message and data rates may apply, and message frequency varies.

You can opt out of marketing texts at any time by replying STOP to any message, and reply HELP for help. You can unsubscribe from marketing emails using the link in any such email, and we honor opt-out requests promptly. Messages you receive through the Telegram bot are service messages you requested by connecting your account; you can disconnect at any time or block the bot in Telegram.

12. Security

We maintain reasonable administrative and technical safeguards designed to protect your information, including encryption in transit (HTTPS/TLS), salted password hashing, access-controlled infrastructure, and collecting only the data the service needs. No system is perfectly secure, and we cannot guarantee absolute security. If a breach of unencrypted personal information affecting Nevada residents occurs, we will provide notice as required by NRS 603A.220.

13. If your account is connected to a real-estate agent

Osprey can be used by real-estate agents to manage investment criteria for their clients. This section explains what that means for your information. It applies only if an agent set up your account or you accepted an invitation from one.

We hold nothing about you until you act. Before you claim an account, all that exists is a property search your agent configured and labelled. There is no name, no email address, and no record of you — we do not know who you are and have no way to contact you. If you never claim the account, we never hold anything about you at all.

How the connection is made. Your agent sends you a referral link directly — we never send it for them, and we are not told who they gave it to. When you use that link, you choose your own email address and password, you are shown exactly what your agent will be able to see, and you must affirmatively agree before the account becomes yours. We record that agreement, including the date and the exact text you were shown. That is the first moment any information about you exists here, and it comes from you.

What your agent can see. While you are connected to an agent, they can see your investment criteria, your financing assumptions, your minimum cash-flow target, every property Osprey underwrites for you and the figures it calculates, and any property reports or share links associated with your account. They cannot see the messages you exchange with our Telegram bot or any notes we record from them.

What your agent cannot do. Your agent cannot change your email address or password, cannot delete your account, cannot see your sign-in history, and cannot see anything about any other Osprey user. If you set up Telegram alerts, those go to you.

Ending the connection.You can disconnect from your agent at any time in Settings. Your agent's access ends immediately. Your account, criteria, and history are unaffected.

Your connection may also end automatically: agents cover defined geographic markets, and if you change your criteria to target a market outside your agent's coverage area, we disconnect them and tell you we have done so.

What happens to reports and share links. Any property reports your agent generated while connected remain available to them. A report is an analysis of a property rather than a record about you, and your agent may have relied on it in their own work. Any share links on your account, however, are deactivated when the connection ends — including ones you created yourself. A share link is a public web address that works for anyone who has it, so deactivating every link is the only way to be sure none of them keeps working. You can create new ones at any time.

If you never claim the account.Nothing happens, and there is nothing of yours to delete — the search remains your agent's, holding only the criteria and label they entered. You can still contact us at privacy@getosprey.ai with any question about your information.

14. Data retention

We keep your account and profile information for as long as your account is active, and waitlist information until you ask to be removed or we no longer need it. Property and analysis data is retained so your history remains available to you. Server and security logs are kept for a limited period. When information is no longer needed, we delete it or retain it only as required by law.

Referral links your agent created are retained as a record of how an account came to exist. They contain no contact details — we never held any. If you delete your account, we keep an anonymized record that a consent was given — the date, and the text you were shown — with your identifying information removed. We keep it because it is the only record of what you agreed to, and we cannot answer a question about that agreement without it.

15. Changes to this policy

We may update this policy from time to time. When we do, we will post the revised policy on this page and update the effective date above. If we make a material change — particularly one that expands how we use or share your information — we will provide prominent notice before it takes effect, by email to the address associated with your account, a notice in the product, or both. We will not apply a materially different practice to information we already collected without giving you notice and, where appropriate, a choice.

16. Contact us

Questions, requests, or concerns about this policy or your information: privacy@getosprey.ai. For anything else, reach us at hello@getosprey.ai.