Last updated: April 29, 2026
This Privacy Policy describes how Crestfolio LLC ("we," "us," or "our") collects, uses, and protects your personal information when you use our services at crestfolio.io. Questions? Email us at matt@crestfolio.io.
We collect personal information that you voluntarily provide when you register on the Services, express interest in obtaining information about our products, participate in activities on the Services, or otherwise contact us. The personal information we collect may include:
When necessary, and with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information: financial data. We do not collect or process sensitive personal information for the purpose of inferring characteristics about you.
We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number and the security code associated with your payment instrument. All payment data is handled and stored by Stripe. You may find their privacy notice at https://stripe.com/privacy.
We may provide you with the option to register using your existing social media account details. If you choose to register this way, we will collect certain profile information about you from the social media provider, as described in Section 6 below.
We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, and other technical information. This information is primarily needed to maintain the security and operation of our Services and for our internal analytics and reporting purposes.
Like many businesses, we also collect information through cookies and similar technologies. You can find out more about this in our Cookie Policy.
The information we collect automatically includes log and usage data, device data, and location data.
We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We process your personal information for the following purposes:
We only process your personal information when we believe it is necessary and we have a valid legal reason to do so under applicable law, including:
When you choose to connect a financial account to Crestfolio, we use Plaid Inc. ("Plaid") to facilitate that connection. Plaid is a third-party service provider that enables you to securely link your financial accounts to applications like ours.
By using our Services to connect a financial account, you grant Crestfolio and Plaid the right, power, and authority to act on your behalf to access and transmit your personal and financial information from the relevant financial institution. You acknowledge and agree that your personal and financial information will be transferred, stored, and processed by Plaid in accordance with the Plaid End User Privacy Policy.
By using Crestfolio's Services to connect a financial account, you expressly consent to Plaid's collection, use, and disclosure of your information as described in Plaid's End User Privacy Policy. Information shared with Plaid may include, without limitation, account login credentials, account balances, transaction history, account ownership information, and identity information necessary to verify the connection.
You can learn more about Plaid's data practices, security measures, and your rights regarding your information at plaid.com/legal.
We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.
Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Policy.
We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law. No purpose in this notice will require us to keep your personal information for longer than twelve (12) months past the termination of the user's account.
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible, securely store your personal information and isolate it from any further processing until deletion is possible.
We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.
Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.
We do not knowingly collect, solicit data from, or market to children under 18 years of age. By using the Services, you represent that you are at least 18 years old or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Services.
If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at matt@crestfolio.io.
Depending on where you are located, the applicable privacy law may mean you have certain rights regarding your personal information. You may review, change, or terminate your account at any time.
If you would at any time like to review or change the information in your account or terminate your account, you can log in to your account settings and update your user account. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, or enforce our legal terms.
If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us at matt@crestfolio.io.
If you have questions or comments about your privacy rights, you may email us at matt@crestfolio.io.
Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.
California law requires us to let you know how we respond to web browser DNT signals. Because there currently is not an industry or legal standard for recognizing or honoring DNT signals, we do not respond to them at this time.
If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you, correct inaccuracies, get a copy of, or delete your personal information.
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Name, email address, IP address, account name | No |
| B. California Customer Records | Name, contact information, financial information | No |
| C. Protected classifications | Gender, age, race, national origin | No |
| D. Commercial information | Transaction information, purchase history | No |
| E. Biometric information | Fingerprints and voiceprints | No |
| F. Internet or network activity | Browsing history, search history, online behavior | No |
| G. Geolocation data | Device location | No |
| H. Audio, electronic, sensory | Images, audio, video recordings | No |
| I. Professional information | Business contact details, job title, work history | No |
| J. Education information | Student records and directory information | No |
| K. Inferences from personal information | Profile or summary about individual's preferences | No |
| L. Sensitive personal information | Account login information, financial account access details | Yes |
To exercise these rights, contact us by emailing matt@crestfolio.io or by visiting https://crestfolio.io/#contact.
Yes, we will update this notice as necessary to stay compliant with relevant laws. The updated version will be indicated by an updated "Last updated" date at the top of this Privacy Policy. If we make material changes to this Privacy Policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification.
If you have questions or comments about this notice, you may contact us at:
Crestfolio LLC
Sugar Grove, Illinois
United States
Email: matt@crestfolio.io
Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information.
To request to review, update, or delete your personal information, please email us at matt@crestfolio.io.
7. How do we handle social logins?
Our Services offer you the ability to register and log in using your third-party social media account details. Where you choose to do this, we will receive certain profile information about you from your social media provider — which may include your name, email address, and profile picture.
We will use the information we receive only for the purposes described in this Privacy Policy. We do not control, and are not responsible for, other uses of your personal information by your third-party social media provider. We recommend that you review their privacy notice to understand how they collect, use, and share your personal information.