DeedPipe Privacy Policy

Effective Date: September 7, 2026

This Privacy Policy explains how Lance Davis, an individual doing business as DeedPipe (“DeedPipe,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information in connection with DeedPipe Diligence and related DeedPipe websites, communications, and support activities covered by this Policy.

DeedPipe Diligence is a business-to-business service intended for organizations conducting document-heavy land and title diligence.

1. Information We Collect

Depending on how you interact with DeedPipe, we may collect the following categories of information.

Account and contact information

This may include:

• name;
• business email address;
• organization;
• account and membership information;
• authentication information and account-security status; and
• communications preferences.

Organization and Project information

We may collect information about the Customer Organization, its Authorized Users, Projects, membership roles, Project status, and related customer configuration.

Customer Content

Customer Content may include documents, files, land and title records, legal descriptions, ownership or interest information, correspondence, Project instructions, and other information submitted by or for a Customer.

Documents supplied by Customers may contain personal information about individuals who are not DeedPipe users.

Customers are responsible for having appropriate authority to provide such information to DeedPipe for processing.

Usage, device, and security information

We may collect information such as:

• login and session activity;
• IP address;
• browser and device information;
• pages or features accessed;
• Project and workflow activity;
• security events;
• error and diagnostic information; and
• records needed to protect account and Organization authorization.

Support and communications

If you contact us, we collect the information contained in the communication and information reasonably necessary to respond.

Billing information

Billing is handled through a third-party payment provider.

Payment-card information entered into a hosted payment flow is provided to that payment provider. DeedPipe may receive and maintain information such as billing-customer identifiers, subscription status, invoices, transaction status, and other information necessary to administer the Customer’s subscription.

2. How We Use Information

We use information to:

• provide and operate DeedPipe Diligence;
• authenticate users and enforce Organization and Project permissions;
• receive, store, process, normalize, index, analyze, and retrieve Customer documents;
• create diligence packages, reports, findings, answers, spreadsheets, and other requested deliverables;
• provide Ask This Project and related AI-assisted functionality;
• maintain source traceability and document access;
• administer Customer accounts, membership, subscriptions, and billing status;
• provide customer support;
• send approved transactional communications;
• detect, investigate, and prevent abuse, malware, fraud, unauthorized access, and security incidents;
• troubleshoot, maintain, and improve Service reliability;
• comply with law and valid legal process; and
• enforce our agreements and protect the rights and security of DeedPipe, our Customers, and others.

DeedPipe does not use one Customer Organization’s Project evidence as another Customer Organization’s Project evidence.

DeedPipe does not sell Customer Content.

DeedPipe Diligence does not use Customer Content for targeted advertising.

3. AI-Assisted and Document Processing

DeedPipe Diligence uses automated systems and third-party service providers to process authorized Project content.

Depending on the applicable workflow, processing may include:

• document storage;
• malware screening;
• OCR and document normalization;
• extraction of text, pages, layout, tables, and document structure;
• indexing and retrieval;
• AI-assisted retrieval and reasoning; and
• generation of reports, answers, and other artifacts.

Customer Content is processed within the authorization boundaries of the applicable Customer Organization and Project.

DeedPipe does not intentionally make one Customer Organization’s Project corpus available to another Customer Organization.

4. Service Providers

DeedPipe uses service providers to operate the Service.

Current providers or provider categories may include:

• Box for canonical document storage and related document capabilities;
• DocuPipe for transient OCR, normalization, and structural document processing;
• OpenAI for AI-assisted semantic retrieval and reasoning;
• DigitalOcean for application and infrastructure hosting;
• Postmark for transactional email delivery;
• Stripe for subscription and payment processing;
• Google and Microsoft for optional customer authentication; and
• other technical providers reasonably necessary to secure, maintain, or operate the Service.

Providers may change as the Service evolves. DeedPipe will update disclosures when appropriate.

Service providers may access information only as reasonably necessary for the functions DeedPipe assigns to them, subject to applicable contractual, technical, and legal restrictions.

5. How We Disclose Information

We may disclose information as described below.

To service providers

We disclose information to providers that perform hosting, storage, document processing, AI-assisted processing, email delivery, identity, security, payment, and related operational functions.

Within the Customer Organization

Information may be accessible to authorized Organization Owners, Members, and other authorized users according to the Customer’s permissions and the Service’s authorization model.

Organization Owners may have administrative visibility and authority that ordinary Members do not have.

At Customer direction

We may disclose or make information available when Customer instructs us to do so, including through downloads, reports, exports, or other Customer-authorized workflows.

For legal, safety, and security reasons

We may disclose information when we reasonably believe disclosure is necessary to:

• comply with applicable law, regulation, court order, subpoena, or other valid legal process;
• protect the security of the Service;
• investigate fraud, abuse, or unauthorized activity;
• protect DeedPipe, Customers, users, or others from harm; or
• establish, exercise, or defend legal claims.

Business transactions

If DeedPipe or relevant business assets are involved in a merger, financing, acquisition, reorganization, or sale, information may be disclosed as part of that transaction subject to appropriate safeguards and applicable law.

6. Cookies and Similar Technologies

DeedPipe may use cookies and similar technologies necessary for authentication, session management, security, preferences, and reliable operation of the Service.

This Policy does not authorize Customer Content to be used for targeted advertising.

If DeedPipe later introduces materially different non-essential tracking or advertising technologies, we will update applicable disclosures and provide any choices required by law.

7. Security

DeedPipe uses administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, and loss.

These safeguards include authorization boundaries between Customer Organizations and Projects, account-security controls, restricted backstage access, malware controls, and other technical protections appropriate to the Service.

No method of storage, processing, or transmission is completely secure, and DeedPipe cannot guarantee absolute security.

If a material customer-affecting incident requires communication, DeedPipe may notify affected Organization Owners by email and may display a provider-neutral notice within the Service.

8. Data Retention and Deletion

DeedPipe retains information for legitimate business purposes associated with providing and securing the Service, complying with legal obligations, resolving disputes, maintaining appropriate business records, and enforcing agreements.

Billing lapse, cancellation, past-due status, or refund does not by itself delete Customer Content.

This Privacy Policy does not establish a fixed post-cancellation retention period, deletion deadline, backup-expiration period, legal-hold procedure, or provider-cleanup period.

Those operational lifecycle rules are governed by DeedPipe’s applicable Customer agreements and separately approved retention, deletion, export, backup, and legal-hold procedures.

Where applicable law grants an individual a right to request deletion of personal information, DeedPipe will evaluate and respond to the request as required by applicable law.

9. Customer-Controlled Information

For Customer Content and other personal information processed by DeedPipe on behalf of a Customer Organization, the Customer may determine why the information was collected, what is uploaded, and which users are authorized to access it.

If your personal information appears in Customer Content belonging to a DeedPipe Customer, you may need to direct a privacy request to that Customer.

Where appropriate, DeedPipe will assist Customers with requests concerning information DeedPipe processes on their behalf.

10. Your Privacy Rights

Depending on where you live, the nature of the information, and whether a particular privacy law applies, you may have rights concerning your personal information, such as the right to:

• request access to or information about personal information;
• correct inaccurate personal information;
• request deletion;
• obtain a portable copy of certain information;
• opt out of certain sales, sharing, targeted advertising, or qualifying profiling;
• appeal certain decisions concerning a privacy request; and
• exercise privacy rights without unlawful discrimination.

Not every right applies in every circumstance, and applicable law may permit or require exceptions.

DeedPipe does not sell Customer Content and does not use Customer Content for targeted advertising.

To submit a privacy request, email:

diligence@deedpipe.com

Please include enough information for us to understand the request. We may need to verify your identity, your authority to act for another person, or your relationship to a Customer Organization before fulfilling a request.

If applicable law gives you a right to appeal a privacy decision, you may submit an appeal by replying to our decision or emailing the address above with “Privacy Appeal” in the subject line.

11. Children

DeedPipe Diligence is a business service and is not directed to children or individuals under 18.

We do not knowingly invite children to create DeedPipe Diligence accounts.

If you believe a child has provided personal information directly to DeedPipe inappropriately, contact us at diligence@deedpipe.com.

12. Transactional Communications

DeedPipe Diligence uses transactional email for Service-related communications.

These communications may include:

• invitations and account activation;
• verification, recovery, and security notices;
• Project processing or attention-required notices;
• diligence-package availability;
• membership or account changes; and
• billing or account notices.

DeedPipe Diligence V1 does not use this transactional-email program as a marketing-email program.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the Service, law, or our data practices.

If a change materially affects how we handle personal information, we will provide reasonable notice when required or appropriate.

The Policy will identify when the updated version becomes effective.

14. Contact Us

Questions, support requests, and privacy requests may be sent to:

DeedPipe Diligence
diligence@deedpipe.com

Mailing address:

Lance Davis, d/b/a DeedPipe
500 2nd Street NE
Childress, TX 79201
United States