Privacy Policy

Summary of key points

• We collect the information you provide (such as the property and contact details you enter), information collected automatically (such as device and usage data), and information from service providers and partners.
• We use your information to provide and improve the tools, to refer your inquiry to lenders/partners when you ask and consent, to maintain TCPA consent records, to communicate with you, and to comply with law.
• We share your information with lending/marketing partners (with your consent), service providers, in business transfers, and as required by law. We do not sell your personal information for money.
• We keep TCPA consent records for at least five (5) years and other information only as long as needed.
• Depending on where you live, you may have rights to access, correct, delete, and opt out of certain processing. We honor Global Privacy Control (GPC).

1. Who we are and scope

Misc Holdings Ltd. is the controller responsible for your personal information under this Policy, with its principal office at 228 Park Avenue South, PMB 37100, New York, NY 10003. This Policy applies to personal information we process through NightYield and related tools, forms, and communications. It does not apply to third parties we do not own or control, including the lenders and partners to whom you may be referred.

2. What information we collect

Information you provide to us

When you use the tools or submit a request, you may provide: property and transaction information (address or city, purchase price, down payment, property type, projected or actual revenue, loan purpose, credit-score band, vesting, timeline); identifiers (name, email address, telephone number); and your consent selections. We do not request or knowingly collect your Social Security number, full date of birth, government-ID numbers, or full financial-account or credit-card numbers through the Services.

Information collected automatically

When you access the Services we automatically collect certain information, including your IP address, device and browser characteristics, operating system, language preferences, referring URLs, pages and content viewed, the dates and times of access, and other technical information collected through cookies and similar technologies (see our Cookie Policy). We may derive approximate geolocation from your IP address or the city/ZIP you enter.

Information from other sources

We may receive information about you from service providers and partners that help us operate the Services, verify and certify your consent (such as a consent-certification provider), and measure marketing performance.

3. How we use your information

We process your information for the following purposes:

• To provide, operate, and maintain the Services and to compute your feasibility verdict, calculator outputs, and matches;
• To refer your inquiry to lending and marketing partners when you request matching and provide consent;
• To create, maintain, and produce records of your TCPA consent and to comply with legal and recordkeeping obligations;
• To communicate with you, including service messages and — where permitted and consented — marketing calls, texts, and emails;
• To personalize and improve the Services, perform analytics, and produce de-identified and aggregate benchmarks and indices;
• To maintain the safety, security, and integrity of the Services, and to detect, prevent, and address fraud, abuse, and security incidents;
• To establish, exercise, or defend legal claims and to comply with applicable law and lawful requests.

4. When and with whom we share your information

We may share your personal information in the following situations:

• Lending and marketing partners — with your consent, we share your lead with the STR lending and marketing partners identified at the form (see our Marketing & Lending Partners page) so they may contact you about financing.
• Service providers and processors — we share information with vendors that perform services on our behalf, such as hosting, data storage, analytics, consent certification, communications/telephony, and fraud prevention, under contracts that require them to protect the information and use it only to provide services to us.
• Legal, safety, and compliance — we may disclose information to comply with applicable law, regulation, legal process, or governmental request; to enforce our Terms; and to protect the rights, property, or safety of us, our users, or others.
• Business transfers — we may share or transfer information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
• Affiliates and successors — we may share information with affiliates and successors under common ownership or control, who will honor this Policy.
• With your consent or at your direction — for any other purpose disclosed at the time you provide the information.

We do not sell your personal information in exchange for monetary consideration. Some disclosures for cross-context behavioral advertising or measurement may be considered a “sale” or “sharing” under certain state laws; we honor Global Privacy Control as an opt-out. See Do Not Sell or Share.

5. Cookies and tracking technologies

We and authorized service providers use cookies, pixels, tags, and similar technologies to operate, secure, analyze, and (where applicable) advertise and measure the Services. You can control these technologies through our cookie preferences, your browser settings, and GPC. For details, see our Cookie Policy.

6. How we use automated tools and AI

The Services use automated computational tools — including our calculators and matching logic — to generate estimates (such as projected revenue and DSCR) and to identify potentially suitable lenders based on the information you provide. These outputs are informational estimates, not decisions that produce legal or similarly significant effects about you, and they do not constitute credit decisions. Credit decisions are made solely by independent third-party lenders. We do not use your personal information to train publicly available generative-AI models.

7. How long we keep your information

We retain records of TCPA consent on an append-only (write-once) basis for at least five (5) years, consistent with applicable statutes of limitations and recordkeeping rules. We retain other personal information only for as long as necessary to fulfill the purposes described in this Policy, including to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements, after which we delete or de-identify it, or, if deletion is not feasible, securely store it and isolate it from further processing.

8. How we keep your information safe

We implement appropriate and reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption of data in transit and at rest, least-privilege access controls, logging and monitoring, and vendor diligence. However, no electronic transmission or storage is 100% secure, and we cannot guarantee absolute security. You transmit information to and from the Services at your own risk. See our Security page and report concerns to security@nightyield.com.

9. Information from minors

The Services are intended for real-estate investors and are not directed to individuals under 18, and we do not knowingly solicit or collect personal information from anyone under 16. If we learn that we have collected personal information from a child under 16 without verified parental consent, we will delete it. If you believe we may have collected such information, contact privacy@nightyield.com.

10. Your privacy rights

Depending on your location, you may have the right to: request access to and a copy of your personal information; request correction or deletion; opt out of the sale or sharing of personal information and of targeted advertising; limit the use of sensitive personal information; and, where processing is based on consent, withdraw consent at any time (without affecting prior lawful processing). To exercise any right, use Your Privacy Choices or email privacy@nightyield.com. We will not discriminate against you for exercising your rights, and we provide an appeal mechanism where required.

11. Controls for Do-Not-Track and Global Privacy Control

Because no uniform technology standard for recognizing and implementing “Do-Not-Track” (DNT) signals has been finalized, we do not currently respond to DNT browser signals. We do recognize and honor the Global Privacy Control (GPC) signal as a valid request to opt out of the sale or sharing of personal information for the browser and device from which it is sent.

12. U.S. state privacy rights

Residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive consumer-privacy laws have specific rights regarding their personal information, subject to exceptions. These may include the rights to confirm whether we process your information, to access and obtain a portable copy, to correct inaccuracies, to delete, to opt out of targeted advertising, sale, and certain profiling, and to appeal a denial. California residents should also review our California Privacy Policy for category-level disclosures. To exercise your rights, use Your Privacy Choices or email privacy@nightyield.com; we will verify your request (typically by matching information you previously provided), respond within the statutory timelines, and accept authorized agents with proof of authorization.

13. GLBA financial-privacy practices

Because we facilitate inquiries for financing, certain information you provide may constitute “nonpublic personal information” under the Gramm-Leach-Bliley Act (GLBA). We collect, use, and share that information as described in this Policy and in our separate GLBA Privacy Notice, which explains the categories we collect, the reasons we may share, and your ability to limit certain sharing. We maintain a security program designed to protect that information.

14. International users

The Services are operated in the United States and are intended for users located in the United States. If you access the Services from outside the United States, your information will be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your jurisdiction. By using the Services you consent to that transfer and processing.

15. Updates to this Policy

We may update this Policy from time to time. The updated version will be indicated by a revised “Effective” date and will be effective when accessible. If we make material changes, we will provide notice as required by law, such as by prominently posting a notice or directly notifying you. We encourage you to review this Policy periodically.

16. How to contact us

If you have questions or comments about this Policy, or to review, update, or delete your personal information, contact our privacy team at privacy@nightyield.com, or by mail at Misc Holdings Ltd., Attn: Privacy, 228 Park Avenue South, PMB 37100, New York, NY 10003.