Introduction

This Privacy Policy explains how Eval.com, Inc. (“we,” “us,” “our,” or “the Company”) collects, uses, shares, and protects information about you when you visit our website at eval.com or use our real estate evaluation services. We are committed to protecting your privacy and maintaining the confidentiality of your personal information in accordance with applicable privacy laws, including the Gramm-Leach-Bliley Act (GLBA), the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and the Interagency Appraisal and Evaluation Guidelines.

Contact Information:

Legal Name: Eval.com, Inc.
Address: 145 N Durbin St, Casper, WY 82601
Email: info@eval.com
Phone: (307) 200-8951

This Privacy Policy is designed to be transparent and accessible to our clients, including banks and credit unions, as well as individual data subjects whose information we may process in the course of providing our evaluation services.

Scope

This Privacy Policy applies to all information collected through our website, services, and business operations. It covers information collected from:

• Visitors to our website
• Clients who engage our evaluation services
• Property owners and borrowers whose properties we evaluate
• Third parties who provide information in connection with our services

Information We Collect

Categories of Information We Collect

In the course of providing real estate evaluation services to financial institutions, we collect the following categories of information:

Property Information:

• Property addresses and location details
• Property characteristics, features, and condition information
• Property photos and documentation
• Transaction documents and related materials
• Market data and comparable property information

Contact and Coordination Information:

• Names of borrowers and property owners (for coordination purposes only)
• Contact information including phone numbers and email addresses
• Scheduling and appointment information
• Communication preferences

Service-Related Information:

• Assignment details and instructions from clients
• Quality assurance and review data
• Service delivery documentation
• Customer support communications

Technical Information (Website Visitors):

• IP addresses and device information
• Browser type and operating system
• Website usage patterns and preferences
• Cookies and similar tracking technologies

What We Do NOT Collect

We want to be transparent about what we do not collect:

• Social Security Numbers or Tax Identification Numbers
• Tax returns or detailed financial statements
• Bank account information or detailed financial records
• Credit scores or credit reports
• Income verification documents
• Detailed personal financial information beyond what is necessary for property evaluation coordination

How We Use Your Information

We use the information we collect for the following business purposes:

Primary Service Delivery:

• Performing real estate evaluation and appraisal services
• Managing property evaluation assignments from financial institution clients
• Coordinating property access and inspections
• Delivering completed evaluation reports to clients

Quality Improvement:

• Analyzing service delivery to improve evaluation processes
• Training and development of evaluation professionals
• Quality assurance and compliance monitoring
• Service enhancement and process optimization

Regulatory Compliance:

• Meeting requirements under the Gramm-Leach-Bliley Act (GLBA)
• Complying with Interagency Appraisal and Evaluation Guidelines
• Satisfying state and federal regulatory obligations
• Maintaining records as required by applicable laws

Business Operations:

• Responding to customer service inquiries
• Managing client relationships
• Internal administrative purposes
• Legal and regulatory reporting

How We Share Information

We may share your information in the following limited circumstances:

Service Providers with Data Protection Agreements:

• Technology service providers (cloud hosting, data storage)
• Professional service providers (legal, accounting, consulting)
• Vendors who assist with our evaluation processes

All service providers are contractually bound by data protection agreements (DPAs) that require them to protect your information and use it only for specified purposes

Legal Requirements:

• When required by law, regulation, or court order
• To comply with valid legal process (subpoenas, warrants)
• To cooperate with law enforcement investigations
• To protect our legal rights or defend against legal claims

Authorized Business Disclosures:

• To our financial institution clients who engaged our services
• As part of legitimate business transactions (with appropriate protections)
• With your explicit consent
• To protect the safety and security of individuals or property

Important Note: We Do NOT Sell Personal Information
Eval.com does not sell, rent, or trade personal information to third parties for marketing purposes orany other commercial gain. We do not engage in the sale of personal information as defined underprivacy laws such as the CCPA.

Data Security & Protection

We implement comprehensive security measures to protect your information:

Encryption:

• Data encrypted at rest using industry-standard encryption methods (AES-256)
• Data encrypted in transit using secure transmission protocols (TLS 1.2 or higher)
• Encryption keys managed through secure key management systems

Access Controls:

• Role-based access controls limiting data access to authorized personnel only
• Multi-factor authentication (MFA) for system access
• Regular access reviews and privilege management
• Employee training on data handling and security protocols

Secure Infrastructure:

• Secure cloud hosting with enterprise-grade security controls (SOC 2 Type II certified)
• Network security monitoring and intrusion detection
• Regular security assessments and vulnerability management
• Physical security controls for office locations and data centers

Incident Response:

• Formal incident response plan to address potential security incidents
• Regular security monitoring and threat detection
• Breach notification procedures in accordance with applicable laws
• Continuous security improvement and updates

Data Retention

We retain personal information only as long as necessary for the purposes outlined in this Privacy Policy or as required by law:

• Service Delivery: Information is retained as long as necessary to complete evaluation services and maintain business records
• Legal and Regulatory Requirements: Information may be retained longer to comply with applicable laws, regulations, and professional standards
• Business Purposes: Information may be retained for legitimate business purposes such as quality assurance, training, and regulatory compliance
• Automatic Deletion: Information that is no longer needed for business or legal purposes is securely deleted or de-identified
• Customer Requests: Subject to legal and regulatory requirements, we will consider requests for earlier deletion of personal information

Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information:

Access Rights:

• Right to know what personal information we collect about you
• Right to know how we use and share your personal information
• Right to request a copy of personal information we maintain about you

Correction and Deletion Rights:

• Right to request correction of inaccurate personal information
• Right to request deletion of personal information (subject to legal and business requirements)
• Right to request restriction of processing in certain circumstances

Communication Rights:

• Right to opt out of non-essential marketing communications
• Right to update your communication preferences

California Privacy Rights (CCPA/CPRA):

• Right to know the categories and specific pieces of personal information collected
• Right to delete personal information (with certain exceptions)
• Right to opt-out of the “sale” of personal information (though we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

How to Exercise Your Rights:
To exercise any of these rights, please contact us at:
Email: info@eval.com
Phone: (307) 200-8951
Mail: Eval.com, Inc., 145 N Durbin St, Casper, WY 82601

We will verify your identity before processing requests and respond within the timeframes requiredby applicable law.

Cookies and Tracking Technologies

We use cookies and similar technologies on our website to enhance your browsing experience and improve our services. For detailed information about our cookie practices, including the types of cookies we use and how to manage your preferences, please see our Cookie Policy.

Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will delete such information promptly.

International Data Transfers

If we transfer personal information internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by relevant authorities
• Adequacy decisions by applicable regulatory bodies
• Other legally recognized transfer mechanisms
• Contractual protections requiring compliance with applicable data protection laws

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our business practices
• New legal or regulatory requirements
• Technological developments
• Feedback from clients and stakeholders

We will notify you of material changes by:

• Posting the updated policy on our website with a new effective date
• Sending email notifications to registered users when appropriate
• Providing notice through our service interface or other communication methods

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Regulatory Compliance

Our privacy practices are designed to comply with applicable laws and regulations, including:

• Gramm-Leach-Bliley Act (GLBA) and related federal banking regulations
• California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)
• Interagency Appraisal and Evaluation Guidelines
• State privacy and data protection laws
• Professional standards for real estate evaluation services

Contact Information

If you have questions about this Privacy Policy, our privacy practices, or wish to exercise yourprivacy rights, please contact us:

Eval.com, Inc.
145 N Durbin St
Casper, WY 82601
Email:
info@eval.com
Phone:
(307) 200-8951
Data Protection Officer:
Chief Technology Officer

We are committed to responding to your inquiries promptly and addressing any concerns you mayhave about your privacy and the security of your personal information.

Effective Date and Acknowledgment

This Privacy Policy is effective as of April 28, 2026. By using our website or services after this date, you acknowledge that you have read and understand this Privacy Policy.