Draft. This document is a draft under legal review and may change before it is final.
Effective October 16, 2026
okood, Inc. ("okood", "we", "us") operates okood.com and related services (the "Service"). This policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. By using the Service you agree to this policy. If you do not agree, do not use the Service.
We use personal information to:
We do not use your portfolio or investment information to make lending, credit, insurance, housing or employment decisions about you.
Some features use artificial intelligence, including AI-assisted search and automated extraction of investment details from documents or email. To run these features we send the relevant content to AI service providers who process it on our behalf under contract. We do not permit those providers to use your personal information to train their general-purpose models. AI output can be wrong or incomplete; see the Terms of Use.
If you choose to connect an email account, we access it only with your permission and only to find and extract information about your real estate and alternative investments, such as deal names, amounts, dates and distributions from investment platform emails.
What we access: messages that match investment-related senders and keywords, and their attachments. We request read-only access and do not send, delete or modify email.
What we store: the structured investment data we extract, and the minimum message metadata needed to show you its source. We do not store full mailbox contents.
How we use it: only to provide and improve the portfolio and alternative investment features you see in the Service.
Who sees it: processing is automated. Our staff do not read your email unless you give us specific permission, for example to troubleshoot an issue, or where needed for security purposes or to comply with law.
What we never do: we do not sell this data, transfer it to advertising platforms or data brokers, use it for advertising, or use it to determine creditworthiness or for lending.
How to disconnect: you can disconnect your email account in settings at any time, and revoke access in your Google Account permissions. When you disconnect, we stop accessing the account. You can ask us to delete extracted data under Section 8.
okood's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
We share personal information only with:
The Service links to third-party investment platforms and websites. Their privacy practices are their own, and this policy does not cover them.
We keep personal information for as long as your account is open and as needed to provide the Service. When you delete your account, we delete or de-identify your personal information within [90] days, except where we must keep it to comply with law, resolve disputes, prevent fraud or enforce our agreements. Backups are overwritten on a rolling schedule.
We use cookies and similar technologies to keep you signed in, remember preferences, and measure how the Service is used. You can block or delete cookies in your browser settings; some features may stop working if you do.
We honor Global Privacy Control signals as a request to opt out of any sale or sharing of personal information. Because browsers have not adopted a common standard for "Do Not Track" signals, we do not respond to them. We do not knowingly allow third parties to collect personal information about your activity over time and across different websites when you use the Service, other than the analytics providers listed above.
Access, correct, export or delete. You can view and edit most information in your account settings. You can ask us to access, correct, export or delete your personal information by emailing legal@okood.com. We respond within 45 days and may need to verify your identity first.
Marketing email. Use the unsubscribe link in any marketing email. We will still send service messages.
Connected accounts. Disconnect them at any time in settings.
No retaliation. We will not deny service, change prices or reduce quality because you exercise a privacy right.
California residents. Depending on our size and the law in force, you may have rights under the California Consumer Privacy Act to know what personal information we collect, use and disclose, to delete or correct it, to limit use of sensitive personal information, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined, and we use sensitive personal information only to provide the Service. In the past 12 months we have collected the categories described in Section 1 (identifiers, commercial and financial information, internet activity, approximate geolocation, and inferences) for the purposes in Section 2, and disclosed them to the service providers in Section 5. An authorized agent may submit a request for you with written proof of authority. California's "Shine the Light" law lets you ask whether we disclose personal information to third parties for their direct marketing; we do not.
Other US states. Residents of states with comprehensive privacy laws may have similar rights, including the right to appeal a denied request. To appeal, reply to our decision email and we will review it within 60 days.
We use administrative, technical and physical safeguards designed to protect personal information, including encryption in transit and at rest, access controls and least-privilege access for staff. No system is completely secure, and we cannot guarantee the security of your information. You are responsible for keeping your password confidential. If a breach affects your personal information, we will notify you as the law requires.
The Service is for adults. It is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has given us personal information, contact us and we will delete it.
The Service is operated in the United States and intended for US users. If you use it from another country, your information will be transferred to, stored and processed in the United States, where privacy laws may differ from those where you live.
We may update this policy. If we make material changes, we will notify you by email or in the Service before they take effect, and we will ask for your consent where the law or a connected-account provider requires it. The effective date above shows when the policy was last revised.
okood, Inc. [ADDRESS] legal@okood.com
Draft prepared September 18, 2026. Not legal advice — review with counsel before publishing.