Legal

Privacy Policy

Effective May 6, 2026 · Last updated May 6, 2026

This Privacy Policy explains how Riverside Capital Partners LLC (“RCP”, “we”, “us”) collects, uses, and protects your information when you use our websites and services, including riversidecp.com, home.riversidecp.com, app.riversidecp.com, and admin.riversidecp.com.

We are a California real-estate investment and property-management company. Our services include offering Reg D 506(c) investment opportunities to accredited investors and operating residential rental properties.

1. Information We Collect

Information you provide

Investors:

• Name, email, phone, mailing address
• Date of birth, taxpayer identification number (TIN/SSN), encrypted at rest
• Bank account and routing numbers (collected via Plaid; we do not store the full number)
• Accreditation evidence (CPA letter, attorney letter, RIA letter, or income/net-worth documentation)
• Investment commitments and signed subscription documents

Rental applicants and residents:

• Name, email, phone, date of birth
• Current address, employment, monthly income
• Move-in date, vacancy of interest
• Affirmative FCRA consent for credit, background, and eviction screening
• Bank account information for rent payments (collected via Plaid)
• Lease history and payment ledger

General:

• Application fee payment information (collected and processed by Stripe; we do not store full card numbers)
• Communications you send to us

Information collected automatically

• IP address, browser user-agent, request timestamps (security and audit)
• Cookies for authentication sessions
• Server-side application logs

Information from third parties

• Consumer reports (credit, eviction, criminal background) from screening vendors with your prior written consent
• Accredited investor verification confirmations from Parallel Markets or your professional advisor
• Bank account verification and ACH transfer status from Plaid
• Bank transaction data from Mercury (our operating bank, for transaction reconciliation only)

2. How We Use Information

We use information to:

• Operate our websites and services
• Verify your identity and accredited investor status (Reg D 506(c))
• Conduct credit and background screening for rental applicants (with your written FCRA consent)
• Process application fees, security deposits, rent payments, and investor capital movements
• Generate and execute leases, subscription agreements, and operating-agreement amendments
• Communicate with you about your application, lease, investment, or service updates
• Comply with legal obligations (FCRA, SEC Reg D, IRS reporting, state landlord-tenant law)
• Investigate and respond to security incidents and abuse

We do not sell your personal information.

3. Sharing of Information

We share information only with:

• Service providers under contractual confidentiality obligations: AWS (hosting), Stripe (payments), Plaid (bank verification + ACH transfers), AWS SES (email delivery), Mercury (operating bank), Parallel Markets (accreditation), and SmartMove or RentPrep (tenant screening, with your consent).
• Legal authorities when required by law, subpoena, or court order, or to protect rights, property, or safety.
• Successors in connection with a merger, acquisition, or sale of assets, with notice to you.

4. Data Retention

• Reg D investor records: 5 years post-offering close per SEC §240.17a-4
• FCRA consumer reports: 5 years post-decision per FTC guidance
• Lease and tenant records: 7 years post-lease-end
• Declined application data: 2 years post-decision per FCRA, then deleted on request
• Marketing data: retained while business-relevant; deleted on request

5. Your Rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your information (subject to legal retention requirements)
• Opt out of marketing communications
• Restrict or object to certain processing
• Receive a copy of your data in a portable format

California residents have additional rights under the CCPA, including the right to know what categories of information we collect and to opt out of any “sale” or “sharing” (we do neither). To exercise any right, email privacy@riversidecp.com.

6. Security

We implement administrative, technical, and physical safeguards including encryption at rest (AES-256) and in transit (TLS 1.2+), least-privilege access controls, multi-factor authentication for administrative access, secrets management via AWS Secrets Manager, and append-only audit trails for legally significant actions. Our full Information Security Policy is available on request.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Children

Our services are not intended for individuals under 18. We do not knowingly collect information from children.

8. International Users

Our services are operated from the United States. By using our services, you consent to the transfer of your information to the United States for processing.

9. Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent change. Material changes will be communicated via email to registered users at least 30 days before taking effect.

10. Contact

Email: privacy@riversidecp.com
Mail: Riverside Capital Partners LLC, California