Privacy Policy

Consumer Dividends Holding Corp

Effective date: June 14, 2026

Last updated: June 14, 2026

This privacy policy explains what we collect, how we use it, who we share it with, and what you can do about it. It applies to consumerdividends.com and every product we operate under Consumer Dividends Holding Corp ("CDHC", "we", "us"), including Numidian and ListingPro.

1. Plain-language summary

We collect the minimum information needed to run our products. We do not sell personal information. We do not use the content you enter into Numidian or ListingPro to train language models. We use Stripe for payments and a small set of infrastructure providers listed in our Subprocessor List. If you are in the EU, UK, California, Colorado, Connecticut, or another jurisdiction with privacy rights, those rights apply to you and we honor them.

2. Who we are

Consumer Dividends Holding Corp is the data controller for the information described in this policy. Our principal place of business is Pāhoa, Hawaii, United States. Contact: support@consumerdividends.com.

3. What we collect

Information you give us directly.

• Account and billing information when you purchase a product. This is processed by Stripe and we receive a confirmation, the email used, the plan purchased, and a transaction reference. We do not store full card numbers.
• Email address when you sign up, request a free trial, or contact support.
• Content you enter into a product. For Numidian this is the case facts you input to generate a risk report. For ListingPro this is the property information you input to generate listing materials. We treat this content as confidential to you.

Information collected automatically.

• Server logs from Railway and Cloudflare including IP address, browser type, request paths, and timestamps. Used for security, debugging, and abuse prevention. Retained for up to 90 days.
• Anonymous usage events such as which features are used and aggregate report counts. Used to improve the products. No content of your reports is logged.

Information from third parties.

• Stripe sends us payment confirmation events and customer identifiers.
• If you contact us through LinkedIn, Reddit, or another platform, we receive whatever your message includes.

We do not collect biometric data, government identifiers, health information, or precise location.

4. How we use it

• To deliver the product you purchased and provide support.
• To send the access code, report, or output you requested.
• To process payments and prevent fraud.
• To respond to your questions and requests.
• To improve the products based on aggregate usage patterns.
• To comply with legal obligations.

We do not use the content of your Numidian inputs, ListingPro inputs, or any reports we generate for you to train, fine-tune, or improve any language model. Your case facts and property details stay yours.

5. Language model processing inside our products

Numidian and ListingPro use language models to produce structured outputs from the inputs you provide. We send your inputs to our model provider only for the duration needed to generate your output. Our model provider does not retain those inputs for training under the terms of our agreement with them. Once your output is generated and delivered to you, your inputs are not used to update any model.

For full detail on what each product does with language models, see our Language Model Use and Transparency Disclosure.

6. Who we share it with

We share information only with:

• Service providers (subprocessors) that help us run the products. Current providers are listed in our Subprocessor List. Each is bound by a contract requiring them to protect your information.
• Stripe for payment processing.
• Authorities when required by law, court order, or to protect someone's safety.
• A buyer or successor if CDHC is acquired or merged. We will notify you and your rights will continue to apply.

We do not sell personal information. We do not share personal information with advertisers. We do not use personal information for cross-context behavioral advertising.

7. Where your information is stored

Information is stored on infrastructure operated by Railway, Supabase, Cloudflare, and Stripe, primarily in the United States. If you access our services from outside the US, your information will be transferred to and processed in the US under the safeguards described in our Subprocessor List, including Standard Contractual Clauses where applicable.

8. How long we keep it

• Account and billing records: 7 years after your last transaction, for tax and accounting purposes.
• Report content you generated through Numidian or ListingPro: kept as long as your access tier supports history (Pro and Agency tiers retain case history; one-time tiers retain only as long as your access window). After your access window closes, content is deleted within 30 days.
• Free trial inputs: deleted within 30 days.
• Server logs: up to 90 days.
• Support emails: 2 years.

You can request earlier deletion at any time using the rights below.

9. Your rights

Depending on where you live, you have some or all of the following rights:

• Access: ask what personal information we hold about you.
• Correction: ask us to fix inaccurate information.
• Deletion: ask us to delete your information.
• Portability: ask for a copy of your information in a portable format.
• Restriction: ask us to pause certain uses.
• Objection: object to specific processing, including any automated decision-making.
• Withdraw consent: where we rely on consent, you can withdraw it.
• Opt out of sale or sharing: we do not sell or share personal information for targeted advertising, but you can confirm this in writing.
• Non-discrimination: we will not penalize you for exercising your rights.

To exercise any right, email support@consumerdividends.com from the address associated with your account. We respond within 30 days. We may need to verify your identity before fulfilling the request.

California residents (CCPA/CPRA): you have the right to know, delete, correct, opt out of sale/sharing (none occurs), and limit use of sensitive information (we do not process sensitive information as defined by the statute). You can designate an authorized agent.

EU/UK residents (GDPR/UK GDPR): our legal bases are (a) performance of a contract, when we process information to deliver the product, (b) legitimate interest, when we use logs for security and improvement, (c) consent, where we ask for it, and (d) legal obligation, for tax and accounting. You may lodge a complaint with your supervisory authority.

Colorado, Connecticut, Virginia, and other state law residents: rights equivalent to the above are honored.

10. Children

Our products are built for professional and business use. We do not knowingly collect information from anyone under 16. If you believe a child has submitted information to us, contact support@consumerdividends.com and we will delete it.

11. Security

We use TLS encryption in transit, access controls on internal systems, and isolated databases per product. No system is perfectly secure. If we discover a breach that affects you, we will notify you and the relevant authorities as required by law.

12. Cookies and tracking

See our Cookie Policy for detail. We use a small set of strictly necessary cookies for session management and security. We do not use advertising or cross-site tracking cookies.

13. Changes

We update this policy when our practices change. The "Last updated" date at the top reflects the most recent change. Material changes are emailed to active customers at least 30 days before they take effect.

14. Contact

Questions, requests, or complaints:

support@consumerdividends.com

Consumer Dividends Holding Corp, Pāhoa, Hawaii, United States.