Privacy Policy

1. Who we are

This Privacy Policy applies to the WLP Multifamily Investment Analyzer tools — the Napkin Analyzer, Investor Analyzer, and Syndicator Dashboard — available at patrickafrifah.com/analyzer.

These tools are operated by Patrick Afrifah, a licensed Real Estate Broker in Illinois (affiliated with Kale Realty), a licensed Real Estate Sales Agent in Texas (affiliated with Central Metro Realty), and a licensed Mortgage Loan Originator (NMLS #2500008, affiliated with CrossCountry Mortgage / Kimball Team). Operating under the brand WLP — Wealth, Legacy & Property.

For any privacy-related questions or requests, contact: privacy@patrickafrifah.com

2. What data we collect

We collect the minimum data necessary to provide the service:

• Name and email address — provided voluntarily when you request a PDF report or unlock your analysis results. Phone number is requested in the Syndicator Dashboard.
• Property and deal inputs — purchase price, rents, expenses, and other financial figures you enter into the tools. These are processed in your browser and passed to Anthropic's Claude API to generate the AI deal narrative. They are not stored in our database.
• Market selection — the US state or region you select when submitting your analysis.
• Usage data — pages visited, time on site, tool steps completed, and events such as "analysis run" and "report sent." Collected via Google Analytics with IP anonymisation enabled.
• Session recordings and heatmaps — how you interact with the tools, including clicks, scrolls, and navigation patterns. Collected via Microsoft Clarity. Clarity automatically masks input field content by default.
• Consent preference — whether you accepted or declined analytics tracking, stored in your browser's localStorage.

We do not collect government identifiers (SSN, passport, national ID), full financial account numbers, or payment information. None of these are required to use the tools.

3. Why we collect it

• To deliver your PDF report — your name and email are used to send the analysis report you requested via transactional email.
• To send follow-up educational content — with your consent at the point of submission, we may send resources about real estate investing, financing strategies, and market updates relevant to your stated market. You can unsubscribe at any time.
• To generate your AI deal narrative — your deal inputs are sent to Anthropic's Claude API to produce the plain-English investment verdict. This is a one-time, stateless API call; the inputs are not retained by us after the response is returned.
• To improve the tools — anonymised usage data helps us understand where users get stuck, which steps cause drop-off, and how to improve the overall experience.
• To comply with legal obligations — we may retain records as required by applicable law or to defend against legal claims.

Lawful basis (GDPR / UK GDPR): Where applicable, our lawful basis for processing is your consent, given at the point of form submission. For analytics in non-consent-required regions, our lawful basis is legitimate interest. You may withdraw consent at any time by contacting privacy@patrickafrifah.com.

4. Who we share it with

We do not sell your personal data. We share it only with the service providers necessary to operate the tools:

All third-party providers are contractually required to process your data only for the purposes listed and to maintain appropriate security measures.

5. Your rights by region

Depending on where you are located, you have the following rights regarding your personal data:

To exercise any of these rights, email privacy@patrickafrifah.com with your name, email address, and the right you wish to exercise. We will respond within 30 days.

6. Data retention

Contact records (name, email, market, deal metrics) are retained in Brevo until you unsubscribe or request deletion. We review and purge inactive contacts annually.

Deal inputs are not stored server-side. They exist only in your browser session and in the one-time API call to Anthropic. Once your session ends, the input data is gone.

Analytics data is retained for 14 months in Google Analytics (the platform default) and 13 months in Microsoft Clarity, after which it is automatically deleted.

Server logs generated by Webflow Cloud / Cloudflare are retained for up to 30 days for security and debugging purposes.

7. Cookies and analytics

We use two analytics tools that set cookies or use similar storage mechanisms:

• Google Analytics (GA4) — uses cookies to distinguish unique visitors and sessions. IP addresses are anonymised before storage. You can opt out via Google's opt-out browser add-on.
• Microsoft Clarity — uses cookies and session storage to record interactions. Clarity automatically masks the content of input fields by default. You can opt out at privacy.microsoft.com.

We also use localStorage (not a cookie) to save your analytics consent preference and your disclaimer agreement. This data never leaves your browser.

If you are in a consent-required region (EU/EEA, UK, Ghana, California, Brazil), analytics tools will not load until you accept via our consent banner. If you decline, no analytics data is collected during your visit.

8. Security

All data is transmitted over HTTPS/TLS. API keys used to call Brevo and Anthropic are stored as server-side environment variables and are never exposed in the browser. We apply rate limiting and bot protection (honeypot fields, time-based checks, IP rate limits) on all form submissions to prevent abuse.

No method of transmission over the internet is 100% secure. While we use commercially reasonable measures to protect your data, we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

9. Children's privacy

These tools are intended for adults making real estate investment decisions. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted personal data through these tools, please contact us at privacy@patrickafrifah.com and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the tools we use, or applicable law. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify users via email (if we have your address) or via a notice on the tools.

We recommend reviewing this page periodically. Continued use of the tools after changes are posted constitutes acceptance of the updated policy.

11. Contact us

For all privacy-related requests — including access, correction, deletion, or opt-out — contact:

• Email: privacy@patrickafrifah.com
• Subject line: "Privacy Request — [your name]"
• Response time: Within 30 days

For general questions about the tools or to book a strategy call with Patrick, visit patrickafrifah.com.