Vorah LLC — Global Privacy Policy

Effective Date: September 26, 2025

Introduction

Vorah LLC (“Vorah,” “we,” “us,” or “our”) values your trust.

This Privacy Policy explains how we collect, use, store, and protect information obtained through our websites

(www.vorahhq.com, www.getvorah.com), software, mobile applications, digital programs, events, and any other

products or services operated by Vorah (collectively, the “Services”). This Policy applies to all visitors, users, account holders, subscribers, customers, and partners (“you” or “your”) who interact with Vorah in any capacity. By accessing or using any Vorah Service, you consent to this Policy.

1. Applicability

(a) This Policy governs all personal and non-personal data processed by Vorah, including that of:

(b) Licensed real-estate professionals, brokerages, and their team members

(d) Vendors, affiliates, beta testers, and contractors

(e) Public visitors to any Vorah website or communication channel

(f) This Policy supplements any program-specific agreement (such as the Vorah 125 Collective Agreement) and prevails where it offers broader protection.

2. Information We Collect

Vorah collects only the data necessary to operate securely and improve user experience.

(a). Information You Provide

Name, email, phone number, and mailing address

License or brokerage information (if applicable)

Account credentials and communication preferences

Payment information processed securely through Stripe Payments

Uploaded content, media, or files related to your professional activity

Messages, inquiries, or customer-support submissions

(b). Automatically Collected Information

Browser type, IP address, device ID, and operating system

Usage activity, engagement metrics, or feature interactions

Cookies and similar tracking technologies (see Section 10)c. System-Generated Data

Vorah systems may analyze anonymized or aggregated usage data to enhance functionality, improve user safety,

detect fraud, or deliver relevant experiences.

No personally identifiable information (PII) is shared publicly without consent.

3. How We Use Information

We use information to:

Operate, maintain, and improve the Services

Authenticate users and manage accounts

Deliver requested functionality and customer support

Process payments and verify compliance obligations

Communicate administrative updates, security alerts, or changes

Conduct internal analytics to develop safer, more efficient technology

Meet legal, regulatory, and tax obligations

We do not sell personal data.

4. Lawful Bases for Processing

Vorah processes personal data under:

Contractual necessity — to fulfill our agreements with you

Legitimate interests — to improve, secure, and maintain our Services

Legal obligation — to comply with applicable laws and industry regulations

Consent — where required for marketing or optional features

5. Data Storage and Security

Encryption in transit (TLS 1.2+) and at rest (AES-256)

Role-based access controls and authentication logs

Secure hosting through audited, SOC 2–compliant cloud providers

Regular security testing and vulnerability assessments

While no platform is 100% immune to risk, Vorah maintains commercially reasonable safeguards and will

notify users of any legally reportable breach.

Vorah will notify affected users within the timeframe required by applicable law, generally within seventy-two

(72) hours where mandated.

6. Payments and Financial Data

All financial transactions are processed via Stripe, a PCI-DSS Level 1 provider.

Vorah does not store complete payment card details.

Transaction data is retained only as needed for compliance, refunds, or dispute resolution.

Vorah may retain minimal transaction identifiers (not full card data) solely to resolve disputes, comply with tax reporting, or maintain legally required financial records.

7. Data Ownership and Responsibility

Users retain ownership of original materials they upload or transmit.

Vorah receives a limited, non-exclusive license to host and process such materials solely to operate and enhance the Services.

Aggregated or anonymized analytics remain the property of Vorah LLC.

Users are responsible for ensuring that uploaded information complies with privacy, advertising, and licensing laws.

Users acting in a professional capacity (such as licensed agents or brokers) are solely responsible for complying with their respective licensing, advertising, and record-keeping obligations.

8. International and Regulatory Compliance

Vorah complies with:

U.S. Federal Trade Commission (FTC) regulations

California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)

General Data Protection Regulation (GDPR) principles for international users

CAN-SPAM Act, DMCA, and applicable state data-protection laws

We may transfer data internationally under recognized safeguards (e.g., Standard Contractual Clauses).

9. Cookies and Tracking

Vorah uses cookies, pixels, and similar tools to:

Maintain secure logins and sessions

Measure performance and feature usage

Remember user preferences

You may disable cookies in your browser; some features may then function less effectively.

Vorah’s websites display a global cookie-consent banner where required by law.

Vorah may also use anonymized analytics tools to measure aggregate platform usage and improve Service performance.

Vorah currently does not respond to browser-based Do-Not-Track signals.

10. User Rights

Depending on your jurisdiction, you may have rights to:

Access and receive a copy of your data

Request correction or deletion

Opt out of certain data uses

Limit use of sensitive personal information

File a complaint with a supervisory authority

Submit verified requests to team@vorahsupport.com.

We will respond within applicable statutory time frames. If you receive promotional or marketing communications from Vorah, you may opt out at any time by following the unsubscribe “remove” instructions included in those emails.

11. Automated Systems and Analytics

Vorah employs automated technologies to enhance performance, generate insights, and assist with data organization.

These systems operate in controlled environments using aggregated or de-identified information.

Vorah does not sell, share, or externally train third-party AI models on user data.

Any automated or AI-generated insights provided by Vorah are for informational purposes only and should not replace independent professional judgment or legal advice.

12. Children’s Privacy

Vorah does not knowingly collect personal data from anyone under 13 years of age. If such information is discovered, it will be promptly deleted.

13. Third-Party Service Providers

We may share limited data with vetted vendors that perform operational functions such as hosting, customer

support, or payment processing.

All providers are contractually bound to strict confidentiality and data-handling standards.

Vorah does not authorize third-party marketing use of user data.

14. Data Retention and Deletion

Data is retained only as long as necessary for operational, legal, or security purposes.

Upon verified request or account termination, Vorah will delete or anonymize data consistent with applicable retention laws and legitimate business needs.

15. Accessibility and Non-Discrimination

Vorah designs its digital properties to comply with WCAG 2.1 AA and ADA Title III standards.

Users exercising privacy rights will not face retaliation or reduced service quality.

16. Dispute Resolution

All disputes or claims relating to this Policy are governed by binding arbitration in the Commonwealth of Pennsylvania under the Federal Arbitration Act and AAA Commercial Rules, as detailed in Vorah’s Terms of Service.

No class or representative actions are permitted.

18. Policy Updates

Vorah may modify this Policy as laws, technology, or operations evolve.

Updates take effect upon posting with a revised “Last Updated” date.

Continued use of the Services after notice constitutes acceptance of changes.

19. Contact Information

Vorah LLC

Commonwealth of Pennsylvania, U.S.A.

Email: team@vorahsupport.com

Phone: 717-250-9784

Mailing Address: 4203 Union Deposit Road, Harrisburg, PA 17111

20. Governing Law

This Policy is governed by the laws of the Commonwealth of Pennsylvania and applicable U.S. federal law.

21. Acknowledgment

By accessing or using any Vorah Service, submitting information, or completing a transaction through Stripe,

you acknowledge that you have read, understood, and agree to this Privacy Policy.