Privacy Policy

University Capital (“University Capital,” “we,” “us”) is a student-run real estate investment firm at Utah State University. This policy explains what we collect and how we use it across our public website at ucapre.com, our internal CRM at crm.ucapre.com, and our training platform at learn.ucapre.com.

Information we collect

From visitors to this website. If you submit the contact form we receive the name, email address, and message you provide, so that we can reply. We do not use analytics or advertising trackers on this site.

From people with accounts. Our CRM and training platform are private and available only to University Capital interns, staff, and advisors. Accounts are created by an administrator; there is no public sign-up. For account holders we store a name, an email address, an optional photo and LinkedIn URL, and a record of training progress — which modules have been completed and quiz attempts.

Business contact records. Our CRM holds professional contact information for people we work with — brokers, lenders, partners, mentors, and alumni. This is business-context information such as name, employer, role, email, and phone number. It is visible only to authenticated University Capital members.

How we use Google user data

An administrator may connect a Google account so that deal documents can be stored in Google Drive. When that happens, our application requests a single, narrow permission:

This scope grants access only to files our application itself creates. We cannot see, read, or modify any other file in the connected Google Drive, and we do not request permission to do so.

We use this access for one purpose: creating and retrieving the deal documents and images that University Capital members upload through the CRM. We do not sell this data, use it for advertising, use it to build user profiles, transfer it to third parties except as needed to provide the service, or use it to develop, improve, or train generalized artificial intelligence or machine learning models.

University Capital’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Access can be withdrawn at any time from your Google account permissions page. Revoking it stops all further access immediately; files already created remain in the Google Drive account that owns them.

Service providers

We rely on a small number of providers to operate. Each receives only what it needs to perform its function:

• —Vercel — website and application hosting
• —Supabase — database and authentication for the CRM and training platform
• —Google Drive — storage for deal documents uploaded through the CRM
• —FormSubmit — delivery of contact form submissions to our inbox
• —Forward Email — email delivery for our ucapre.com addresses

Cookies

The public website sets no cookies. The CRM and training platform set a session cookie when you sign in, scoped to .ucapre.com so that one sign-in covers both. It exists to keep you authenticated and is not used for tracking or advertising.

Retention

Contact form messages are kept in our email for as long as they are useful. Account and training records are kept while an account is active and for a reasonable period afterward, since alumni relationships are part of what we do. Business contact records are kept as long as the relationship is relevant.

Security

Access to the CRM and training platform requires an account, and database access is restricted by row-level security policies. No system is perfectly secure, and we do not claim otherwise.

Your choices

You may ask us what information we hold about you, ask us to correct it, or ask us to delete it. Write to info@ucapre.com and we will respond. If you are an account holder, you can update most of your own profile from the Settings page.

Changes

If we change this policy we will update the effective date above. Material changes affecting account holders will be communicated directly.

Contact

Questions about this policy can go to info@ucapre.com, or by post to University Capital, Logan, Utah.