Skip to main content

AIVAA™ REPLACES THE $3,000 APPRAISAL — AI PROPERTY REPORT IN UNDER 5 MINUTES

Data Subject Access Request (DSAR) Policy

CR Equity AI ("we," "our," or "the Company") is committed to transparency, consumer rights, and responsible stewardship of all personal and financial information processed through our platform. This Data Subject Access Request (DSAR) Policy outlines how individuals ("data subjects") may request access to their personal data, how CR Equity AI verifies and responds to such requests, and the rights and limitations that apply under applicable privacy and financial‑data regulations.

1. Purpose and Scope

This policy governs all DSAR requests submitted by consumers, borrowers, applicants, partners, and authorized representatives whose personal information is processed by CR Equity AI. It applies to data collected through:

  • The CR Equity AI platform and client portals
  • AI‑powered underwriting, valuation, and compliance engines
  • Affiliate and partner integrations
  • Customer support, onboarding, and communication channels

This policy does not override obligations under the Fair Credit Reporting Act (FCRA), Gramm‑Leach‑Bliley Act (GLBA), or other financial‑services regulations that may restrict disclosure of certain data.

2. Rights of Data Subjects

Depending on jurisdiction and regulatory applicability, individuals may have the right to:

  • Request access to personal data CR Equity AI has collected or processed
  • Request confirmation of whether CR Equity AI is processing their data
  • Request correction of inaccurate or incomplete information
  • Request deletion of eligible personal data
  • Request information about categories of data collected, sources, purposes, and third‑party disclosures
  • Designate an authorized agent to submit a request on their behalf

CR Equity AI honors these rights to the extent permitted by law and subject to financial‑services compliance requirements.

3. Submitting a DSAR

Data subjects may submit a DSAR through any of the following channels:

  • Email: privacy@crequity.ai
  • Secure Portal: Provided to clients and borrowers during onboarding
  • Written Request: As permitted by applicable law

Requests must include sufficient information to identify the data subject and the specific rights being exercised.

4. Identity Verification

To protect consumer financial data, CR Equity AI requires robust identity verification before fulfilling any DSAR. Verification may include:

  • Government‑issued identification
  • Multi‑factor authentication through the CR Equity AI portal
  • Matching data elements already on file
  • Signed authorization for agents or representatives

If verification cannot be completed, CR Equity AI will notify the requester and may deny the request for security reasons.

5. Response Timeline

CR Equity AI will acknowledge DSAR requests within 10 business days and will respond within 45 days, unless an extension is permitted due to complexity or volume. If an extension is required, CR Equity AI will notify the requester with an updated timeline.

6. Data That May Be Withheld

Certain categories of data may be restricted from disclosure, including:

  • Proprietary underwriting models, AI outputs, or risk‑scoring algorithms
  • Information protected under FCRA, GLBA, or bank‑level confidentiality rules
  • Data that would compromise security, fraud prevention, or regulatory investigations
  • Information that includes trade secrets or intellectual property
  • Data belonging to other individuals or entities

CR Equity AI will provide an explanation when data cannot be disclosed.

7. Deletion Requests

CR Equity AI will delete eligible personal data upon verified request unless retention is required for:

  • Legal or regulatory compliance
  • Fraud prevention and security
  • Contractual obligations
  • Ongoing underwriting, servicing, or dispute resolution

Deletion may include anonymization or de‑identification where appropriate.

8. Recordkeeping

CR Equity AI maintains an audit‑ready log of all DSAR requests, verification steps, response actions, and retention decisions. These logs are preserved in accordance with regulatory and internal compliance requirements.

9. Updates to This Policy

CR Equity AI may update this DSAR Policy to reflect changes in law, regulatory guidance, or platform operations. The most current version will always be available on the CR Equity AI website or client portal.