Privacy Policy
Last updated: July 31, 2026
1. Overview & Commitment
RCS Draft ("we", "us", or "our") is an independent software tool designed to assist certified general appraisers in preparing draft HUD Section 8 Rent Comparability Studies (RCS). We are committed to protecting your privacy, your contact information, and the confidentiality of your appraisal practice data.
2. Information We Collect
We collect information necessary to operate our website, communicate pilot availability, and provide workflow software services:
- Pilot & Contact Requests: When you submit a request for pilot access or contact us, we collect your name, email address, company name, and your message details.
- Account & Auth Credentials: Authenticated appraiser users access the workspace using secure credentials. Passwords are salted and hashed using Argon2id and never stored in plain text.
- Usage & Diagnostic Logs: Transient server logs contain IP addresses, request timestamps, and system diagnostics for security rate-limiting and performance monitoring.
Subject property data, market comparables, and Chapter 9 adjustment calculations entered into your workspace are treated as confidential professional work product. We do not sell, license, share, or monetize appraiser valuation data or customer contact records with third parties.
3. How We Use Your Information
Information collected is used strictly for legitimate operational purposes:
- Evaluating pilot program applications and communicating pilot onboarding terms.
- Dispatching high-priority admin notifications so our team can respond to your pilot requests promptly.
- Operating, securing, and maintaining the RCS Draft web application.
- Enforcing security rate limits to prevent automated form spam and abuse.
4. Data Security
We implement industry-standard administrative, technical, and physical safeguards to protect your information:
- All web traffic is encrypted in transit using Transport Layer Security (TLS/HTTPS).
- Database persistence is isolated with strict access controls and encrypted backups.
- API endpoints enforce rate limiting to prevent credential stuffing and denial-of-service attacks.
5. Contact & Data Rights
You have the right to request access to, correction of, or deletion of your personal contact data submitted to RCS Draft. If you have questions regarding this Privacy Policy or wish to exercise your data rights, please contact us: