REIN is a commercial real estate workspace. It holds the pipeline, the underwriting model, the diligence checklist, and the files on the same deal.

What metrics does underwriting calculate?

Cap rate, DSCR, LTV, debt yield, cash-on-cash, levered IRR, and year-by-year debt service through the rate-cap term.

Can I attach documents to diligence items?

Yes. Tasks that expect a file stay open until a document is attached or a waiver with a reason is recorded on the deal.

Where are documents stored?

Files sit on encrypted object storage and stay scoped to your organization. Uploads and downloads are written to the audit log.

How does billing work?

Starter is $49 per month, Professional $199, Enterprise $499. New organizations get fourteen days on Professional limits with no card.

Back to Home

Legal

Privacy Policy

Last updated: August 20, 2026 | Effective: August 20, 2026

FlowTasks LLC ("we", "us", "our") operates the REIN platform at rein.flowtasks.io. This policy describes how we collect, use, and protect your information when you use our services.

Information We Collect

Account Information

When you create an account, we collect your name, email address, organization name, and password. Passwords are stored as PBKDF2-SHA256 hashes with a random salt. We never store plaintext passwords.

Deal and Portfolio Data

Information you enter about your real estate deals, underwriting models, contacts, and documents. This data belongs to you and is scoped to your organization by application queries. The database is Cloudflare D1 (SQLite), not a separate physical partition.

Usage Data

We collect anonymized analytics about feature usage, page views, and session duration to improve the platform. This includes device type, browser, and general geographic region (country/state level).

Documents

Files you upload to the Data Room are stored encrypted on Cloudflare R2 and are only accessible to users within your organization with appropriate permissions.

How We Use Your Information

Platform Operation

To provide, maintain, and improve REIN's features including deal tracking, underwriting, AI analysis, and document management.

AI Processing

When you use the AI Assistant, your queries and relevant portfolio context are processed through our inference pipeline. AI conversations are not used to train models and are not shared with third parties.

Communications

To send transactional emails (password resets, deal updates, security alerts) via Cloudflare Email. We do not send marketing emails without your explicit consent.

Security

To detect and prevent unauthorized access, monitor for abuse, and maintain audit logs as required by your data retention settings.

Data Storage and Security

Encryption

Traffic uses TLS on the Cloudflare edge. Deal files live in a private R2 bucket. Database rows are not field-encrypted. Passwords use PBKDF2-SHA256.

Data Residency

Compute and D1 currently serve from Cloudflare's US East (ENAM) region. D1 snapshots exist. That is not 30-day point-in-time recovery and not a daily encrypted dump you can download.

Access Control

REIN enforces role-based access control (admin, manager, analyst, viewer) and a 4-tier data classification system (public, internal, confidential, restricted).

Audit Trail

Every significant action (login, document access, deal changes, permission modifications) is logged with timestamps, user identity, and IP address.

Data Sharing

No Selling of Data

We do not sell, rent, or trade your personal information or deal data to any third party under any circumstances.

Service Providers

We use Cloudflare for infrastructure (compute, storage, email), Stripe for payment processing, and FRED API for public market data. These providers only receive the minimum data necessary to operate their services.

Legal Requirements

We may disclose information if required by law, subpoena, or court order, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Your Rights

Access and Export

You can access all your data through the platform dashboard. Administrators can export deal data, contacts, and documents at any time.

Deletion

You can request deletion of your account and all associated data by contacting support@flowtasks.io. Organization administrators can delete individual user accounts and their data from the admin dashboard.

Correction

You can update your profile information, deal data, and documents directly through the platform at any time.

Portability

You can export your data in standard formats (CSV, PDF) from the platform's reporting and data room features.

Cookies and Tracking

Session Cookies

We use a single HttpOnly, secure, SameSite cookie (rein_session) for authentication. This cookie contains an encrypted session token and expires after 7 days.

No Third-Party Tracking

We do not use Google Analytics, Facebook Pixel, or any third-party tracking scripts. We do not serve advertisements.

Questions about this policy?

support@flowtasks.io