Privacy Policy
Last updated: November 4, 2026
BAP (Apex Care Solutions VA LLC, dba BAP) collects only what it needs to run the Service, never sells your account information, lets property owners opt out of BAP's lists, and lets you ask us to see, correct or delete your data. This policy covers buybap.com and app.buybap.com.
1. Information we collect
| What | Examples | Where it comes from |
|---|---|---|
| Account | Name, email, password (stored encrypted), business profile | You |
| Your work in BAP | Saved leads, notes, deals, contacts, contracts, buyers, files | You |
| Payments | Membership status, credit purchases, last 4 digits of your card | Stripe (BAP never sees your full card number) |
| Usage | Pages visited, features used, device and browser type | Your browser, Google Analytics on buybap.com |
| Property and owner data | Addresses, owner names and mailing addresses, tax, foreclosure and code records | Public records and government open-data sites |
| Owner contact data | Phone numbers and emails returned by a skip trace you run | Our data vendor, at your request |
| Directory listings | Business name, contact details, service areas | Contractors and lenders who list themselves |
2. How we use it
We use information to provide and improve the Service, process payments, prevent fraud and abuse, answer support requests, send account and billing emails, and meet legal obligations. We do not use your data to train third-party AI models.
3. Who we share it with
We share information only with service providers that help run BAP, each limited to what its job requires:
- Stripe for payments and fraud prevention.
- Supabase for database hosting and sign-in.
- Google for email and website analytics.
- Our skip-tracing provider (the property address only) when you run a skip trace.
- RentCast (the property address only) when you request a value estimate.
- Anthropic (the lead's property and deal details) when you run an AI deal analysis.
- RealEstateAPI (the area and filters you search) when you request on-demand nationwide leads.
- PostGrid (recipient name and mailing address, and the letter or postcard) when you send mail.
- Twilio (phone numbers and message content) for calls and texts.
- GitHub for hosting our website and app.
We may also disclose information when the law requires it, to protect rights and safety, or as part of a merger or sale of the business. We never sell your account information (your name, email, payment details or the work you save in BAP), and we do not share it for targeted advertising. Property and owner information from public records is different: providing it to paying members is BAP's core service, and section 4 explains how owners can opt out.
4. Property owners: how to opt out
BAP compiles property records that include owner names, mailing addresses and, when a member runs a skip trace, owner phone numbers and emails, and makes them available to paying members.
If you own property and want your information removed from or corrected in BAP, email support@buybap.com with the property address. We will suppress your contact information from members' searches and respond within 30 days. Texas residents can use the same address to exercise their rights under the Texas Data Privacy and Security Act (section 6).
5. Cookies and analytics
buybap.com uses Google Analytics cookies to understand site traffic. The app uses essential browser storage to keep you signed in. You can block cookies in your browser settings; the app may not work without essential storage.
6. Your choices and rights
Depending on where you live (including under the Texas and Virginia privacy laws), you may have the right to access, correct, delete or get a copy of your personal information, and to opt out of its sale or use for targeted advertising. Email support@buybap.com to make a request. We will verify your identity, respond within 45 days, and never treat you differently for using these rights. If we deny a request, you can appeal by replying to our decision.
7. How long we keep data
We keep account and work data while your account is open, and delete it within 90 days after you ask us to close your account, except records we must keep for tax, accounting or legal reasons. Demo sessions are temporary and removed periodically.
8. Security
Data is encrypted in transit, payments are handled by Stripe, and access to each account's data is restricted to that account. No system is perfectly secure, so please use a strong, unique password.
9. Children
BAP is for adults 18 and over. We do not knowingly collect information from children.
10. Text messages (SMS)
When you text BAP at (469) 224-1122, for example after receiving a BAP postcard, we collect your mobile number and the messages you send so we can reply about your property. We use them only to respond to you and follow up on the offer you asked about.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are never shared with or sold to any third party. We share your number only with our SMS delivery provider (Twilio) as needed to send and receive messages.
Reply STOP at any time to stop receiving texts, or HELP for help. Message frequency varies. Message and data rates may apply.
11. Changes
We will post updates here and email you about material changes before they take effect.
12. Contact
Apex Care Solutions VA LLC dba BAP · support@buybap.com · 469-224-1122