Privacy Policy

Effective Date: July 31, 2026Last Updated: July 31, 2026

1. Our Commitment to Privacy

At Theia, trust is foundational to recovery.

We know that people often come to us during one of the most difficult times in their lives. Protecting your personal information is an important part of earning and maintaining that trust.

This Privacy Policy explains what information we collect, how we use it, who we share it with, the choices available to you, and how we work to protect your information.

We collect only the information reasonably necessary to provide our services, connect you with trusted recovery resources, improve your experience, and help us build better tools for future disaster survivors.

We do not sell your personal information.

When permitted by applicable law, we may create, use, license, share, or commercialize de-identified or aggregated information that cannot reasonably be used to identify you. We use these insights to improve our products, support research, develop new technologies, inform public policy, and advance disaster recovery for future communities.

Our goal is simple: to be transparent about our data practices, minimize unnecessary data collection, safeguard the information entrusted to us, and use data responsibly in a way that benefits both the people we serve today and the resilience of future communities.

By using Theia's Services, you acknowledge that you have read this Privacy Policy and understand the practices described below.

2. Information We Collect

The information we collect depends on how you interact with Theia and the services you choose to use. We collect information directly from you, automatically through your use of our Services, and from trusted third parties when necessary to provide our products and services.

We strive to collect only the information reasonably necessary to operate our platform, connect you with recovery resources, improve our Services, and fulfill our legal and contractual obligations.

Information You Provide

You may choose to provide us with information when you:

  • Create an account

  • Complete forms or questionnaires

  • Request recovery assistance or advisory services

  • Purchase products or services through our Marketplace

  • Upload documents or photos

  • Contact our support team

  • Participate in surveys, webinars, or community programs

Depending on the services you use, this information may include:

  • Your name and contact information

  • Property and recovery information

  • Insurance and rebuilding details

  • Uploaded documents, photos, or project files

  • Communications with Theia

  • Marketplace purchases and preferences

  • Any other information you voluntarily provide

Information We Collect Automatically

When you use our Services, we automatically collect certain technical and usage information to help operate, secure, and improve our platform. This may include:

  • Device and browser information

  • IP address

  • Operating system

  • Pages visited and features used

  • Time spent using our Services

  • Referral URLs

  • Cookies and similar technologies

  • Diagnostic and performance information

We use this information to understand how our Services are used, improve performance, enhance security, and provide a better user experience.

Information We Receive from Trusted Partners

We may receive information from trusted third parties when necessary to provide the Services you request. These may include:

  • Construction advisors

  • Contractors and suppliers

  • Nonprofit organizations

  • Government agencies

  • Insurance or financial partners

  • Payment processors

  • Identity verification providers

  • Analytics and technology providers

We only receive and use information that is reasonably necessary to provide our Services, support your recovery, or improve our platform.

Information We Generate

As you use Theia, we may generate information based on your interactions with our Services, such as:

  • Recovery progress and project milestones

  • Marketplace recommendations

  • Savings opportunities

  • Product and service recommendations

  • Platform insights and analytics

  • Fraud prevention indicators

Where appropriate, these insights may be generated using automated tools designed to support—rather than replace—human decision-making.

Information We Do Not Intentionally Collect

Unless required to provide a specific service or comply with applicable law, we do not intentionally collect:

  • Social Security numbers

  • Driver's license or passport numbers

  • Full payment card numbers

  • Biometric identifiers

  • Precise location information without your permission

  • Sensitive health information unrelated to requested accommodations

  • Information from children under the age of 18

Please do not submit Social Security numbers, full payment card numbers, government identification numbers, medical records, or other highly sensitive information unless we specifically request that information and provide an appropriate method for submitting it.

If we receive information that is not necessary for the Services we provide, we may securely delete or anonymize it in accordance with our data retention practices.

3. How We Use Information

Theia uses your information to provide, operate, improve, and protect our Services. We only use your information for legitimate business, operational, legal, and recovery-related purposes consistent with this Privacy Policy and applicable law.

To Provide Our Services

We use your information to deliver the services you request, including to:

  • Create and manage your account

  • Verify your identity when appropriate

  • Connect you with trusted recovery advisors, contractors, vendors, and other program partners

  • Coordinate recovery-related services

  • Process Marketplace purchases and transactions

  • Respond to customer support requests

  • Personalize your experience with Theia

To Support Your Recovery

Because Theia is built specifically for disaster recovery, we use information to help simplify and coordinate the rebuilding process. This may include:

  • Recommending trusted professionals, products, and services

  • Identifying available discounts and savings opportunities

  • Helping coordinate rebuilding projects

  • Tracking recovery progress and project milestones

  • Providing educational resources and recovery guidance

  • Connecting you with grants, financing, or other recovery programs

To Improve Our Platform

We continually evaluate how our Services are used so we can improve the experience for all users. We may use information to:

  • Develop new products and features

  • Improve platform performance and reliability

  • Personalize recommendations

  • Improve search and Marketplace functionality

  • Better understand how users interact with our Services

  • Test and enhance new features

Artificial Intelligence

We may use artificial intelligence and other automated technologies to help organize information, improve recommendations, enhance customer support, detect fraud, and improve our Services.

AI is intended to assist—not replace—human judgment. Theia does not rely solely on AI to make significant recovery-related decisions.

Communications

We use your information to communicate with you about your account, requested services, Marketplace activity, security updates, customer support, and other important information related to your use of Theia.

Where permitted by law, we may also send educational resources, product updates, event invitations, surveys, and other communications you may find helpful. You may opt out of marketing communications at any time.

Safety, Security & Legal Compliance

We use information to help protect our users and Services by:

  • Detecting and preventing fraud

  • Maintaining platform security

  • Investigating misuse of our Services

  • Enforcing our Terms of Service

  • Complying with applicable laws and legal obligations

  • Protecting the rights, safety, and property of Theia, our users, and our partners

De-Identified & Aggregated Information

When permitted by applicable law, we may de-identify or aggregate information so that it can no longer reasonably identify you.

We may use, share, license, or commercialize this information for lawful purposes, including:

  • Product development

  • Disaster recovery research

  • Artificial intelligence development and evaluation

  • Industry benchmarking

  • Public policy initiatives

  • Marketplace optimization

  • Academic collaborations

  • Trend reporting and analytics

We maintain reasonable safeguards designed to prevent de-identified information from being re-associated with an identifiable individual.

4. How We Share Information

One of Theia's core purposes is to connect homeowners with trusted professionals, products, services, and resources that support disaster recovery. To provide these Services, we may share information with trusted partners when it is reasonably necessary to fulfill your request, operate our platform, comply with applicable law, or as otherwise described in this Privacy Policy.

We do not sell your personal information to advertisers or data brokers.

Trusted Program Partners

Depending on the Services you choose to use, we may share information with trusted Program Partners, including:

  • Construction advisors

  • Contractors and specialty trades

  • Architects and engineers

  • Building material suppliers

  • Marketplace vendors

  • Nonprofit organizations

  • Financial institutions and lenders

  • Government agencies

  • Insurance professionals

  • Technology providers

  • Other recovery service providers

We only share the information reasonably necessary for the applicable service or purpose and, where appropriate, in response to your request, direction, or consent.

Service Providers

We work with third-party service providers that help us operate Theia, including companies that provide:

  • Cloud hosting and data storage

  • Payment processing

  • Identity verification

  • Customer support

  • Email and text message delivery

  • Analytics and security services

  • Software development and infrastructure

These providers are authorized to use your information only as necessary to perform services on our behalf and are contractually required to protect it.

Marketplace & Referrals

If you choose to purchase products or request services through Theia, we may share information necessary to facilitate those transactions, including with Marketplace vendors, contractors, advisors, or other service providers you choose to engage.

For example, if you request an introduction to a contractor or purchase materials through our Marketplace, we may share the information needed to coordinate those services.

Legal Requirements

We may disclose information when we believe it is necessary to:

  • Comply with applicable laws or legal process

  • Respond to lawful requests from government authorities

  • Protect the rights, property, or safety of Theia, our users, or others

  • Detect, investigate, or prevent fraud or illegal activity

  • Enforce our Terms of Service or other agreements

Business Transfers

If Theia is involved in a merger, acquisition, financing, reorganization, asset sale, bankruptcy, or other corporate transaction, your information may be transferred as part of that transaction, subject to applicable law and appropriate confidentiality protections.

De-Identified & Aggregated Information

When permitted by applicable law, we may create, use, share, license, publish, or commercialize de-identified or aggregated information that cannot reasonably identify you.

This information may be shared with research institutions, government agencies, nonprofit organizations, commercial partners, academic institutions, investors, and others to support research, product development, disaster recovery innovation, public policy, benchmarking, and other lawful business purposes.

We maintain reasonable safeguards designed to prevent de-identified information from being re-associated with an identifiable individual.

5. Marketplace & Referrals

Theia's Marketplace is designed to help disaster survivors discover trusted products, services, and professionals while accessing exclusive discounts and recovery resources. When you use our Marketplace, we collect and use information necessary to facilitate purchases, coordinate referrals, improve recommendations, and operate the Marketplace.

Marketplace Activity

When you browse or make purchases through the Marketplace, we may collect information such as:

  • Products and services you view or purchase

  • Order and transaction details

  • Discount and promotional offers applied

  • Vendor interactions

  • Shipping and fulfillment information

  • Marketplace preferences and saved items

Payment information is generally processed directly by our third-party payment providers. Theia does not store complete payment card numbers.

How We Use Marketplace Information

We use Marketplace information to:

  • Process purchases and transactions

  • Apply negotiated discounts and offers

  • Coordinate fulfillment and delivery

  • Recommend relevant products and services

  • Improve Marketplace functionality

  • Provide customer support

  • Detect and prevent fraud

  • Measure Marketplace performance

Referrals & Commercial Relationships

Some products, services, or vendors featured through the Marketplace may generate revenue for Theia through referral fees, affiliate commissions, negotiated commercial partnerships, administrative fees, or similar arrangements.

These relationships help support and operate our platform and allow us to continue providing many of our Services at no cost to homeowners. We remain committed to recommending products and services based on their relevance and value to your recovery—not solely because of a commercial relationship.

Where required by law, we will provide appropriate disclosures regarding sponsored content or affiliate relationships.

Personalized Recommendations

We may use information about your recovery project, Marketplace activity, property characteristics, and preferences to recommend products, services, vendors, discounts, or educational resources that may be relevant to your needs.

These recommendations are intended to help simplify your recovery and should not be considered professional, legal, financial, engineering, or insurance advice.

Marketplace Analytics

We may analyze Marketplace activity to better understand purchasing trends, improve product offerings, strengthen vendor relationships, optimize discounts, and enhance the overall user experience.

Whenever reasonably practicable, these analyses are conducted using de-identified or aggregated information that cannot reasonably identify you.

6. Cookies & Analytics

Theia uses cookies and similar technologies to provide, secure, improve, and personalize our Services. These technologies help us remember your preferences, understand how our platform is used, measure performance, and enhance your overall experience.

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow websites to recognize your browser and remember certain information between visits.

We may also use similar technologies, such as web beacons, pixels, local storage, software development kits (SDKs), and other tracking technologies.

How We Use Cookies

We use cookies and similar technologies to:

  • Keep you signed in to your account

  • Remember your preferences and settings

  • Improve website functionality and performance

  • Measure traffic and user engagement

  • Understand how our Services are used

  • Detect and prevent fraud and security threats

  • Personalize content and recommendations

  • Improve our Marketplace and recovery tools

Types of Cookies We Use

Essential Cookies

These cookies are necessary for our Services to function properly. They enable core features such as account authentication, security, shopping cart functionality, and site navigation.

Because these cookies are essential, they cannot generally be disabled through our Services.

Analytics Cookies

Analytics cookies help us understand how visitors use our platform so we can improve performance, usability, and reliability.

These cookies collect information such as:

  • Pages visited

  • Features used

  • Time spent on the platform

  • Navigation patterns

  • Device and browser information

  • General geographic region (such as city or state)

Whenever reasonably practicable, analytics data is aggregated or de-identified before analysis.

Functional Cookies

Functional cookies remember choices you make, such as language preferences, accessibility settings, and other personalized features to improve your experience.

Third-Party Technologies

We may use trusted third-party providers to help us analyze website usage, improve performance, detect security issues, process payments, or provide customer support.

These providers may place cookies or similar technologies on our behalf, subject to their own privacy policies and applicable law.

Managing Cookies

Most web browsers allow you to control or delete cookies through your browser settings. You may also be able to manage certain tracking technologies through your device settings or applicable privacy preference tools.

Please note that disabling certain cookies may affect the functionality and performance of portions of our Services.

Advertising & Marketing Technologies

We may use advertising, marketing, and similar technologies to measure the effectiveness of our communications and campaigns, understand how users interact with our Services, and, where permitted by applicable law, provide or measure relevant advertising. These technologies may be operated by third-party partners and may collect information about your interactions with our Services over time. Where required by applicable law, we will obtain consent or provide applicable opt-out choices.

Do Not Track

Some web browsers offer a "Do Not Track" setting. Because there is currently no universally accepted standard for responding to these signals, Theia does not currently respond differently to "Do Not Track" requests unless required by applicable law.

7. Artificial Intelligence

Theia uses artificial intelligence ("AI") and other automated technologies to help improve our Services, streamline recovery workflows, and enhance the experience for homeowners, advisors, and partners. We believe AI should support—not replace—human judgment, particularly in situations involving complex recovery decisions.

How We Use AI

We may use AI to assist with:

  • Organizing and summarizing recovery information

  • Improving search and recommendations

  • Personalizing Marketplace suggestions

  • Drafting communications and educational content

  • Enhancing customer support

  • Detecting fraud, abuse, or security threats

  • Identifying trends that help improve our Services

  • Developing new platform features and tools

Human Oversight

AI-generated outputs are intended to assist our team and our users. Significant decisions regarding recovery, contractor selection, financial assistance, insurance matters, or other important services are not made solely by AI.

Where appropriate, AI-generated information may be reviewed by members of our team or trusted partners before being used to support our Services.

Training & Product Improvement

To improve our products and technology, we may use information—including de-identified or aggregated information—to develop, test, evaluate, and improve AI models and related technologies.

We do not knowingly use personal information to train third-party public AI models unless we have obtained your permission or are otherwise permitted by applicable law.

Accuracy & Limitations

While AI can help organize information and improve efficiency, it may occasionally produce incomplete or inaccurate results. AI-generated content should be viewed as informational and should not be relied upon as legal, financial, insurance, engineering, medical, or other professional advice.

You remain responsible for evaluating important decisions and consulting qualified professionals when appropriate.

Responsible AI

Theia is committed to using AI responsibly. We strive to develop and deploy AI systems in ways that are transparent, secure, fair, and aligned with our mission of supporting disaster survivors.

As our technology evolves, we will continue to evaluate our AI practices and implement appropriate safeguards designed to protect user privacy, security, and trust.

8. Security & Data Retention

Protecting the privacy and security of your information is fundamental to Theia's mission. We implement administrative, technical, and physical safeguards designed to protect the information we collect from unauthorized access, loss, misuse, alteration, or disclosure.

While no method of transmitting or storing information is completely secure, we continually evaluate and improve our security practices to help protect our users and our platform.

How We Protect Your Information

Our security program may include measures such as:

  • Encryption of data in transit using industry-standard protocols

  • Encryption of sensitive information where appropriate

  • Role-based access controls that limit access to authorized personnel

  • Multi-factor authentication for internal systems where appropriate

  • Security monitoring and logging

  • Regular software updates and vulnerability management

  • Vendor security assessments

  • Employee privacy and security training

  • Incident response and recovery procedures

We regularly review our security practices and update them as our platform and industry standards evolve.

Data Retention

We retain personal information only for as long as reasonably necessary to:

  • Provide our Services

  • Maintain your account

  • Support your recovery journey

  • Comply with legal, regulatory, tax, accounting, and contractual obligations

  • Resolve disputes

  • Enforce our agreements

  • Protect against fraud and abuse

Retention periods vary depending on the type of information, the services provided, applicable legal requirements, and legitimate business needs.

When personal information is no longer required, we will delete, anonymize, or securely de-identify it in accordance with applicable law and our internal data retention practices.

Account Deletion

If you choose to close your account, we will take reasonable steps to delete or de-identify your personal information, unless we are required or permitted by law to retain certain information for legal, regulatory, security, fraud prevention, or legitimate business purposes.

Certain de-identified or aggregated information may be retained indefinitely because it can no longer reasonably identify you.

Security Incidents

Although we work diligently to protect your information, no security system is completely immune from risk.

If we become aware of a security incident involving your personal information, we will investigate the incident, take appropriate steps to mitigate potential harm, and provide notifications as required by applicable law.

9. Your Privacy Rights

Theia believes you should have meaningful control over your personal information. Depending on where you live and applicable law, you may have certain privacy rights regarding the information we collect and process.

Access & Correction

You may request access to the personal information we maintain about you and request that inaccurate or incomplete information be corrected.

Deletion

You may request that we delete your personal information, subject to certain legal, contractual, operational, and regulatory obligations that may require or permit us to retain specific information.

Data Portability

Where required by applicable law, you may request a copy of certain personal information you have provided to us in a structured, commonly used, and machine-readable format.

Marketing Communications

You may opt out of receiving promotional emails by clicking the unsubscribe link included in our marketing communications or by contacting us directly.

Please note that even if you opt out of marketing communications, we may still send important non-promotional messages relating to your account, security, transactions, or recovery services.

Cookies & Tracking Technologies

Most browsers allow you to manage or delete cookies through your browser settings. You may also be able to manage certain tracking technologies through your device settings or other privacy preference tools.

Disabling certain cookies may affect the functionality of portions of our Services.

California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including the right to:

  • Know what personal information we collect, use, disclose, and retain

  • Request access to your personal information

  • Request deletion of your personal information

  • Request correction of inaccurate personal information

  • Request a copy of certain personal information

  • Opt out of the sale or sharing of personal information, where applicable

  • Limit the use of certain sensitive personal information, where applicable

  • Be free from unlawful discrimination for exercising your privacy rights

Theia does not sell personal information for monetary consideration. Certain uses or disclosures of personal information, including through cookies or similar technologies, may be considered a “sale” or “sharing” under applicable privacy laws even when no money is exchanged. Where applicable, we will provide consumers with the ability to exercise any required opt-out rights.

Other U.S. State Privacy Laws

Residents of certain U.S. states may have additional privacy rights under applicable state laws. We will honor qualifying requests in accordance with the laws applicable to your state of residence.

Exercising Your Rights

To exercise any applicable privacy rights, please contact us using the information provided at the end of this Privacy Policy.

To protect your privacy and the security of your information, we may request additional information to verify your identity before processing certain requests.

We will respond to verified requests within the timeframes required by applicable law.

10. Children's Privacy

Theia's Services are intended for individuals who are at least 18 years old and are not directed to children. We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected personal information from an individual under 18, we will take reasonable steps to delete it, unless retention is required or permitted by applicable law.

If you believe an individual under 18 has provided personal information to Theia, please contact us using the information provided at the end of this Privacy Policy.

Our Services are designed to support homeowners, property owners, and disaster recovery participants, and are not intended for use by children.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, legal or regulatory requirements, industry standards, or our privacy practices.

When we make material changes, we will update the "Last Updated" date at the top of this Privacy Policy and, where required by applicable law, provide additional notice through our website, your account, email, or other appropriate communication channels.

Your continued use of Theia's Services after an updated Privacy Policy becomes effective constitutes your acknowledgment of the revised Policy, except where applicable law requires additional consent.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, share, and protect your information.

12. Contact Information

If you have questions about this Privacy Policy, our privacy practices, or how we handle your personal information, please contact us using the information below.

Theia Helps, Inc.

Email: Hello@TheiaHelps.com

Website: www.theiahelps.com

If you are submitting a privacy rights request, please include enough information for us to verify your identity and understand your request. We may ask for additional information as necessary to protect your privacy and the security of your account.

We will respond to requests and inquiries within the timeframes required by applicable law.