Canonical page: https://sequoia-research.com/writing/1031-crowdfunding-reviews-2026-what-the-privacy-and-data-access-policies-say
Author: Sequoia Research
Published: 2026-10-18T04:57:41.330Z
Updated: 2026-10-18T04:57:41.330Z

# 1031 Crowdfunding Reviews (2026): What the Privacy and Data-Access Policies Say

## What Is This Article About?

This article reviews the public privacy, security, and access terms linked by 1031 Crowdfunding in October 2026. It separates statements about personal data from rules about viewing and keeping investment documents. Original examples show how to track file requests, who may receive the files, and open questions about access or storage. This is a reading of published policies, not a test of private accounts or the firm's security controls.

## Table of Contents

- [What This Public-Policy Review Establishes](#what-this-public-policy-review-establishes)
- [What the Published Pages Say](#what-the-published-pages-say)
- [Separate Personal Data From Offering Documents](#separate-personal-data-from-offering-documents)
- [Map the Recipient Before Sending a File](#map-the-recipient-before-sending-a-file)
- [Read Data-Sharing Purposes and Limits](#read-data-sharing-purposes-and-limits)
- [Distinguish Viewing, Downloading, and Sharing](#distinguish-viewing-downloading-and-sharing)
- [Ask What Retention Means for Each Record](#ask-what-retention-means-for-each-record)
- [Handle Corrections Without Erasing the History](#handle-corrections-without-erasing-the-history)
- [Keep Marketing Choices Separate From Account Instructions](#keep-marketing-choices-separate-from-account-instructions)
- [Test the Evidence Behind a Security Claim](#test-the-evidence-behind-a-security-claim)
- [Prepare for Changed Access and Authorized Helpers](#prepare-for-changed-access-and-authorized-helpers)
- [Build a Useful Privacy Follow-Up Record](#build-a-useful-privacy-follow-up-record)
- [FAQ](#faq)
- [About Sequoia Research](#about-sequoia-research)
- [Sources](#sources)

## What This Public-Policy Review Establishes

The public pages provide a starting point for questions about information handling. They do not show what happened to a particular investor's file. A policy can describe a planned process. A separate document or reply may give the details for a specific account.

This review read the privacy, security, and terms pages linked from the platform's public website on October 17, 2026. The dates printed on those pages are older than the review date. The word “2026” in this article's title identifies the review period. It does not turn the underlying pages into newly issued policies.

The website footer identifies 1031 Crowdfunding, LLC as the platform owner and describes broker-dealer services through Capulent, LLC. That distinction matters when asking who receives a form or holds a record. It does not prove that every item moves between those entities or that their data duties are identical. [1031 Crowdfunding website disclosures](https://www.1031crowdfunding.com/).

We did not open a private account, submit personal information, make a data request, or test a download behind a login. We did not inspect staff permissions, service-provider contracts, backups, incident logs, or the full set of agreements for an actual investor. No claim here depends on having performed those tasks.

Keep three kinds of evidence separate. A public statement is what a page says. A specific written reply concerns the question and account named in it. An observed result shows what occurred during a defined test. A reply about a download route is useful, but it is not the same as opening the correct saved file.

The aim is to turn broad language into questions that someone can answer. It is not to assign a privacy score from the length of a policy. A short clause might address an important point. A long page might still leave a specific retention period or access route unclear.

## What the Published Pages Say

The observations below are limited to the cited public pages. They are not a complete legal analysis of all terms that could apply. Ask for the current notice and agreements that govern your own relationship before relying on a general page.

### Privacy Policy: Collection, Sharing, and Correction

The privacy page displays February 7, 2022. It describes information from account forms, transactions, and others. It says employee access is limited by service needs and describes sharing with outside firms for requested transactions or account services. Those firms are described as subject to contractual security, confidentiality, and purpose limits. The page also addresses sharing permitted or required by law and sharing authorized by the user. It asks users to report inaccurate or changed information. In the reviewed page, we did not find a record-by-record retention timetable or a fixed deadline for a personal-data access request. That is a gap in this public-page review, not proof that the firm lacks an internal process. [Published privacy policy](https://www.1031crowdfunding.com/privacy-policy/).

### Terms: Document Use and Electronic Access

The terms page displays March 15, 2022. It describes a conditional personal-use license to download or print site content, with confidentiality and notices preserved. It also addresses electronic disclosures, continued disclosures for prior transactions, and conditions on withdrawing electronic consent while investments remain outstanding. Separate agreements may control specific parts of the service. Other clauses concern preserving user content and changes or interruptions to site access. These provisions do not supply a simple promise of permanent portal access or immediate deletion of every record. They also do not settle whether a particular private file may be sent to an outside adviser. [Published terms of use](https://www.1031crowdfunding.com/terms/).

### Security Page: Statements That Need Their Own Evidence

The security page displays March 15, 2022. It names Google Cloud storage and describes protections for stored and transmitted data, password handling, and records of password changes. These are the site's descriptions. This review did not verify the current system, test those controls, or inspect an independent assessment. A claim about protected storage leaves other questions open. Who can open a document? How long will it stay available? Can a saved copy be recovered? Ask those questions separately. [Published security page](https://www.1031crowdfunding.com/security/).

### What Remains Account-Specific

The useful result is a set of defined open questions. Which entity handles this request? Which notice applies to this type of information? What purpose requires the file? What access can an authorized helper receive? What happens to the record after the relationship changes?

Do not fill those gaps with assumptions about what most platforms do. A common industry practice is not evidence of this provider's practice. Nor does the absence of detail in one public page show that no further notice or process exists. The next step is to request the missing scope, not to guess the answer.

## Separate Personal Data From Offering Documents

An identity form and an offering memorandum may sit in the same online account, but they raise different questions. The identity form concerns the person or entity applying. The memorandum describes an investment. A signed subscription can contain both kinds of information. Start by identifying what each file contains and why it is needed.

Consider a fictional investor, Mara, reviewing a fictional Willow Gate DST. All names, records, responses, counts, and dates in the examples below are invented. They do not describe 1031 Crowdfunding's actual workflow or any investor's experience.

Mara makes a small inventory before sending material. She lists a contact form, an ownership document, an identity record, a funding document, a tax form, and an offering package. These are six record types. Their presence on her list does not mean all six are required for every investment or should be uploaded together.

For each item, she writes the question it is meant to answer. The ownership document may help identify who is applying. The funding document may relate to a particular payment task. The offering package helps her assess the proposed investment. If she cannot state the purpose, she asks the recipient before supplying more detail.

A file can serve several purposes. That does not mean each person needs the whole file. Mara's tax adviser may need a complete record that a general service desk does not need to troubleshoot a missing page. Whether a limited copy will work must be confirmed by the party relying on it. Do not redact a required form in a way that makes it inaccurate or unusable.

Keep the inventory itself modest. It can say “identity record received through approved route” without repeating a full identity number. A tracking sheet should not become a second pile of sensitive data merely because it is easier to search.

This distinction also helps when reading policy language. Ask whether a clause covers personal information supplied by the user, documents posted by an issuer, or content the user chooses to share. The same word, “information,” can cover different things in different sections. Copy the relevant definition into your private review notes, with its source, rather than assuming every clause covers every file.

## Map the Recipient Before Sending a File

A brand name is not enough to identify where a document is going. The request should make clear which legal entity needs it, what service it supports, and which route should be used. A person can work with several entities, so the sender's name alone may not resolve the role.

In Mara's invented case, she has three contacts: a platform support team, a securities representative, and the issuer's recordkeeping contact. She also has her own tax adviser. These are four roles, not proof of four separate databases or four authorized recipients for every item.

She asks the person requesting an ownership record to identify the entity receiving it and the reason. If the reply says another party will process it, she asks whether that party receives the full file or only specific fields. She records the answer as a stated process until she has evidence of the actual delivery.

A useful map includes the sender, immediate recipient, stated purpose, expected next recipient, and any unresolved point. Keep a direct upload separate from a message that says a file is available. An email notification may contain no document at all. Counting it as a second full-file transfer would misstate the record.

Use approved routes and verify them through known contact information. A reply to an old email thread can still contain an unexpected request. Ask why a new destination is needed before sending a sensitive file there. This is a practical verification step; it does not imply that any named provider has sent a false request.

A clear recipient map can reduce unnecessary copies. Suppose Mara initially planned to send the same full packet separately to four people. After clarification, the receiving firm gives her one approved intake route and tells her which staff will handle the request. That is a different plan, but the map alone does not prove fewer internal copies or better security. It shows only how her own planned submissions changed.

Keep authority separate from convenience. A family member who helps schedule calls is not automatically authorized to view tax forms or change bank instructions. Confirm the permitted role before granting access. The right answer may differ for each record and action.

## Read Data-Sharing Purposes and Limits

A policy may say that data can be shared. For planning, you also need to know why and how much. Ask what category of data is involved, what task the other party performs, and what limits apply to its use. The answer can differ between processing a transaction and sending marketing material.

Do not treat every outside recipient as the same kind of recipient. A firm acting on behalf of a service provider may have a different role from an issuer that needs its own investor record. A tax adviser chosen by the investor has another role. The legal duties of each party need their own review; this article does not decide them from a diagram.

Mara lists three proposed uses of one document in this example. These are to check the legal owner's name, prepare the issuer's account record, and answer a later support question. She can describe each use without assuming that consent to one use answers every question about the others.

If a reply uses a broad phrase such as “service partners,” ask which kind of service matters to your request. You may not need a list of every vendor to resolve a simple delivery problem. You do need enough information to understand where the file should go and which party can answer questions about it.

Sharing may be allowed under certain conditions. That does not show that a transfer took place. Keep the policy permission, the firm's stated plan, and the actual event in separate fields. That prevents a review from turning a possible use into an allegation about what was done.

Avoid treating a privacy question as a demand for public disclosure of another investor's information. A sample file or reply might include material that seems to belong to someone else. Stop using it and raise the issue through the approved route. The presence of that file is not permission to copy it into a public review.

The same care applies when discussing your own case online. A review can describe a process problem without showing full account numbers, signatures, bank instructions, or other people's details. Ask what can be safely and lawfully shared before using private documents as public evidence.

## Distinguish Viewing, Downloading, and Sharing

Access is a set of actions. Being able to view a document does not prove that you can download it. A download does not establish a right to send it to anyone. A permitted copy may still be the wrong version for the decision being made.

Mara tests these ideas in an invented six-item worksheet. She records three facts for each item. Can she view it? Does she have a usable saved copy? Has sharing that file with her chosen adviser been confirmed? These are observations and answers in the example, not product features tested here.

| Item | View confirmed | Usable saved copy | Adviser sharing confirmed |
|---|---|---|---|
| Offering memorandum | Yes | Yes | Yes |
| Offering supplement | Yes | Yes | Unconfirmed |
| Subscription draft | Yes | Yes | Yes |
| Signed subscription | Yes | No | Unconfirmed |
| Ownership record | No | No | Unconfirmed |
| Personal tax record | Yes | Yes | Yes |

Five items are viewable. Four have usable saved copies. Three have all three checks complete. Calling the file “five of six complete” would use the viewing count to answer a broader question. The worksheet does not say that the unconfirmed actions are prohibited; it says they have not been established.

The ownership record might not yet exist at this stage. If so, Mara should record that explanation and the expected next step. She should not quietly count the item as complete or remove it merely to improve the percentage. The need for the record depends on the transaction stage.

A saved copy should open outside the original session through an authorized method. Check its title, date, owner where relevant, and completeness. A web shortcut is not the same as the underlying file. A blank or partial download does not become usable because the system displayed a success message.

This test is narrower than a full document-retention review. It answers whether Mara has the particular copy she needs today. It does not show how long the provider will keep it or which staff can read it. The route for future updates may also differ.

## Ask What Retention Means for Each Record

“Kept on file” can mean several things. A record may remain in an active account, an archive, a backup, or a restricted legal record. Those locations may have different access routes. Ask what retention means for the record and purpose you care about.

A useful answer identifies a starting event as well as a length of time. Is the clock tied to collection, account closure, the last transaction, a later correction, or something else? A number without its starting event is hard to use. Do not supply the event yourself because it seems reasonable.

For illustration only, suppose a fictional provider describes a seven-year archive period after account closure. An account closing June 30, 2026 would reach seven years on June 30, 2033. A reader who instead starts from a June 30, 2021 opening date would mark June 30, 2028, five years earlier. These dates demonstrate the importance of the trigger. They are not the retention policy of 1031 Crowdfunding or a legal deletion schedule.

Ask about exceptions as well. A stated minimum period may not be a promise that the record is deleted at its end. A request to delete data may need review of the record type and applicable duties. Get advice on a disputed right rather than assuming that one general policy sentence decides it.

The Financial Industry Regulatory Authority (FINRA) requires member firms to make and keep required records under Rule 4511. Its at-least-six-year provision applies to FINRA records for which the relevant rules specify no other period. That is not one period for every item. Broker rules do not all apply to a separate website operator. The rule also does not promise six years of client portal access. [FINRA Rule 4511](https://www.finra.org/rules-guidance/rulebooks/finra-rules/4511).

Your own record needs can differ from a firm's retention duties. The Internal Revenue Service (IRS) links property-record needs to the tax limitations period for the year of disposal. Its guidance also covers keeping old- and new-property records after a nontaxable exchange. Ask your tax adviser what applies to your facts. Do not use an account closing date as an automatic date to destroy tax support. [IRS record-retention guidance](https://www.irs.gov/businesses/small-businesses-self-employed/how-long-should-i-keep-records).

## Handle Corrections Without Erasing the History

A correction request should name the field and record. It should include the evidence needed to support the change. “My profile is wrong” may be enough to start a conversation, but it is too broad to close the issue. A profile, a signed agreement, and a tax document may need different handling.

In a separate invented case, Mara's mailing address changed. Her profile now shows the new address, but an older signed form keeps the address that was accurate when it was signed. That difference is not automatically an error. She asks whether the current delivery record has been updated and whether any later form needs correction.

Changing a current field also does not prove that every outside recipient has received the update. If the issuer sends reports separately, Mara asks whether it has the new address or needs a direct authorized update. She should not assume that one successful edit updates every party's records.

Keep a simple sequence: request sent, identity or authority checked, correction accepted, affected record changed, and result checked. Some steps may occur together. Some may not apply. Mark what is known without inventing an internal process from the order of visible emails.

Suppose the request is sent October 5, accepted October 7, and the corrected file becomes available October 10. Mara checks it October 12. That is seven calendar days from request to her check, but only five from acceptance. These invented times are not a firm service standard or a legal deadline. They also do not show that the firm took seven days to make the correction.

Retain the correction's scope. If one field changed, do not label the whole earlier document false. If a file is superseded, note which version now applies and for what purpose. Preserving the explanation can matter when a later reviewer asks why two copies differ.

## Keep Marketing Choices Separate From Account Instructions

A request to stop sales messages has a narrow goal. Closing a login, ending consent to online notices, correcting data, and deleting a record are separate requests. Combining all of those into “remove me” may leave both sides unclear about the intended result.

Write the desired outcome in ordinary language. For example, a fictional investor might want promotional emails stopped while still receiving records for an existing investment. That states a choice about messages. It does not instruct anyone to sell the investment or erase its ownership record. Ask which route handles that preference and which notices must still be sent.

Before asking to close an account, identify what the account does. It may be a website login, a brokerage relationship, or an issuer's record of ownership. One action may affect access without changing the investment itself. Do not infer that closing one service ends every other relationship.

A deletion response should also have a defined scope. “Your profile was removed” does not show that all transaction records, backups, messages, or third-party copies were erased. It may be a complete answer to a profile request but an incomplete answer to a broader question. Ask what was removed and what remains under a stated retention reason.

This is not a claim that every requested deletion must occur or can be refused. Rights and exceptions depend on the relevant law, entity, record, and facts. The practical aim is to avoid giving or receiving an instruction whose meaning is unclear.

Keep a copy of the request and reply in your own authorized records. Do not include more sensitive material than is needed to identify the issue. If identity verification is required, use the established process rather than sending a full packet to a new address without checking it.

## Test the Evidence Behind a Security Claim

A privacy statement describes information handling. A security statement describes protections. An access test shows what an authorized person could do in a defined setting. None of these alone is a complete security assessment.

Ask questions tied to the action you need. How is access granted to an authorized helper? How is it removed? What happens if a device or email account is lost? How does a user report an unexpected access event? These are more useful than asking whether the system is “fully secure,” which invites an answer too broad to test.

The Securities and Exchange Commission (SEC) issued an online-account bulletin on April 23, 2026. It discusses account safeguards, alerts, caution with links, and protecting sensitive documents, including cloud copies. It recommends reviewing a cloud provider's security policies. These are staff suggestions, not certification of a particular platform or proof that a specific control is in place. [SEC online-account security bulletin](https://www.investor.gov/introduction-investing/general-resources/news-alerts/alerts-bulletins/investor-bulletins/updated-2).

For a private file, a useful authorized check might be that the correct person can obtain the intended document through the approved route. That does not justify testing another person's access, guessing hidden links, or probing controls without permission. This article performed none of those actions.

A technical label needs context. Protection during transmission concerns data moving between systems. Protection while stored concerns another stage. Neither label alone tells you which staff can read the file or whether the right version was sent. Have a qualified specialist assess technical claims when the decision requires that work.

Do not treat an old page date as proof that the system is outdated. Do not treat a recently visited page as proof that the system was recently tested. The document date, review date, and date of any actual assessment belong in separate fields.

## Prepare for Changed Access and Authorized Helpers

Plan for a change in contact person, device, or legal authority before it becomes urgent. The person who helped make an investment may not always be available. A spouse, trustee, or professional may need access later, but the required authority depends on the task and account.

Mara's invented planning file names the party to contact for access help and the records used to establish authority. It does not contain her password. Sharing credentials can blur who acted and what they were allowed to do. Ask for the provider's proper process for a separate authorized user or representative.

Define actions as well as readers. Someone permitted to see a quarterly report may not be permitted to change an address, direct payments, or submit a transaction. A general description such as “full help” is too vague to settle those differences.

When access ends, record the scope of the change. Did a user lose a login, did a representative's authority end, or did a particular document become unavailable? A saved copy already shared with an authorized person may require separate handling. Do not assume one change removes every copy or cancels every prior permission.

Keep a small personal recovery plan for records you are entitled to retain. Identify where the copies are, how an authorized person can recover them, and which version should be used. Test a sample through the approved method. A folder name that says “backup” does not establish that the intended file opens.

## Build a Useful Privacy Follow-Up Record

A written follow-up should link each open question to an item and purpose. It should name the party that needs to answer. It should make the answer easier to verify, rather than collect reassuring phrases. Separate a stated policy from an account-specific reply and from a completed event.

Mara chooses eight questions for her invented review. Three have clear scoped answers. Two have conditional answers that need another step. Two remain unanswered. One has conflicting replies. These categories are exclusive in this example, so they account for all eight questions.

| Review status | Initial count | Meaning in this example |
|---|---:|---|
| Scoped answer recorded | 3 | The stated question has an answer with a source |
| Conditional answer | 2 | A named condition or next step remains |
| No answer recorded | 2 | The file does not yet establish the answer |
| Conflicting replies | 1 | Replies differ on the same defined point |

These are question counts, not a privacy grade. Three answered questions could be minor while one unresolved question determines whether Mara is willing to send a file. A percentage would hide that difference unless the reader also saw the substance.

Suppose one conditional question and one unanswered question later receive clear scoped answers. The counts become five answered, one conditional, one unanswered, and one conflicting. All eight questions remain in the record. A reply has improved coverage, but no security test or completed deletion is implied.

A useful conclusion names the next action. Mara might still need the applicable retention trigger, the route for an authorized helper, or clarification of two conflicting replies. She can preserve those limits while acknowledging the answers she has. The result is a practical decision record, with enough detail for another person to continue the work.

## FAQ

### Does the 2026 review date mean the policies were issued in 2026?

No. The review date tells you when this article inspected the public material. The pages' displayed dates are listed separately. Neither date proves when a technical control was installed or last tested. Ask for the current notice that applies to the service you use.

### Does a privacy policy prove that a platform is secure?

It provides statements to assess, not a complete test result. Each claim needs its own evidence. That applies to security controls, staff access, service-provider duties, and how incidents are handled. A public-page review cannot certify the system or determine what happened to a particular file.

### Can I assume a downloaded offering document may be shared with my adviser?

Check the applicable permission and the intended recipient. Viewing, keeping a personal copy, and sharing are separate actions. Private material may have conditions. Use an authorized route and obtain clarification where needed; do not infer broad permission from a visible download control.

### Is there one retention period for all investment records?

No single period is established by this article. The entity, record type, starting event, and applicable duties matter. A retention minimum is also different from a promised deletion date. Your tax or legal record needs may continue after an online account closes.

### Does changing my profile correct every investment document?

Not necessarily. A current contact field, an older signed record, an issuer record, and a tax document may serve different purposes. Identify the error and affected files, request the proper correction, and check the result. Preserve an explanation of any version that was replaced.

### Does stopping marketing messages cancel an investment or erase its records?

Do not treat those as the same instruction. State the communication preference you want changed and ask what remains required for the existing relationship. Account closure, electronic delivery, deletion, and ownership each need their own scope and confirmation.

### What should I do when the public page does not answer my question?

Name the missing detail and request the applicable notice or a specific written answer through the approved contact route. Keep the question open until the reply addresses it. A missing public detail is not proof of misconduct, and a broad assurance is not proof that the particular action has been completed.

## About Sequoia Research

Sequoia Research, LLC provides independent research on DSTs and other real estate investment offerings. This educational article helps readers distinguish published policy statements, account-specific evidence, and unresolved questions. It does not audit security systems or determine personal legal rights.

## Sources

- [1031 Crowdfunding public website](https://www.1031crowdfunding.com/), footer disclosures read October 17, 2026; platform and broker roles.
- [1031 Crowdfunding privacy policy](https://www.1031crowdfunding.com/privacy-policy/), displayed February 7, 2022; collection, service sharing, correction, and public-page retention scope.
- [1031 Crowdfunding terms](https://www.1031crowdfunding.com/terms/), displayed March 15, 2022; selected document-use, disclosure, preservation, and access provisions.
- [1031 Crowdfunding security page](https://www.1031crowdfunding.com/security/), displayed March 15, 2022; provider-described controls, not independently tested here.
- [FINRA Rule 4511](https://www.finra.org/rules-guidance/rulebooks/finra-rules/4511), current text inspected October 17, 2026; member recordkeeping and the conditional minimum period.
- [IRS record-retention guidance](https://www.irs.gov/businesses/small-businesses-self-employed/how-long-should-i-keep-records), current official guidance inspected October 17, 2026; property-record and other retention needs.
- [SEC online-account security bulletin](https://www.investor.gov/introduction-investing/general-resources/news-alerts/alerts-bulletins/investor-bulletins/updated-2), April 23, 2026; staff guidance on account and document safeguards.

All public sources were read during the October 17, 2026 research cycle. The examples are original illustrations. No private account, actual data request, internal retention system, or technical control was tested.


## Related Reading and Tools

- [Best DST 1031 Exchange Companies (2026): What a Meaningful Comparison Should Include](https://sequoia-research.com/writing/best-dst-1031-exchange-companies-2026-what-a-meaningful-comparison-should-include)
- [Delaware Statutory Trust 1031 Reviews (2026): What Exchangers Should Check Before Relying on Them](https://sequoia-research.com/writing/delaware-statutory-trust-1031-reviews-2026-what-exchangers-should-check-before-relying-on-them)
- [DST Due Diligence: Source-Linked Diligence Binder](https://sequoia-research.com/writing/dst-due-diligence-source-linked-diligence-binder)