1. Introduction
Welcome to CREvaluator. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our commercial real estate analysis platform.
2. Information We Collect
2.1 Personal Information
When you create an account, we collect:
- Email address
- Full name
- Company name (optional)
- Password (encrypted)
2.2 Project Data
When you use our platform, we collect and store:
- Property information (addresses, descriptions, financial data)
- Financial models and assumptions
- Documents and images you upload
- Collaboration and sharing preferences
2.3 Usage Data
We automatically collect:
- IP address and device information
- Browser type and version
- Pages visited and features used
- Time and date of access
2.4 Payment Information
Payment processing is handled by Stripe. We do not store your complete credit card information. We only retain:
- Last 4 digits of your card
- Card brand and expiration date
- Billing address
- Transaction history
3. How We Use Your Information
We use your information to:
- Provide and maintain our service
- Process your transactions and manage subscriptions
- Send you service-related communications
- Respond to your inquiries and provide customer support
- Improve our platform and develop new features
- Detect and prevent fraud and security threats
- Comply with legal obligations
- Send marketing communications (with your consent)
4. AI-Assisted Features
CREvaluator uses AI to assist with project setup and data inference. When you use AI-assisted features:
- Your property descriptions and data may be processed by third-party AI services (Anthropic Claude)
- We do not use your data to train AI models
- AI suggestions are provided for your review and approval
- You maintain full control over all data entered into your projects
5. Data Sharing and Disclosure
We do not sell your personal information. We may share your information with:
5.1 Service Providers
- Supabase (database and authentication)
- Stripe (payment processing)
- Anthropic (AI assistance)
- Mapbox (geocoding and mapping)
5.2 Project Collaborators
When you invite users to collaborate on a project, they will have access to the project data according to their assigned role (viewer, editor, or admin).
5.3 Legal Requirements
We may disclose your information if required by law or in response to valid legal requests.
6. Data Security
We implement industry-standard security measures to protect your data:
- All data is encrypted in transit (TLS/SSL)
- All data is encrypted at rest
- Row-level security policies protect your data
- Regular security audits and updates
- Secure authentication protocols
7. Data Retention
We retain your information for as long as your account is active or as needed to provide you services. When you delete your account:
- Your personal data is permanently deleted within 30 days
- Project data you own is permanently deleted
- Shared project data remains accessible to other collaborators
- Billing records are retained as required by law
8. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Export your project data
- Object to data processing
- Withdraw consent
- Lodge a complaint with a supervisory authority
9. Cookies and Tracking
We use essential cookies to maintain your session and remember your preferences. We do not use third-party advertising or tracking cookies.
10. Children's Privacy
CREvaluator is not intended for users under 18 years of age. We do not knowingly collect personal information from children.
11. International Data Transfers
Your data may be processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers.
12. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of material changes by email or through our platform. Continued use of CREvaluator after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this privacy policy or our data practices, please contact us at:
Email: [email protected]