Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account information — your name, work email address, firm/company name, and role, provided when you sign up.
• Deal and property data — the deal, rent roll, lease, commission, and comparison data you enter or upload, including any documents, spreadsheets, PDFs, or photos/screenshots you submit for analysis.
• Billing information — if you subscribe to a paid plan, payment details are collected and processed directly by our payment processor (Stripe); we do not store your full card number.
• Usage data — how you interact with the Service, such as which features you use and how often, to help us improve the product.
• Connected account credentials — if you choose to connect a Google account for Gmail sending or Google Sheets sync, we store an encrypted access token for that account. Connecting is entirely optional, and the Service works fully without it. See section 5 below.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service, including generating your AI-powered analyses and Excel reports.
• Send you account-related emails, such as a welcome email, onboarding tips, lease expiration alerts, and billing notices.
• Respond to your questions, feedback, and support requests.
• Monitor and improve the performance, security, and reliability of the Service.
• Comply with legal obligations.

3. AI Processing

When you run a deal analysis, upload a rent roll, or use another AI-powered feature, the relevant data (including any documents or images you upload) is sent to Anthropic's Claude API to generate your results. Per Anthropic's API terms, data submitted through the API is not used to train Anthropic's models. Your deal data stays yours.

4. Third-Party Service Providers

We rely on the following third-party providers to operate the Service:

• Supabase — authentication, database, and file storage.
• Anthropic — AI-powered analysis of deal, rent roll, and comparison data.
• Resend — delivery of transactional and account emails.
• Stripe — subscription billing and payment processing.
• Vercel — application hosting.
• Google — only if you connect a Google account, to send email through your own Gmail account or to sync data to your own Google Sheets. See section 5.

Each of these providers only receives the information necessary to perform their function and is bound by their own privacy and security practices.

5. Connected Accounts (Gmail & Google Sheets)

Broker Desk AI can optionally connect to your own Google account so that outreach emails send from your real address, and so that data can sync to a Google Sheet you own. Both are opt-in, and neither is required to use any part of the Service.

We request the narrowest permissions that make each feature work, and nothing more:

• Gmail — send only. We request permission to send email on your behalf. We do not request permission to read, search, or browse your mailbox, and the Service has no technical ability to do so. We cannot see messages you receive, your contacts, your labels, or anything already in your inbox.
• Google Sheets. We request access to Google Sheets in order to write your data into a spreadsheet you choose. We do not request access to Google Drive, so we cannot see or list your other files.

Access tokens for connected accounts are encrypted before they are stored. When you disconnect an account from Settings, we revoke the permission with Google and delete the stored token. You can also revoke access at any time directly from your Google account security settings.

Broker Desk AI's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use this data for advertising, and we do not sell it.

6. Data Storage & Security

Your data is stored using industry-standard security practices, including encryption in transit. Access to your account is protected by authentication, and your uploaded documents and generated reports are stored in access-controlled storage tied to your account.

7. Data Retention & Deletion

We retain your account and deal data for as long as your account is active. You can delete individual deals, rent rolls, leases, commissions, and comparisons at any time from within the Service. To request deletion of your full account and all associated data, contact us at the email address below.

8. Your Rights & Choices

You may access, update, or delete your data at any time through the Service, or by contacting us directly. You may also unsubscribe from non-essential emails using the link provided in those emails.

9. Cookies

We use essential cookies to manage your login session and keep you signed in. We do not use advertising or third-party tracking cookies.

10. Children's Privacy

The Service is intended for licensed real estate professionals and business use. It is not directed to, and we do not knowingly collect information from, anyone under the age of 18.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you directly.

12. Contact Us

If you have questions about this Privacy Policy or how your data is handled, contact us at contact.brokerdeskai@gmail.com.