Privacy Policy

01What we collect

Information you give us: your name, work email, firm and role when you book a call, send a deal for a free first-deal review, email us or are given a login.

Deal data clients upload: offering memorandums, T-12s, rent rolls and Excel models, plus each firm's buy box, assumptions and the outputs DealBasis creates. Rent rolls can include tenant names and unit details.

Account and security data: login email addresses, sign-in records and the Anthropic API key a firm connects, which we store encrypted.

Website data: when you visit, our hosting provider records standard server logs such as IP address, browser type, pages requested and time. This website does not currently use cookies, analytics, advertising pixels or tracking scripts. If that changes, we will update this policy first.

02How we use it

To run DealBasis for your firm: read your documents, produce your outputs, keep your workspace secure and give you support.

To reply to you, run calls and free first-deal reviews, send account and service emails, and bill for the service.

To keep the service safe and working, and to meet legal obligations.

We do not sell personal information, do not share it for targeted advertising, and do not use deal documents or outputs to train AI models.

03Confidentiality of deal documents

Each firm has its own private workspace, separated from every other firm in the database. Documents and outputs are visible only to that firm's users. Our founder, the only person with technical access to client data, opens a firm's documents only to fix a problem the firm reported or to look into a security issue.

For the personal information inside deal documents, such as tenant details in a rent roll, we act as a service provider to the firm that uploaded it and process it only on that firm's instructions.

04AI processing

DealBasis sends document content to Claude, an AI model made by Anthropic, to read it and write outputs. Licensed firms use their own Anthropic account from day one; only free first-deal reviews run on ours. Under Anthropic's commercial terms, this content is not used to train its models.

Anthropic keeps API inputs and outputs under its own policy, generally for up to 30 days; content its automated safety systems flag can be kept for up to 2 years. We have no zero-retention arrangement with Anthropic, and AI processing is not limited to the United States.

05Who processes data for us

We use a small number of service providers, each bound to protect the data and use it only to provide its service to us:

Anthropic: AI processing of document content and outputs. Supabase: database, logins and file storage. Vercel: website and application hosting; documents pass through it in memory while being processed. Cloudflare R2: backup copies of uploaded files. Resend: login and account emails; receives email addresses, never documents.

No other tool, including any analytics, error-tracking or email tool, receives deal documents. We give licensed clients 30 days' notice before adding a service provider that handles their data. Our payment and booking providers process only the payment and contact details you give them.

We may also disclose information when the law requires it, to protect our rights or users' safety, or to a buyer or successor if our business is transferred, under the same protections. Where the law allows, we tell the affected client first.

06Where data is stored

Client workspaces and uploaded files are stored with our database provider in the United States. As noted above, AI processing by Anthropic is not limited to the United States.

07How long we keep it

Client data is kept while the firm's license is active and can be exported at any time. After a firm cancels, we delete its workspace data from our live systems 30 days later, and backups age out within 30 more days, so it is gone from our systems within 60 days.

For a free first deal that does not become a license, we delete the uploaded files and briefs 30 days after the results call.

Contact and billing records are kept as long as needed for the relationship and for tax and legal requirements. Anthropic's copy follows Anthropic's policy described above.

08Security

Our providers encrypt data in transit and at rest. Firms are separated in the database, sign-in requires multi-factor authentication, and each firm's AI key is stored encrypted. No system is perfectly secure. If a breach affects a client's data, we will tell that client within 72 hours of becoming aware of it: what happened, what data was affected and what we are doing about it.

09Your choices and rights

You can ask us to tell you what personal information we hold about you, correct it, delete it or give you a copy, by emailing support@dealbasis.ai. We will answer promptly and within the time the law requires, and may need to confirm your identity. Depending on where you live, you may have additional rights under local law, and you will not be treated differently for using them.

If your information is in a document a client uploaded, such as a tenant in a rent roll, we will pass your request to that client, because they control that data.

10Children

DealBasis is a business service and is not directed at anyone under 18. We do not knowingly collect information from children.

11Changes

We may update this policy. The date at the top shows the latest version, and we will tell licensed clients about material changes before they take effect.

12Contact

Email support@dealbasis.ai or write to Prompted Ai LLC, 30 N Gould St Ste R, Sheridan, WY 82801.