legal

Privacy Policy

Last updated: 13 August 2026

1. Summary

We collect as little as the Service can function on. We do not sell personal data. We do not use your inputs to train models.

2. What we process

• Briefs you submit. The text you type into a tool — parcel descriptions, title exceptions, lease terms — is transmitted to Anthropic’s API to generate a response, and returned to your browser.
• Analyses you generate. Signed in, they are stored in our database so you can retrieve them. Signed out, they stay in your own browser.
• Account data. Your email address and an account identifier. Authentication is passwordless: a one-time link is emailed to you.
• Published links. If you press Share, that analysis becomes readable by anyone holding the link. Do not publish confidential deal material.
• Operational logs. Standard request metadata (IP address, user agent, timestamp) for security and reliability.

3. What we do not do

We do not sell or rent personal data. We do not serve behavioural advertising. We do not use your submitted content to train any model, and our inference provider is instructed not to use API traffic for model training.

4. Processors

• Anthropic — model inference on submitted briefs.
• Vercel — hosting, edge delivery and request logs.
• Supabase — authentication and database storage, if this deployment is configured with it.

5. Retention

Saved analyses are retained until you delete them or delete your account. Browser-stored history is retained until you clear it — the “clear” control in the account panel removes it immediately. Published links persist until deletion is requested.

6. Your rights

Depending on where you live, you may have rights of access, correction, deletion, portability and objection under laws such as the GDPR or the CCPA. Write to privacy@acres.si to exercise them.

7. Security

Traffic is encrypted in transit with TLS. Database access is protected by row-level security so a signed-in user can read only their own records. API keys are held as server-side environment variables and are never exposed to the browser. Do not submit material you cannot afford to have disclosed.

8. Children

The Service is not directed to children under 16 and we do not knowingly collect their personal data.

9. International transfers

Our processors may store and process data in jurisdictions other than yours, including the United States, under appropriate safeguards.

10. Changes

Any change to this policy is posted on this page with a new date above.

11. Contact

privacy@acres.si