This Privacy Policy explains how CREautomated ("we," "us," "our") collects, uses, shares, and protects information when you use CREautomated (creautomated.com) or DealVerdict (verdict.creautomated.com) (together, the "Services").
We collect the minimum information necessary to provide the Services: your account details, the property and deal data you choose to enter or upload, and basic usage data needed to operate and improve the platform. We do not sell your personal information.
| Category | Examples |
|---|---|
| Account information | Name, email address, password (stored hashed), subscription tier |
| Deal & property data | Addresses, financial figures, rent rolls, offering memorandums, and other documents you upload or enter |
| Payment data | Handled entirely by Stripe — we receive only confirmation of payment and subscription status, never your full card number |
| Usage data | Pages visited, tools used, timestamps, IP address, browser/device type, referral source |
| Communications | Support emails and any other correspondence with us |
We do not sell your personal information. We share data only with the following categories of service providers, each acting on our behalf:
When you run a deal analysis, upload a document, or use any AI-powered tool, the relevant data is sent to our AI provider (Anthropic) to generate the output. We do not use your specific deal data to train AI models, and Anthropic's API does not train on data submitted through API calls by default.
Documents you upload (offering memorandums, rent rolls, T-12s, etc.) are processed to extract financial data and generate analysis. We retain uploaded documents only as long as necessary to provide the requested output and for the retention period described in Section 7, unless you choose to save a deal to your pipeline.
All payment processing is handled by Stripe, Inc. We never receive, see, or store your full credit card number, CVC, or other sensitive payment credentials. Stripe's use of your payment information is governed by Stripe's own Privacy Policy.
We retain account information for as long as your account remains active. Deal data and uploaded documents saved to your pipeline are retained until you delete them or close your account. Usage logs and analytics data are retained for up to 24 months for security and product improvement purposes. Upon account closure, we delete or anonymize your personal data within a reasonable period, except where retention is required for legal, billing, or fraud-prevention purposes.
We use industry-standard measures to protect your data, including encrypted connections (HTTPS/TLS), hashed password storage, restricted server access, and server-side API key protection so that third-party credentials are never exposed in client-side code. No system is completely secure, and we cannot guarantee absolute security of information transmitted to or stored by the Services.
Depending on your location, you may have the right to:
To exercise any of these rights, contact us at support@creautomated.com. We will respond within a reasonable timeframe consistent with applicable law.
We use essential cookies and local browser storage to keep you logged in and remember your tier/access status. We may use basic analytics tools to understand aggregate usage of the Services (e.g., which tools are used most). We do not use third-party advertising trackers or sell data to ad networks.
The Services are intended for business and investment professionals aged 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a minor, we will delete it promptly.
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. Continued use of the Services after changes take effect constitutes acceptance of the revised policy.
Questions about this Privacy Policy or how your data is handled can be directed to support@creautomated.com.