Privacy Policy

1. Overview

AssetForge Underwriter ("we," "our," "the Service") takes your privacy seriously. This policy describes what data we collect, how we use it, and your rights. We are committed to one core principle: your deal documents are never stored, logged, or used to train AI models.

2. Documents You Upload

Documents are transmitted over encrypted HTTPS connections to our servers and to Anthropic's Claude AI API (under their enterprise privacy terms). Neither we nor Anthropic use your deal data for AI training.

3. Information We Collect

Account & Payment: When you purchase a report or subscribe, Stripe collects your payment information. We receive only a Stripe customer ID, email address (if provided), and payment confirmation — never your full card details.

Usage Data: We collect standard server logs including IP addresses, browser type, pages visited, and error logs. This data is used to operate and improve the Service and is retained for up to 90 days.

Cookies: We use session cookies for functionality (e.g., remembering your tier selection) and analytics. We do not use advertising or tracking cookies.

4. How We Use Your Information

• To generate your underwriting report (documents are deleted immediately after)
• To process payments via Stripe
• To send transactional emails (purchase confirmations, refunds)
• To improve the Service based on aggregate usage patterns
• To comply with legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes.

5. Third-Party Services

• Anthropic (Claude AI): AI analysis provider. Documents are processed under Anthropic's API terms, which prohibit training on API data.
• Stripe: Payment processing. Stripe is PCI-DSS Level 1 certified.
• Vercel: Hosting and edge infrastructure.
• Supabase: Session and subscription data storage (no document content stored).

6. Data Security

All data is transmitted over TLS/HTTPS encryption. We follow security best practices including environment variable isolation for API keys, no logging of document content, and regular security reviews. While we take reasonable precautions, no internet transmission is 100% secure.

7. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access the personal information we hold about you
• Request deletion of your account and associated data
• Opt out of non-essential communications

To exercise any of these rights, contact privacy@assetforge.ai.

8. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect information from minors.

9. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email (if you have an account) or a notice on our website.

10. Contact

Privacy questions? Contact us at privacy@assetforge.ai.