Privacy Policy

This Privacy Policy explains how CRE Lease Abstraction (“we,” “us,” or “our”) collects, uses, discloses, and safeguards information when you use our website, applications, and services (collectively, the “Service”). It applies to all users of the Service.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. This Privacy Policy is incorporated into and subject to our Terms of Service.

Account Information. When you create an account, we collect information such as your name, email address, and a hashed password. If you sign in through a third-party provider (such as Google), we receive basic profile information from that provider.

Customer Content. We collect and process the lease documents and related materials you upload or submit to the Service (“Customer Content”), along with the abstractions, summaries, risk scores, and other output generated from them.

Billing Information. When you purchase a paid plan or credits, payment is handled by our third-party payment processor. We do not collect or store full payment card numbers on our systems; we may retain limited details such as billing contact, plan, and transaction records.

Usage and Device Data. We automatically collect certain technical information such as IP address, browser type, device information, pages viewed, and timestamps, to operate, secure, and improve the Service.

We use the information we collect to: (a) provide, operate, maintain, and secure the Service; (b) process your documents and generate abstractions and other output for you; (c) manage your account, process payments, and provide customer support; (d) communicate with you about your account, updates, and security matters; (e) detect, prevent, and address fraud, abuse, and technical issues; and (f) comply with legal obligations.

We may use aggregated or de-identified data that cannot reasonably be used to identify you or your Customer Content to analyze and improve the Service.

The Service uses artificial intelligence and automated processing to extract and analyze information from your documents. We do not use your Customer Content to train third-party or publicly available AI models, and we do not sell your Customer Content.

Your documents are processed to deliver the Service to you. Access to Customer Content is restricted to authorized personnel and service providers who need it to operate and support the Service.

We do not sell your personal information or Customer Content. We share information only in the following circumstances:

Service Providers. We share information with trusted third-party vendors who perform services on our behalf, such as cloud hosting and storage, database services, AI processing infrastructure, authentication, analytics, and payment processing. These providers are permitted to use the information only to provide services to us.

Legal and Safety. We may disclose information if required to do so by law or in response to valid legal process, or where we believe disclosure is necessary to protect our rights, your safety or the safety of others, investigate fraud, or respond to a government request.

Business Transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Privacy Policy.

We implement administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, or alteration, including encryption in transit, access controls, and hashed passwords. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain your account information and Customer Content for as long as your account is active or as needed to provide the Service. We may retain certain information as required to comply with legal obligations, resolve disputes, and enforce our agreements.

You may request deletion of your account and associated Customer Content by contacting us. We will delete or de-identify such information within a reasonable period, except where retention is required by law.

Depending on your jurisdiction, you may have rights to access, correct, update, port, or delete your personal information, or to object to or restrict certain processing. You may exercise these rights by contacting us using the details below. We will respond consistent with applicable law.

You may update your account information at any time from within the Service, and you may opt out of non-essential communications by following the unsubscribe instructions in those messages.

We use cookies and similar technologies to keep you signed in, remember your preferences, maintain session security, and understand how the Service is used. You can control cookies through your browser settings, though disabling them may affect the functionality of the Service.

The Service may link to or integrate with third-party websites and services that we do not control. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review their privacy policies.

The Service is intended for business and professional use and is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

We operate in the United States, and your information may be processed and stored in the United States or other countries where we or our service providers operate. By using the Service, you understand that your information may be transferred to jurisdictions that may have different data protection laws than your own.

We may update this Privacy Policy from time to time. When we make material changes, we will update the Effective Date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy.

If you have questions about this Privacy Policy or our privacy practices, or wish to exercise your rights, please contact us at [email protected]. The Service is operated by Kimfortress, LLC (d/b/a CRE Lease Abstraction).