Privacy Policy | DeepBreadth

DeepBreadth LLC (“DeepBreadth,” “we,” “us,” or “our”) operates the DeepBreadth platform, including the web application at deepbreadth.com, mobile applications, APIs, and AI-powered agent systems (collectively, the “Service”). This Privacy Policy describes how we collect, use, disclose, and protect information in connection with the Service.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, you should not use the Service.

1. Information We Collect

1.1 Information You Provide Directly

Account Information: When you register, we collect your name, email address, phone number, organization name, job title, and billing information.
Deal and Contact Data: Property owner contact information, deal financials, underwriting data, pipeline activity, notes, and other data you input or import into the platform.
Documents: Files you upload, import from cloud storage providers (OneDrive, SharePoint, Google Drive), or generate within the Service, including financial documents, offering memoranda, and due diligence materials.
Communications: Emails sent and received through connected email accounts (Gmail, Outlook), SMS messages sent through the platform, and conversations with the AI assistant.
Campaign Content: Email templates, drip campaign configurations, and outreach materials you create.
Feedback and Support: Information you provide when contacting us for support or submitting feedback.

1.2 Information Collected Automatically

Usage Data: Pages viewed, features used, actions taken, session duration, tool interactions, and navigation patterns within the Service.
Device and Browser Information: IP address, device type, operating system, browser type, screen resolution, and unique device identifiers.
Location Data: Approximate location derived from IP address. If you use mobile features that require precise location (such as nearby property search), we collect GPS coordinates only with your explicit permission.
Log Data: Server logs, error reports, API call metadata, and performance metrics.
Agent Interaction Data: AI assistant conversations, tool invocations, agent session metadata, and interaction patterns with the AI system.

1.3 Information from Third-Party Sources

Property and Ownership Data: Parcel records, ownership information, and property details from data providers such as Regrid and Reonomy.
Contact Enrichment: Publicly available contact information from sources such as Whitepages and BatchData.
Market Data: Interest rates, economic indicators, and market conditions from public data sources such as the Federal Reserve Economic Data (FRED) API and Census Bureau.
Cloud Storage Providers: Metadata and file contents from connected OneDrive, SharePoint, or Google Drive accounts, as authorized by you.
Email Providers: Email metadata and content from connected Gmail or Outlook accounts, as authorized by you through OAuth.
Payment Processors: Transaction and subscription information from Stripe.

2. How We Use Information

2.1 Providing and Operating the Service

Facilitating deal sourcing, underwriting, pipeline management, and CRM functionality.
Processing and displaying property data, financial analyses, and market intelligence.
Enabling email and SMS communications on your behalf.
Powering AI assistant features, including deal briefings, contact prioritization, document extraction, and outreach assistance.
Managing your account, subscription, and billing.

2.2 Improving and Developing the Service

We use aggregated and anonymized usage data, interaction patterns, and behavioral signals to understand how the Service is used and to improve its functionality. This includes:

Training and improving AI models and algorithms that power document extraction, deal scoring, contact prioritization, and other intelligent features of the Service.
Analyzing deal outcomes, outreach response rates, and user interaction patterns to improve the accuracy and relevance of AI-generated recommendations.
Using extraction verification feedback and field change audit data to improve document processing accuracy.
Developing new features and capabilities based on usage patterns and user needs.

When we use your data to improve the Service, we apply appropriate safeguards including aggregation, anonymization, and de-identification where feasible. We do not sell your raw deal data or contact information to third parties.

2.3 Analytics and Performance Monitoring

Monitoring Service performance, uptime, and error rates through tools such as Sentry, PostHog, Vercel Analytics, and Betterstack.
Generating platform-level analytics on feature adoption, usage trends, and system health.
Measuring and reporting on prospecting effectiveness, pipeline velocity, and other operational metrics for your organization.

2.4 Communications

Sending transactional notifications (account confirmation, password resets, billing receipts).
Delivering push notifications related to your deals, tasks, and platform activity.
Providing product updates, feature announcements, and service-related communications.

2.5 Security and Compliance

Detecting and preventing fraud, abuse, and unauthorized access.
Enforcing our Terms of Service and other policies.
Complying with legal obligations and responding to lawful requests.

3. How We Share Information

We do not sell your personal information. We share information only in the following circumstances:

Within Your Organization: Your data is accessible to other members of your organization on the platform, subject to role-based access controls configured by your organization administrator.
Service Providers: We use third-party service providers to operate the Service, including Supabase (database and authentication), Vercel (hosting), Stripe (payments), Twilio (SMS), Anthropic (AI processing), OpenAI (text embeddings), Mapbox (geocoding and maps), Precisely (demographics), Expo (push notifications), and Sentry/PostHog/Betterstack (monitoring and analytics). These providers access your data only as necessary to perform services on our behalf and are contractually obligated to protect it.
Third-Party Data Providers: When you use features that query external data sources (such as property lookups or contact enrichment), we transmit the minimum necessary query parameters (such as an address or name) to those providers. These providers have their own privacy policies governing their use of data.
Connected Accounts: When you connect email, calendar, or cloud storage accounts, data flows between the Service and those providers as authorized by you through OAuth. We do not share your connected account credentials with any other party.
Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect rights, safety, or property.
Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.
With Your Consent: We may share information with third parties when you have given us explicit consent to do so.

4. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. After account termination, we retain certain data as follows:

Account and billing records are retained for the period required by applicable tax and financial regulations.
Aggregated and anonymized data derived from your use of the Service may be retained indefinitely for analytics and service improvement purposes.
Backup copies may persist in our systems for a reasonable period following deletion.
We will delete or anonymize your personal data upon written request, subject to our legal retention obligations.

5. Data Security

We implement commercially reasonable technical and organizational measures to protect your information, including:

Encryption of data in transit (TLS) and at rest.
Multi-tenant data isolation through row-level security policies ensuring each organization can access only its own data.
OAuth 2.0 authentication for third-party integrations, with encrypted token storage.
Role-based access controls within organizations.
Rate limiting and abuse detection on API endpoints.
Regular security monitoring through error tracking and uptime monitoring services.

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Rights and Choices

Access and Portability: You can access and export your data through the Service at any time. You may request a copy of your personal data by contacting us.
Correction: You can update your account information and data directly within the Service.
Deletion: You can request deletion of your account and associated data by contacting us or using the account deletion feature in Settings. Organization administrators can delete their entire organization and all associated data.
Email and SMS Opt-Out: You can disconnect email and SMS integrations at any time through Settings. You can unsubscribe from marketing communications using the link in any marketing email.
Push Notifications: You can disable push notifications through your device settings or within the mobile application.
Location Data: You can revoke location permissions through your device settings at any time.
Connected Accounts: You can disconnect cloud storage, email, and calendar integrations at any time through the Integrations settings page. Disconnecting will stop new data synchronization but will not automatically delete previously imported data.

To exercise any of these rights, contact us at privacy@deepbreadth.com.

7. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete personal information, the right to opt out of the sale or sharing of personal information (we do not sell personal information), and the right to non-discrimination for exercising your privacy rights. To exercise these rights, contact us at privacy@deepbreadth.com.

8. International Data Transfers

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer. We take steps to ensure that your data receives an adequate level of protection in the jurisdictions in which we process it.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

10. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third-party services, and we encourage you to review their privacy policies independently.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the effective date. For significant changes, we may also notify you by email. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

DeepBreadth LLC
Email: privacy@deepbreadth.com