Privacy Policy

1. Introduction

AcqFlo("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our deal pipeline management application.

2. Information We Collect

Account Information

• Email address
• Name (if provided)
• Profile information from OAuth providers (Google, Microsoft)

Deal Data

• Property names and addresses
• Financial information (asking prices, valuations)
• Notes and documents you upload
• Deal stage history and activity logs

Organization Data

• Organization name and settings
• Team member information
• Role and permission assignments

Outlook Add-in Data (AcqFlo — Send to Pipeline)

When you use the AcqFlo Outlook Add-in and click "Send to AcqFlo," we collect the following data from the email you are currently viewing:

• Email subject line
• Sender name and email address
• Email body (HTML content)
• File attachments (PDF, Excel, CSV, Word documents only)
• Internet message ID (for duplicate detection)
• Date and time the email was received

The add-in uses the ReadItem permission and only accesses the single email you explicitly choose to send. It does not scan, index, or access any other emails in your mailbox.

Usage Data

• Log data (IP address, browser type, access times)
• Device information
• Feature usage patterns

3. How We Use Your Information

• To provide and maintain our service
• To authenticate your identity
• To enable collaboration with your team members
• To store and organize your deal pipeline data
• To send transactional emails (invitations, notifications)
• To improve our service and develop new features
• To detect and prevent fraud or abuse

4. Third-Party Services

We integrate with the following third-party services to provide our functionality:

Supabase

We use Supabase for authentication and database services. Your data is stored securely in Supabase's infrastructure with row-level security policies.

Google Services

If you connect Google Drive, we request limited access to store and retrieve files you upload through AcqFlo. We only access files created by our application (using the drive.file scope). We also use Google Maps API for address autocomplete.

Microsoft Services

If you connect OneDrive or SharePoint, we request access to store and retrieve files you upload through AcqFlo in your Microsoft cloud storage. The AcqFlo Outlook Add-in reads email content you explicitly submit and transmits it to our servers for deal extraction.

Anthropic (AI Processing)

When you use AI-powered features (document extraction, email ingestion), the text content of your documents or emails is sent to Anthropic's Claude API for field extraction. This data is processed in real time and is not retained by Anthropic beyond the API request. Your organization controls the AI provider configuration.

Sentry

We use Sentry for error tracking and performance monitoring. Sentry receives error reports, stack traces, and basic request metadata when errors occur. It does not receive deal content, email bodies, or document text.

Vercel

We use Vercel for hosting and performance analytics. Vercel collects anonymized performance metrics (page load times, web vitals). No personal data or deal content is shared.

Government Data APIs

Property addresses are sent to public government APIs (Census, FEMA, EPA, BLS, USGS, etc.) to enrich deal records with demographics, flood zones, and market data. No personal information is shared with these services.

Email Delivery

We use third-party email delivery services for transactional emails such as team invitations and notifications. Only email addresses and notification content are shared with these providers.

5. Data Storage and Security

Your data is stored in secure cloud infrastructure with encryption at rest and in transit. We implement industry-standard security measures including:

• SSL/TLS encryption for all data transmission
• Row-level security policies in our database
• Secure authentication via OAuth 2.0
• Regular security audits and updates

6. Data Sharing

We do not sell your personal information. We may share your data only in these circumstances:

• With team members in your organization (based on permissions)
• With service providers who assist in operating our service
• When required by law or to protect our rights
• In connection with a merger, acquisition, or sale of assets

7. Your Rights

Depending on your location, you may have the following rights:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Export your data
• Withdraw consent for optional processing
• Disconnect third-party integrations

To exercise these rights, please contact us at privacy@acqflo.com.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide services. When you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

9. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising cookies.

10. Children's Privacy

AcqFlo is not intended for use by children under 13. We do not knowingly collect personal information from children under 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at: privacy@acqflo.com