Privacy Policy

Depending on how you use Acre, we may collect:

• Account information, such as email address, authentication data, profile settings, company or branding information, role, and acceptance of legal terms.
• Property and deal information, such as addresses, pricing, income, expenses, rent rolls, operating details, buy boxes, notes, market assumptions, and other information you enter or import.
• Uploaded and generated content, such as offering memoranda, leases, financial statements, inspection materials, environmental materials, screenshots, broker messages, extracted text, evaluations, AI outputs, due-diligence checklists, deal-chat messages, branded reports, and share links.
• Billing and subscription information, such as plan, billing interval, subscription status, Stripe customer and subscription identifiers, and payment history metadata. We do not store full payment-card numbers.
• Usage, device, and log information, such as IP address, browser type, device type, pages viewed, feature usage, quota usage, errors, security events, and diagnostic logs.
• Communications, such as support requests, legal or privacy requests, survey responses, and other messages you send us.

Acre uses third-party AI providers, including Anthropic and DeepSeek, to process content you submit for features such as evaluations, document extraction, listing extraction, broker-answer mapping, due-diligence checklists, comparisons, and deal chat. This may include property data, uploaded-document text, screenshots, messages, prompts, and related context needed to generate a response.

Acre does not use Customer Content to train its own foundation AI models. Third-party AI providers process information under their own commercial terms, privacy terms, and data-processing commitments, which may change over time. Where provider settings or agreements allow us to limit training, retention, or secondary use, we seek to use those protections.

AI outputs may be inaccurate or incomplete. Do not include highly sensitive personal information in prompts, uploads, screenshots, or chat messages unless you have a lawful basis and a genuine need to do so.

We may share information with:

• Infrastructure providers, such as Supabase for database, authentication, and storage, and Vercel for hosting and deployment.
• AI providers, such as Anthropic and DeepSeek, for AI processing.
• Payment and tax providers, such as Stripe, for checkout, subscriptions, invoices, taxes, payment methods, and billing support.
• Monitoring and communications providers, such as Sentry and email delivery providers, for error monitoring, security, transactional messages, and support.
• People you choose to share with, such as recipients of reports, exports, or shared deal-room links.
• Legal, safety, and compliance recipients when required by law, legal process, security needs, fraud prevention, rights enforcement, or a business transfer such as a merger, acquisition, financing, or sale of assets.

We retain information for as long as needed to provide the Service, maintain your account, comply with legal and tax obligations, resolve disputes, enforce agreements, maintain security, preserve audit records, and operate backups and logs.

You can export your account data and request deletion from the Privacy & Data section of Settings or by contacting legal@acreai.io. Deletion may remove active account data, but some information may remain in backups, logs, billing records, audit records, legal records, or security records. At this time, backups and logs may be retained indefinitely unless and until we adopt a shorter retention schedule.

We aim to offer practical privacy rights to all users, regardless of where they live. You may ask to access, export, correct, delete, or restrict certain processing of your personal information by using in-product tools or contacting legal@acreai.io. We may need to verify your identity before fulfilling a request.

Some requests may be limited by legal obligations, security needs, billing records, tax records, backups, audit logs, fraud-prevention needs, or the rights of others. We will not discriminate against you for exercising privacy rights.