Privacy Policy

Account info: your name, email, and password (or Google OAuth identifier) when you sign up.

Contract content: the purchase agreement PDFs you upload and the dates, parties, and details extracted from them.

Deal data: milestones, vendors, reminders, and notes you create or edit.

Usage data: basic logs (timestamps, error messages, IP) used to operate and debug the service.

We use your data to provide the service: parse contracts, generate timelines, send reminders, and let you share read-only timelines with parties you choose. That's it.

Supabase hosts our database and file storage. Contracts, deal data, and account info are stored there. Files are kept in a private bucket that requires authentication or a signed link to access.

We send extracted contract text to Anthropic (Claude API) to identify dates, parties, and other deal details. Anthropic doesn't train on data sent through their API. We don't send your contract to any other AI provider.

We use Resendto deliver transactional emails: account confirmations, password resets, and milestone reminders. We don't send marketing email during beta. Vendors only receive email if you explicitly enable vendor reminders for a milestone.

The app runs on Vercel, which handles request routing and serves the site. Vercel may log basic request metadata (IP, user agent) for security and operations.

We don't sell your data.We don't share it with advertisers or data brokers. The only people who see your deal data are:

• You
• Anyone you give a share link to (read-only timeline view)
• Vendors you assign to milestones with reminders enabled (they receive emails about that specific milestone)
• Service providers above (Supabase, Anthropic, Resend, Vercel) — acting only to deliver the service

All traffic is encrypted in transit (HTTPS). Stored data is encrypted at rest by Supabase. We use row-level security so users can only access their own deals. Service-role keys are kept server-side only.

You can delete individual deals from the timeline page. To delete your entire account and all associated data, email team@therefinedrealtor.com from the address on your account. We'll process the deletion within 7 days. Some operational logs (e.g. error logs) may be retained for up to 30 days for security purposes, then purged.

We use first-party session cookies to keep you logged in. We don't use advertising or third-party tracking cookies during beta.

TC Lite is not for users under 18 and we don't knowingly collect data from minors.

TC Lite is operated from the United States. By using the service, you consent to your data being processed in the US and other countries where our service providers operate.

We may update this policy during beta. Material changes will be announced via email or in-app.

Privacy questions? Email team@therefinedrealtor.com.