Privacy Policy

We collect information you provide directly, information generated as you use the platform, and limited information collected automatically:

• Account and contact information — name, work email, firm, and role, including details submitted through the request-access form.
• Deal and investor data you upload — offering memos, rent rolls, T-12s, financials, underwriting models, investor records, and related documents.
• Usage data — log data, device and browser information, and how you interact with the platform.
• Cookies and similar technologies — used to keep you signed in and to understand and improve the product.

We use information to provide, operate, secure, and improve the platform; to authenticate users and manage accounts; to process the documents and data you submit in order to deliver features such as screening, underwriting, and reporting; to communicate with you; and to comply with legal obligations.

We do not sell your personal information. We share information only as needed to run the service:

• Service providers (subprocessors) that host infrastructure, process data, or support the platform under contract.
• Legal and safety purposes, when required by law or to protect rights, safety, and the integrity of the service.
• Business transfers, in connection with a merger, acquisition, or sale of assets, subject to this Policy.

Your deal documents, financials, and investor records are not used to train AI models served to other customers.

For the deal and investor data you upload, your firm is the controller of that data and FirmSource acts as a processor on your behalf. Each firm's data is isolated to that firm. We process this data to provide the platform to you and according to your instructions and your customer agreement.

We retain information for as long as your account is active or as needed to provide the platform, and thereafter as required to meet legal, tax, accounting, or security obligations. You may request deletion of your data as described below, subject to those obligations.

We use administrative, technical, and organizational safeguards designed to protect information, including encryption in transit and at rest, firm-level data isolation, and role-based access controls. See our Security page for more detail. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the details below. If your data was provided to us by a firm using the platform, we may direct your request to that firm.

We may store and process information in the United States and other countries. Where required, we use appropriate safeguards for cross-border transfers of personal information.

The platform is intended for business use and is not directed to children. We do not knowingly collect personal information from anyone under 18.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice.