Effective date: July 5, 2026
This Privacy Policy describes how Bash Ventures, LLC ("we," "us," or "our") collects, uses, and protects information you provide when using our commercial real estate underwriting platform (the "Service"). Questions? Contact us at support@bashventuresllc.com.
Account information: When you request access, we collect your full name, email address, and company name.
Deal data: Financial model inputs you enter — property details, rent rolls, operating expenses, debt assumptions, and related figures — are stored in your organization's account and used solely to provide the Service.
Usage data: We collect basic server logs (IP address, request timestamps, HTTP status codes) for security and debugging purposes. We do not use third-party analytics trackers.
AI processing: When you use the AI assistant, OM abstractor, or narrative generator, your deal data and uploaded documents are transmitted to Anthropic, PBC for processing. Anthropic's Privacy Policy governs that processing. Under Anthropic's Commercial Terms of Service, Anthropic does not use the inputs or outputs we submit through the API to train its models.
Payment processing: Subscription payments are processed by Stripe, Inc. Your payment card details are transmitted directly to Stripe and are never stored on our servers. Stripe's Privacy Policy governs that processing.
Email delivery: Transactional emails (account approval, password reset, billing notifications) are delivered via Resend. Email addresses are shared with Resend solely for the purpose of message delivery.
Hosting: The application is hosted on Vercel, Inc. (US). Infrastructure-level logs may be retained by Vercel per their standard practices.
We do not sell your data. We do not share your deal data with other organizations using the Service.
We may create aggregated, de-identified data derived from use of the Service — for example, anonymized market and usage statistics — and use it for product improvement, research, and industry benchmarking. This data is stripped of anything that identifies you, your firm, or any individual deal, and we do not attempt to re-identify it or permit anyone else to do so.
This is the only exception to the commitments in Section 3: we still do not sell your data, and we do not share your identifiable deal data with other organizations using the Service.
Account and deal data is stored in Supabase (US-based infrastructure). Data is encrypted at rest and in transit. Access is protected by row-level security — each organization's data is logically isolated and cannot be accessed by other organizations.
We implement industry-standard security measures. No system is perfectly secure; if you believe your account has been compromised, contact us immediately.
We retain your account and deal data for as long as your account is active or as needed to provide the Service. If you close your account, we will delete your data within 30 days upon written request, except where retention is required by law.
You may request to:
To exercise these rights, email us at support@bashventuresllc.com. We will respond within 30 days.
The Service uses browser session storage to maintain your login session. We do not use advertising cookies or third-party tracking pixels.
If you are a California resident, you have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at support@bashventuresllc.com.
We may update this policy from time to time. We will notify active users by email before material changes take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.