Privacy Policy for CRE Data Extractor

Last updated: 6/30/2025

1. Introduction: SUMMIT & Shark, LLC ("we," "our," or "us") operates the CRE Data Extractor service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. By using CRE Data Extractor, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect:

• Personal Information: Email address, name, and account credentials
• Financial Documents: Rent roll images, PDFs, and other property financial documents you upload
• Generated Data: Text and data extracted from your uploaded documents
• Usage Information: How you interact with our service, including features used and time spent
• Technical Information: IP address, browser type, device information, and cookies
• Payment Information: Billing details processed through Stripe (we do not store credit card information)

3. How We Use Your Information:

• To provide and maintain our document extraction service
• To process your payments and manage your subscription
• To communicate with you about your account and our services
• To improve our service quality and develop new features
• To analyze usage patterns and improve our document extraction accuracy
• To provide customer support
• To comply with legal obligations

4. Data Retention: We retain your personal information and uploaded documents indefinitely to provide continuous service and improve our offerings. Your financial documents and extracted data are stored to allow you to access your processing history and to help us enhance our extraction accuracy over time.

5. Third-Party Services: We use the following third-party services that may collect information about you:

• Clerk: For user authentication and account management
• Stripe: For payment processing and subscription management
• Amazon Web Services (AWS): For cloud hosting and file storage
• Google Analytics: For website usage analytics and performance monitoring
• Railway: For application hosting and deployment

6. Data Sharing and Disclosure: We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With service providers who assist us in operating our service (under strict confidentiality agreements)
• When required by law or to protect our rights
• In connection with a business transfer (merger, acquisition, etc.)
• With your explicit consent

7. Cookies and Tracking: We use cookies and similar tracking technologies through Google Analytics and Clerk to enhance your experience and analyze service usage. You can control cookies through your browser settings, though some features may not function properly if cookies are disabled.

8. Data Security: We implement appropriate security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.

9. Your Rights: You have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information and uploaded documents
• Data Portability: Request your data in a portable format
• Withdraw Consent: Withdraw your consent for data processing where applicable

To exercise these rights, please contact us at support@credataextractor.com. We will respond to your request within 30 days.

10. Children's Privacy: Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us immediately.

11. Data Breach Notification: In the event of a data breach that affects your personal information, we will notify you via email within 72 hours of becoming aware of the breach, along with details about what information was involved and what steps we are taking to address the situation.

12. Changes to This Privacy Policy: We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Information: If you have any questions about this Privacy Policy or our data practices, please contact us at:

• Email: support@credataextractor.com
• Company: SUMMIT & Shark, LLC
• Location: Wisconsin, United States

14. Legal Basis for Processing: We process your personal information based on:

• Your consent when you create an account and use our services
• Contractual necessity to provide our services
• Legitimate business interests in improving our services
• Legal compliance requirements

This Privacy Policy is effective as of the date listed above and governs our collection, use, and disclosure of your information when using CRE Data Extractor.