Privacy Policy

Information we collect

• Account information.When you create an account we collect your name, email address, account type and role, and a securely hashed password. If you sign in with Google, we receive your basic Google profile (name, email address, and profile identifier) through Google’s OpenID Connect — we never see or store your Google password.
• Content you create. Portfolios, tours, saved and submitted listings, briefs, brochures, notes, and any files you upload (such as a firm logo or floor plans).
• Usage & device data. Basic technical information such as IP address, browser type, pages viewed, and actions taken, collected through our own server logs to operate and secure the service.
• Cookies. We use a single first-party session cookie to keep you signed in. On tour books and deal rooms you share, we record anonymous engagement (an unlinked visitor identifier and which items were viewed) so you can see what your clients looked at. We do not use third-party advertising cookies.

How we use your information

• Provide, operate, and maintain your account and the service.
• Authenticate you and keep the service secure.
• Generate the AI features you request — tour books, brochures, advisories, and search results.
• Send transactional email such as sign-in, sharing, and account notices.
• Process subscription payments and manage billing.
• Improve and troubleshoot the product.
• Comply with legal obligations and enforce our terms.

AI processing

To generate copy and analysis (tour-book narratives, brochure text, portfolio advisories, and search relevance), listing data and the inputs you provide may be sent to our AI provider, Anthropic, for processing. We do not use your personal information to train third-party models, and we do not sell your data.

Service providers we share with

We share information only with vendors that process it on our behalf to run the service:

• Supabase — database and file storage.
• Vercel — application hosting and delivery.
• Anthropic — AI generation and analysis.
• Mapbox and Google Maps — maps, geocoding, and travel times.
• Google — “Sign in with Google” authentication.
• Resend — transactional email delivery.
• Stripe — subscription payments (Stripe handles your card details; we never store full card numbers).

Each provider may only use the data to deliver its service to us. We do not sell your personal information. We may also disclose information if required by law or to protect our rights and users.

Content you share

Tour books and deal rooms you choose to share are accessible to anyone who has the link. Please share links only with people you intend to see that content. We record anonymous engagement on shared links so you can gauge client interest.

Data retention

We keep your account and content for as long as your account is active. You may ask us to delete your account and associated data at any time; we will do so within a reasonable period, except where we are required to retain certain records by law.

Your choices & rights

You can access and update most of your information from your account, and you can request a copy of your data, correction, or deletion by contacting us. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA; we honor those requests regardless of location.

Security

We protect your data with encryption in transit (HTTPS), hashed passwords, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to notify you of material incidents where required.

Children

SpaceFinder is a business tool intended for users 18 and older, and is not directed to children.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide additional notice where appropriate.

Contact us

Questions about this policy or your data? Email us at support@spacefinder.ai.