Privacy Policy

Last updated: July 2, 2026

1. Introduction

CRE10x Software, Inc. ("CRE10x," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at crexsoftware.com and use the CRE10x platform (collectively, the "Service").

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Personal Information You Provide

When you create an account or use the Service, we may collect:

  • Account Information: Full name, email address, company name, and password (authentication is handled by Firebase Authentication).
  • Communications & Feedback: Any messages, bug reports, ideas, or support requests you send us — including feedback submitted in-app, which we store with your account email to triage and fix issues.
  • No payment information: The platform is free to use and we do not collect payment card or billing details.

2.2 Documents and Data You Upload

When you use our AI-powered tools, you may upload documents including but not limited to lease documents, financial reports, and other commercial real estate files. These documents may contain sensitive business and financial information, including tenant names, lease terms, and financial figures. As described in Section 4, uploaded documents and AI results are processed in memory only and are never stored.

2.3 Your Anthropic API Key

The tools run on your own Anthropic API key. The key is stored only in your browser (local storage) and is transmitted with each request solely to run the model on your behalf. We do not store your API key on our servers, log it, or share it. AI usage is billed to you by Anthropic directly.

2.4 Usage Logging

To operate and improve the Service, we record basic usage events in our database (Google Firestore), associated with your account:

  • Sign-in events: your user ID, email, sign-in method, and timestamp.
  • Tool runs: which tool was used, timestamp, success or failure (and error type), and the approximate size of the file processed.

We do not log document contents, extracted results, file names, or your API key.

2.5 Automatically Collected Information

  • Device Information: Browser type, operating system, device type, and IP address.
  • Cookies: We use essential cookies to keep you signed in and remember preferences.

2.6 Information from Third Parties

We may receive information about you from third-party services you use to sign in (Google via Firebase Authentication).

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: To provide, operate, and maintain the CRE10x platform, process your uploaded documents through the AI engine, and deliver results.
  • Account Management: To create and manage your account and authenticate your identity.
  • Product Improvement: To understand how the Service is used (via the usage logging in Section 2.4), triage the feedback you submit, identify bugs, and improve our tools.
  • Marketing Communications: If you opt in at sign-up, we will send you product updates, feature announcements, tips for using CRE10x tools, promotional offers, and other marketing communications. You may opt out at any time (see Section 7).
  • Customer Support: To respond to your inquiries, troubleshoot issues, and provide technical assistance.
  • Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.
  • Security: To detect, prevent, and respond to fraud, abuse, security incidents, and technical issues.

4. How We Handle Your Documents

We understand that the documents you upload contain sensitive commercial real estate data. We commit to the following:

  • In-Memory Processing Only: Uploaded documents are processed entirely in-memory. They are sent to our AI engine (powered by Anthropic's Claude API) solely for the purpose of performing the analysis you requested. Documents are never saved to any database, file system, or cloud storage.
  • No Storage: CRE10x does not persistently store your uploaded documents or AI-generated results. Once processing is complete and you download your Excel export, the data exists only on your local device. If you close your browser or navigate away without exporting, the data is permanently gone.
  • No Training: Your uploaded documents are NOT used to train, fine-tune, or improve any AI models. They are used only to process your specific request.
  • Encryption in Transit: All documents are encrypted in transit (TLS 1.2+) while being sent to the AI engine for processing.
  • Excel Export Only: Results are delivered exclusively as downloadable Excel (.xlsx) files. There is no document history, saved results, or file library within the platform.
  • Access Controls: CRE10x employees cannot access your documents because they are not stored. Data exists only transiently in server memory during active processing.

What we do store: your account details, the usage events described in Section 2.4, and any feedback you submit. These do not include document contents, extracted results, or your API key. See Section 6 for retention.

4.1 Tenant and Third-Party Data — Your Responsibility

Leases and other documents you upload may contain personal information about tenants, guarantors, and other third parties (names, contact details, financial terms). With respect to that data:

  • You are the data controller. You choose what to upload. CRE10x acts only as a transient, in-memory processor of your documents for the single purpose of generating the output you requested, and retains nothing afterward.
  • You are responsible for having the legal right — including any required consents or lawful bases under applicable privacy laws — to upload and process documents containing third-party personal information.
  • Exported results are yours to protect. Once you download an Excel export, any tenant or third-party data in it exists only on your device. CRE10x is not responsible for data you save, export, share, or store outside the Service, or for data you fail to download before it is permanently discarded.
  • Third-party privacy requests: Because we do not store uploaded documents or results, we hold no tenant data to access, correct, or delete. Requests from tenants or other third parties regarding data in your documents must be directed to you as the controller of that data.

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

  • Service Providers: We share data with trusted third-party providers who help us operate the Service, including:
    • Anthropic (AI processing)
    • Firebase/Google Cloud (authentication and infrastructure)
    • Stripe (payment processing)
    • Email service providers (for transactional and marketing emails)
    • Analytics providers
  • Legal Requirements: We may disclose your information if required to do so by law, in response to a subpoena, court order, or other legal process, or to protect our rights, property, or safety.
  • Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
  • With Your Consent: We may share information for any other purpose with your explicit consent.

6. Marketing Communications

Opt-In at Sign-Up: During account registration, you have the option to consent to receiving marketing communications from CRE10x Software. If you opt in, we may send you:

  • Product updates and new feature announcements
  • Tips and best practices for using CRE10x tools
  • Promotional offers, discounts, and upgrade opportunities
  • Industry insights and CRE-related content
  • Event invitations and webinar notifications

Transactional Emails: Regardless of your marketing preferences, we will send you essential transactional emails related to your account, including: account verification, password resets, credit balance alerts, payment receipts, and important service announcements (e.g., changes to our Terms or Privacy Policy). These are not considered marketing communications.

7. Your Rights and Choices

7.1 Marketing Opt-Out

You can opt out of marketing communications at any time by:

  • Clicking the "unsubscribe" link at the bottom of any marketing email
  • Updating your communication preferences in your account settings
  • Emailing us at privacy@crexsoftware.com

We will process your opt-out request within 10 business days. Note that opting out of marketing emails does not affect transactional emails.

7.2 Access and Correction

You may access, update, or correct your personal information at any time through your account settings or by contacting us.

7.3 Data Deletion

You may request deletion of your account and associated personal data by emailing privacy@crexsoftware.com. We will process deletion requests within 30 days, subject to any legal retention requirements.

7.4 Data Portability

You may request a copy of your personal data in a structured, machine-readable format.

7.5 Cookie Preferences

You can control cookies through your browser settings. Disabling certain cookies may limit your use of some features.

8. Data Security

We implement industry-standard security measures to protect your information, including:

  • TLS 1.2+ encryption for all data in transit
  • AES-256 encryption for data at rest
  • Firebase Authentication with secure session management
  • Regular security audits and vulnerability assessments
  • Role-based access controls for our team
  • Secure, PCI-compliant payment processing through Stripe

While we strive to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Data Retention

We retain your information as follows:

  • Account Data: Retained for as long as your account is active, plus 90 days after deletion to allow for recovery.
  • Uploaded Documents and AI Results: Not retained. Documents and results exist only in-memory during active processing and are not saved to any persistent storage. Once you download your Excel export or close your session, the data is permanently gone from our systems.
  • Usage and Analytics Data: Retained in aggregated, anonymized form for up to 3 years for product improvement.
  • Billing Records: Retained for 7 years as required for tax and accounting compliance.
  • Marketing Preferences: Retained for as long as your account exists. Opt-out preferences are honored immediately and permanently.

10. Third-Party Services

Our Service integrates with third-party services that have their own privacy policies. We encourage you to review them:

11. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete that information promptly.

12. California Privacy Rights (CCPA)

If you are a California resident, you have the right to: know what personal information we collect about you; request deletion of your personal information; opt out of the sale of your personal information (we do not sell your personal information); and not be discriminated against for exercising your privacy rights.

To exercise these rights, contact us at privacy@crexsoftware.com.

13. International Users

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer. If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, we rely on your consent and/or contractual necessity as the legal basis for processing your personal data.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last Updated" date, and by sending a notification to the email address associated with your account. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

CRE10x Software, Inc.

Austin, Texas

Email: privacy@crexsoftware.com