Privacy Policy
This page describes what CompShield AI for Appraisers actually does with your data. Every statement below reflects how the product is currently built.
Your MLS CSV export
MLS CSV text is parsed in your browser, not uploaded as a CSV file to our servers. It is persistently cached in IndexedDB on this device for your signed-in account; Market Profiles also contain CSV text and analysis settings. Closing a tab, signing out or removing the current dataset does not erase these caches. Use the workspace's clear-local-cache controls to delete them. Older shared-device caches are preserved but no longer loaded automatically; you may explicitly clear them. Account scoping prevents automatic cross-account access in the app, but is not encryption against someone controlling the device or browser.
Subject property information
With Save finalized report to history enabled, subject details are transmitted and saved with the report. With saving off for a new report, finalization sends your authenticated account, request and signed analysis identifiers for credit accounting, not the subject, rates, narrative or comparable data. Credit and finalization records remain on the server even when report content is not retained. Already-saved reports continue to transmit edits when updated. Local caching is separate from this saving choice.
Generated analysis and addendum
Saved reports retain subject details, derived adjustments, analysis settings, exclusions, selected comparable results and narrative text, which can include comparable addresses and prices. The raw CSV file is not retained on our server. Account access rules restrict ordinary report access to the owner; authorized connected assistants can read reports you choose to save, and authorized operational access may support the service.
Account information
We store the email address and authentication details required to sign you in, keep your report history separate from other accounts, and contact you about your account or a payment problem.
Billing data
Payments are processed by Stripe. Card details never reach our systems. We retain the Stripe customer, subscription, price and session identifiers, the plan status and period dates, and a ledger of credit movements, so that your entitlements can be verified.
AI processing
Normal regression, adjustment math and addendum generation run in your browser, not an AI service. Optional AI outlier review requires a separate explicit opt-in and sends address-free comparable prices, adjustments, summary statistics and screening flags through the Lovable AI gateway to OpenAI. Removing addresses does not guarantee anonymity. We request non-storage of the model response but cannot promise no provider logs or retention; their policies apply. You can skip review or stop further sends by withdrawing the checkbox choice. Connected outside assistants may read saved reports only when you authorize that connection; revoke it from Connect to stop future access.
Advertising measurement
Google Ads measures verified new-account signup, not merely a submitted signup form; ad clicks and impressions count separately. The tag is blocked in the EEA, UK, Switzerland, Canada (our country-only lookup cannot distinguish Quebec), and unresolved regions unless an explicit advertising choice permits it; saved refusals are honored. No banner is installed, so these regions default to no tracking. We do not send email, report content or full sensitive query URLs to Google. Operational funnel events describe CTA selection, signup submission, first completed analysis and confirmed checkout without property content; any configured analytics service receives a random browser identifier and page path, not sensitive query parameters. See https://business.safety.google/privacy/.
Retention
Saved reports and their confirmations remain in your account until you delete them or delete your account. Billing records and credit ledger entries are kept for as long as required for accounting and tax purposes. Security and audit events are kept for up to 24 months.
Deleting your data
You can delete saved report content from Report History. Non-content finalization tombstones and credit ledger records remain to prevent replay and preserve accounting; deleting a report does not reset its paid analysis identity. Local CSV caches and Market Profiles require the separate workspace cache-clear controls. For account deletion, use the billing page or contact us; retained accounting/security records and backups may follow their applicable retention requirements.
Contact
Questions about this policy, or a deletion request, can be sent to support@compshield.app.