Privacy Policy

• Account details. Your name, work email address, and, if you add them, your title and deal coverage (asset classes and states). Accounts are created by your firm’s admin; there is no public sign-up. Passwords are handled by our authentication provider and stored only as salted hashes; we never see them.
• Documents you upload. Offering memoranda and other deal files: PDFs, images, forwarded emails, spreadsheets and Word documents, up to 32 MB each.
• Text you paste. Broker emails and other deal text you paste in to create a deal. The pasted text is kept with the deal as its notes.
• Deal and workspace data. Deals, stages, dates, offers, diligence checklists, underwriting assumptions, comments, notes, approvals, your firm’s acquisition criteria and settings, and a log of who did what in the workspace.
• Contacts you record. Brokers, sellers and companies you add, which can include names, email addresses, phone numbers and notes. Your firm is responsible for having the right to store these.
• AI results. The fields, scores, rationales and citations Deal Radar produces from your documents, plus usage counts (tokens) for each AI request.
• Technical data. Our hosting provider records standard request logs, such as IP address, browser user agent, the page requested and the time, and our application logs errors so we can fix them.

If you email us to request a pilot or ask a question, we keep that correspondence. We do not buy data about you from third parties.

• To run Deal Radar for your firm: store your deals and documents, show them to the right people, and keep them in sync.
• To extract deal details from offering memoranda and score deals against your criteria, using AI (see the next section).
• To sign you in, keep your account secure, and send the account emails you ask for, such as password resets.
• To support you, fix problems, and improve the product.

We do not sell your information, use it for advertising, or share one firm’s data with another. We do not use your documents or deal data to train AI models.

Deal Radar uses Claude, an AI model made by Anthropic, through Anthropic’s API. When you add a deal by pasting a broker email or dropping in a PDF, or when you ask Deal Radar to extract or evaluate a deal, we send Anthropic:

• the full contents of the PDF (the whole file, not a summary) or the text you pasted;
• for evaluations, the deal’s details and your firm’s acquisition criteria.

Other file types you upload (images, spreadsheets, emails, Word documents) are stored but are not sent to Anthropic.

We use Anthropic under its commercial terms, which don’t allow Anthropic to train its models on customer content sent through the API. Anthropic keeps API inputs and outputs only for a limited period under its own retention policy, for example to detect abuse. You can read more at anthropic.com/legal.

These companies process data for us to run Deal Radar:

• Supabase — database, file storage, authentication and account emails (such as password resets). Hosted on AWS in the United States (us-east-1).
• Vercel — hosts the web application and runs its server code; keeps request and error logs.
• Anthropic — AI extraction and scoring, as described above.
• Google — email, for pilot requests and other messages you send us.

We’ll update this list before adding a subprocessor that receives your firm’s documents or deal data.

• Your data is stored in the United States, in a Supabase Postgres database and a private file-storage bucket. Uploaded files are never public; viewing one uses a link that expires after five minutes.
• Each firm has its own workspace. Row-level security in the database limits every read and write to the workspace you are signed in to, and to what your role allows (admin, member or read-only viewer). If your firm turns on deal visibility walls, those are enforced by the database too.
• Data is encrypted in transit (TLS/HTTPS) and at rest by our providers.
• A small number of Sprout Works staff have administrative access to the production systems. We use it only to operate the service, support your firm, investigate problems or when required by law.

No system is perfectly secure. If we learn of a breach affecting your firm’s data, we’ll tell your firm without undue delay.

Your firm owns the documents and data it puts into Deal Radar, and the results Deal Radar produces from them. We only use them to provide the service to your firm.

• We keep your firm’s data for as long as its workspace is active.
• When someone deletes a document in Deal Radar, the file is removed from storage. When an admin deactivates a teammate, that person can no longer sign in; their past activity stays in the workspace history.
• Your firm can ask us at any time to export its data or to delete its workspace, documents or a user’s account. Email corey@sprout.works. We’ll confirm the request with your firm’s admin and complete it within 30 days. Copies in our providers’ backups are removed as those backups expire.
• If you are an individual whose details a customer has recorded (for example, a broker), please contact that firm first; we’ll help them respond.

Deal Radar uses only the cookies needed to keep you signed in (set by our authentication provider, Supabase). We don’t use analytics, advertising or tracking cookies. Your theme and view preferences are saved to your account, not to cookies.

Deal Radar is a professional tool for businesses. It isn’t meant for anyone under 18, and we don’t knowingly collect information from children.

If we change this policy, we’ll update the date at the top. If a change materially affects how we handle your firm’s data, we’ll tell your firm’s admin before it takes effect.

Questions or requests about privacy: corey@sprout.works. Sprout Works operates Deal Radar. See also our Terms of Service.