Privacy Policy

• Account information such as name, email, authentication identifiers, subscription status, and documented legal acceptances.
• Deal and report information you submit, including property, financial, strategy, notes, and funding-request information.
• Transaction metadata from Stripe, such as customer and subscription identifiers, status, product, and billing dates. We do not receive complete payment-card numbers.
• Session cookies or similar browser storage needed for authentication, security, and core service operation.
• Technical and security information ordinarily generated by hosting, authentication, and application services, such as timestamps, request diagnostics, device/browser information, and approximate network information. We do not intentionally store IP addresses in legal-acceptance records.

• Provide accounts, AI analyses, deterministic calculations, reports, billing, support, funding-request intake, and administration.
• Authenticate users, record consent, prevent abuse, secure and troubleshoot the service, and meet legal obligations.
• Communicate service, transactional, support, billing, security, and policy notices.
• Improve reliability and product performance using appropriately limited information.

Deal information is transmitted to AI service providers to generate narrative analysis. Do not submit Social Security numbers, bank credentials, full payment-card data, medical information, or other information unnecessary for a property analysis. AI output may be retained as part of your report.

We disclose information only as reasonably necessary to vendors supporting hosting, database/authentication, AI processing, payments, email, security, and professional services; when directed by you; to protect rights and safety; in a business transaction; or when required by law. Current core providers include Supabase, Vercel, Stripe, and an AI model provider. We do not sell personal information for money.

Stripe processes payment information under its own privacy terms. Brida Capital AI stores limited Stripe identifiers and subscription status needed to provide and manage access.

Our launch retention schedule is: account profiles are kept while the account is active. After a verified account-deletion request, login access is disabled and ordinary profile fields are deleted or de-identified within 30 days; only the minimum pseudonymous account identifier needed to preserve required contract and legal-acceptance evidence is retained for the period stated below. Deal inputs, AI reports, and funding requests follow the same active-account period and 30-day deletion window. Legal-acceptance records and the minimum linked account identifier, plus transaction, subscription, invoice, and refund metadata, are retained for seven years after account closure or the applicable transaction to document contracts, taxes, accounting, and disputes. Ordinary application and request diagnostics are retained for up to 30 days, while records tied to a confirmed security incident may be retained for up to one year. Support correspondence is retained for three years after the matter closes. Provider backups are access-restricted and expire through normal backup rotation within 90 days. We may retain a record longer where law, litigation hold, fraud prevention, or an unresolved dispute requires it, and will delete or de-identify it when that reason ends.

• This schedule covers the data the service stores: account/profile data, legal acceptances, property and financial deal inputs, generated reports, funding requests, limited Stripe identifiers and billing metadata, support records, and operational/security diagnostics.
• Do not submit Social Security numbers, bank credentials, full payment-card information, medical data, or unrelated sensitive personal information.
• Launch-review notice: this retention schedule and the full Policy must be reviewed by qualified U.S. SaaS/privacy counsel and adjusted for any state-specific obligations as the business expands.

We use reasonable administrative, technical, and organizational safeguards, but no system is perfectly secure. You are responsible for safeguarding credentials and notifying us of suspected unauthorized access.

You may update account information, manage billing through Stripe Customer Portal, or request access, correction, deletion, or other applicable privacy rights at brian@bridacapital.com. Rights vary by location and may be subject to legal exceptions. We will verify requests before responding.

The service is not directed to children under 13 and is intended for adults. The service is operated from the United States. If you use it elsewhere, information may be processed in the United States and other provider locations.

We may update this Policy and will provide notice as required. Contact Brida Investments AR LLC at 701 South ST STE 100, Mountain Home, AR 72653, USA or brian@bridacapital.com.