Privacy Policy

Effective October 23, 2026

EstoppelBot (operated by Bleek Vision) helps commercial-real-estate teams collect tenant estoppel certificates. This policy describes what we collect, why, and how it is protected.

Information we collect

Account data — your email address and workspace membership, used to authenticate you (via email magic link or Google sign-in) and scope your access. Workspace content — properties, leases, estoppel requests, tenant responses, and generated certificates that your team enters or uploads. Tenant submissions — responses submitted through secure tokenized links, including the respondent’s name, title, typed signature, and any exceptions they note. Operational logs — reminder delivery records and an audit trail of AI-assisted processing.

How we use it

Solely to provide the service: authenticating users, generating and tracking estoppel requests, sending transactional reminders to tenant contacts, detecting discrepancies, and producing certificates. We do not sell personal information or use it for advertising.

AI processing

Documents you upload for extraction and response data you submit for review are processed server-side through Anthropic’s API under commercial terms that prohibit training on your data — or, if your workspace connects its own AI provider account, through that provider under your agreement with it. AI outputs are always reviewed by a human before anything is saved, and each AI call is recorded in your workspace’s audit log.

Storage and security

Data is stored in Supabase (PostgreSQL) with row-level security isolating each workspace, encrypted in transit (TLS) and at rest. Tenant links use unguessable single-use tokens. Access within your workspace is governed by role-based permissions your team controls.

Analytics and marketing

Website visits — on our public pages (home, sign-in, and these legal pages) we count visits with cookieless, aggregate analytics: page, referring site, campaign tags, country, and device type. No cookies are set for this, and if your browser sends the Global Privacy Control signal we don’t count you at all. Campaign attribution — the campaign that brought you here is kept in your browser for up to 30 days and, if you create a workspace, saved once with it so we can tell which channels lead to active customers. Product usage — we record pseudonymous usage events (for example, that a workspace imported leases or sent requests, with counts) to understand adoption. These never include lease terms, rent, tenant or contact details, names, email addresses, or anything typed into a form.

Tenant pages are never tracked. Tenants responding through a secure link load no analytics and generate no usage events. We send product-update email only if you opt in, every message has an unsubscribe link, and we never use tenant contact details for marketing. Usage events are deleted after 18 months.

Beta list — if you join the beta list on our home page, we keep the email, name, firm and role you give us, when you agreed to hear from us, and whether you’re interested in AI agents. We use it only to email you about the EstoppelBot beta; the list is kept in our database and in Resend, our email provider. Every email has an unsubscribe link, and we delete beta-list entries after two years. Ask us to remove you at any time.

Sharing

We share data only with the subprocessors needed to run the service — Vercel (hosting and website analytics), Supabase (database and authentication), Anthropic (AI processing), Resend (email delivery), and Twilio (SMS, when enabled) — and when required by law. We do not sell personal information.

Retention and deletion

Workspace data is retained while your account is active. Each workspace sets a retention period (one year by default, 90 days to ten years); after it, AI inputs and outputs, sent email text and AI-app tool arguments are removed, and a tenant signer’s IP address and browser are removed once the transaction is closed. Signed responses, certificates and the audit log are kept as legal records. When a tenant signs, we record their name, the time, and their IP address and browser as evidence of signing. Contact us to export or delete your workspace; certificates already delivered to transaction parties may persist with those parties.

Contact

Questions or requests: contact the Bleek Vision team via bleekvision.com.

This policy is a working draft pending review by counsel.