Privacy Policy

Three categories. Account data: your email, workspace name, and team membership. Workspace content: the deals, rent rolls, operating statements, and other documents you upload, and the models built from them. Usage data: server logs and metering records (for example, a count of AI document extractions for billing). Payments run through Stripe; we never see or store full card numbers.

To operate the service: computing your models, processing the documents you ask us to read, enforcing plan quotas, sending transactional email (trial and billing notices), and support. We don't run ads, we don't sell your data, and we don't use your deal data for anything other than serving your workspace.

When you import a document, its contents are sent to our AI provider (Anthropic) over an encrypted API connection to extract the data into your model. API traffic of this kind is not used by the provider to train AI models. Extraction runs when you trigger it and the results land in your workspace, where every extracted number is visible and editable.

We use a small set of infrastructure providers to run Pencil:

• Supabase — database and authentication
• Vercel — application hosting
• Anthropic — AI document processing
• Stripe — payments and billing
• Resend — transactional email

Each processes data only as needed to provide its function. We'll update this list if the set changes.

Workspaces are isolated at the database layer with row-level security: your team's data is only visible to your team. Data is encrypted in transit and at rest. Access to production systems is restricted and credentialed.

We keep your workspace content for as long as your account exists, including through subscription lapses (that's what makes the read-only, never-hostage promise work). If you want your account and data deleted, email us and we'll remove it from production systems, with residual copies aging out of encrypted backups on their rotation schedule.

You can access and export your data from the app at any time, including full Excel exports of every model. You can also ask us for a copy, a correction, or deletion of your personal data. Depending on where you live, local law may give you additional rights; we honor reasonable requests regardless.

Pencil uses cookies for one thing: keeping you signed in. No advertising cookies, no cross-site tracking.

If this policy changes materially, we'll notify you by email or in the app before the change takes effect. Questions or requests: support@pencil.deals.