1. Who we are
Real Spark LLC operates AbstractBuddy from Hamilton, Ohio, United States. This policy describes how we handle information when you visit our website, contact us, or use our commercial lease analysis service. Contact us at [email protected].
When an organization supplies documents containing information about other people, we process that content to provide the service to that organization. The organization is responsible for having authority to provide it. This policy does not replace any separate written data-processing agreement.
2. Information we collect
- Account and organization information: usernames, email addresses, organization names, account credentials stored as password hashes, memberships, roles, invitations, and verification records.
- Documents and results: uploaded leases and related files, document names and metadata, extracted text, search representations, abstracts, edits, and review information. Documents may contain personal or confidential information you choose to provide.
- Chat information: questions, responses, and associated document context and chat history.
- Billing and usage information: package and seat selections, credit usage, transaction references, subscription and payment status, and billing audit records. Stripe collects payment details through its payment interfaces; AbstractBuddy does not receive or store your full payment-card number or card security code.
- Communications: names, email addresses, company names, and messages submitted through contact forms or sent to us for support.
- Technical and security information: request and error logs, network and browser information made available to our systems and providers, and security records. Our contact form stores a keyed digest of the client address for abuse prevention rather than the raw address in the inquiry record; infrastructure logs may separately include network information.
3. How we use information
We use information to provide document storage, extraction, search, abstracts, chat, and exports; manage accounts and team access; process subscriptions and usage; communicate about verification, billing, support, and service changes; troubleshoot problems; prevent fraud and abuse; and meet legal obligations.
We do not use customer documents to train AI models. We do not sell personal information or share it for targeted advertising, and we do not use advertising trackers or behavioral analytics tools. Necessary operational logging and security measures still apply.
4. Service providers & other disclosures
We disclose information as needed to service providers that support AbstractBuddy, including:
- OpenAI: processes document content and chat context for AI analysis, responses, and search embeddings.
- Supabase: stores uploaded files and supports document text, embeddings, and vector search.
- Stripe: processes payments and supports subscriptions, invoices, payment methods, and related fraud prevention.
- Hosting, infrastructure, and email providers: run the application, store application records, deliver account and service messages, and support operations and security.
Providers process information under their applicable agreements and policies. Some providers, including payment providers, also process information for their own legal, security, or fraud-prevention purposes. We do not promise that all processing occurs in a particular country; information may be processed in the United States and other locations where providers operate.
Organization administrators can manage membership and billing information. Ordinary document access in the application is restricted to the uploader; membership alone does not give teammates access to uploaded documents. Information you export or share outside the service is under your control. Authorized personnel may access information as needed for support, security, operations, or legal requirements.
We may also disclose information where reasonably necessary to comply with law or valid legal process, protect rights and safety, investigate abuse, or in connection with a merger, acquisition, financing, or sale of business assets, subject to applicable protections.
6. Retention & security
We retain information as needed to provide the service, maintain records, resolve disputes, prevent abuse, and meet legal obligations. Retention depends on the type of information and the reason for keeping it. Canceling a subscription or reaching the end of the read/export recovery window does not automatically delete account information, documents, or results.
Available document-deletion controls remove content from the application and initiate associated storage cleanup. Backup copies, provider-held records, security logs, and records required for accounting or legal purposes may remain for different periods. Billing and credit audit records may remain after a document is deleted. Contact us to request account or content deletion; we may need to verify your identity and authority and explain any limits that apply.
We use access controls and other safeguards intended to protect information. No storage or transmission system is completely secure, and we cannot guarantee absolute security. Protect your credentials and share only information you are authorized to provide.
7. Your choices & requests
You can manage available account settings, export accessible results, and use document-deletion controls in the application. For access, correction, deletion, or other privacy requests, email [email protected]. Depending on applicable law, you may have additional rights, including restrictions on or objections to certain processing. We will handle requests in accordance with applicable law and may verify identity before acting.
If your information appears in documents supplied by a customer organization, contacting that organization may be the most direct way to exercise your rights. We can help route a request when appropriate. Necessary account and service messages may continue while you use the service.
AbstractBuddy is intended for adult business users, not children under 18. If you believe a child has supplied personal information directly to us, contact us so we can investigate and address it.
8. Updates & contact
We may update this policy as our practices or applicable requirements change. We will update the effective date and provide additional notice of material changes when appropriate or required by law.
Privacy questions: Real Spark LLC, Hamilton, Ohio, United States. Email [email protected].