Privacy Policy

What We Collect

When you use Reversion, we collect the following information:

• Account information: your name, email address, company name, and role
• Property documents: rent rolls, leases, operating statements, and other files you upload for extraction
• Underwriting assumptions: the data you enter through the wizard (market rents, growth rates, recovery structures, etc.)
• Usage data: which features you use, when you log in, extraction and engine run history
• Payment information: processed by Stripe; we do not store credit card numbers

How We Use Your Data

We use your data to:

• Provide the Reversion service — parse documents, extract lease data, generate cash flow reports
• Send transactional emails (extraction results, password resets, account notifications)
• Process payments and manage credits
• Monitor service health and diagnose errors
• Improve the platform based on aggregate usage patterns (never individual document content)

Third-Party Services

We use the following third-party services to operate Reversion. Each processes only the data necessary for its function:

• Reducto — document parsing (converts PDFs and spreadsheets into structured text)
• Anthropic (Claude) — AI-powered data extraction from parsed documents
• Stripe — payment processing
• Resend — transactional email delivery
• Railway — cloud hosting infrastructure
• PostgreSQL — database (hosted on Railway)

AI and Your Documents

This is important, so we want to be clear:

Your documents are NOT used to train AI models. When we send document text to Anthropic's Claude API for extraction, the content is processed for that single API call and is not retained by Anthropic for model training. Anthropic's API usage policy explicitly states that API inputs and outputs are not used to train their models.

Document text is sent to the AI only for the purpose of extracting structured lease and financial data. The extracted data is stored in our database. The raw document text sent to the AI is not logged or stored after the extraction call completes.

Data Security

• All data is encrypted in transit using TLS
• All data is encrypted at rest in our database and storage
• Access is scoped to your organization — other users cannot see your documents or reports
• Authentication uses secure JWT tokens with httpOnly cookies
• There are no public URLs to your documents — all access requires authentication
• Passwords are hashed using Argon2

Data Retention

Your documents, reports, and account data are stored for the duration of your account. If you delete your account or request data deletion, all your data will be permanently removed within 30 days. You may request deletion of specific documents or deals at any time from within the application.

No Data Selling

We do not sell, rent, or share your personal information or document data with third parties for their own purposes. We only share data with the third-party service providers listed above, solely to operate the Reversion platform.

Cookies

Reversion uses session cookies for authentication only. These are httpOnly, secure cookies that maintain your login session. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

Your Rights

You have the right to:

• Access your data at any time through the application
• Correct any inaccurate information in your account settings
• Delete your account and all associated data
• Export your data (Excel reports contain all your underwriting data)

To exercise any of these rights, use the features within the application or contact us at the address below.

Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated via email. The “Last updated” date at the top of this page reflects the most recent revision.

Contact

For privacy inquiries, contact us at hello@getreversion.com.