Privacy Policy
Last updated: May 2026
Summary
The Lull stores the data you create on the platform (deals you upload, pipeline entries, CRM contacts, memos). We do not sell your data. We use trusted subprocessors — primarily Supabase for storage and Anthropic for AI — to operate the Service.
1. Information we collect
- Account data: email, name, firm, title, role.
- Workspace data: deals you upload, pipeline stages, CRM contacts, notes, memos you generate.
- Usage data: page views, feature use, API calls — used to operate and improve the Service.
- Billing data: handled by Stripe; we never see full card numbers.
2. How we use information
- Provide and secure the Service.
- Generate AI memos, valuations, and market narratives from the inputs you submit.
- Send product, security, and billing communications.
- Improve reliability and features.
3. Subprocessors
We use Supabase (database and auth), Anthropic (Claude AI models), Vercel (hosting), and Stripe (billing). When you generate AI content, the relevant inputs are sent to Anthropic under their enterprise terms and are not used to train their public models.
3a. Data Processors
We use the following third-party services to process your data:
- Anthropic, Inc. — AI document processing and analysis
- Supabase — Database and file storage
- Vercel — Application hosting
- Google LLC — Maps and location services
- Exa.ai — News and market intelligence
None of these providers use your uploaded data to train AI models.
4. Data sharing
Team plans share workspace data within your team. We do not sell personal data. We may disclose data if required by law or to protect the Service.
5. Retention
We retain account and workspace data for the life of your account. You can request deletion at any time by contacting support.
6. Security
Data is encrypted in transit and at rest through our subprocessors. Access is limited to authorized personnel who need it to operate the Service.
7. Your rights
You can access, export, or delete your data at any time by contacting support@the-lull.com.
8. Children's privacy
The Lull is an institutional product intended for commercial real estate professionals and is not directed to children. The Service is not intended for, marketed to, or designed for use by anyone under the age of 18, and in particular is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are under 13, please do not use the Service or submit any personal information to us.
If we learn that we have collected personal information from a child under 13 without verified parental consent, we will promptly delete that information. If you believe a child under 13 may have provided us with personal information, please contact us at support@the-lull.com so we can take appropriate action. This policy is intended to comply with the U.S. Children's Online Privacy Protection Act (COPPA).
9. Changes
We may update this policy. Material changes will be announced via email or in-app notification.