Privacy Policy

Summary

The Lull stores the data you create on the platform (deals you upload, pipeline entries, CRM contacts, memos). We do not sell your data. We use trusted subprocessors, primarily Supabase for storage and Anthropic for AI, to operate the Service.

1. Information we collect

• Account data: email, name, firm, title, role.
• Workspace data: deals you upload, pipeline stages, CRM contacts, notes, memos you generate.
• Usage data: page views, feature use, API calls, used to operate and improve the Service.
• Billing data: handled by Stripe; we never see full card numbers.

1a. Cookies and tracking technologies

We use cookies and similar technologies that are necessary to operate the Service, for example, to keep you signed in and to maintain your session, and a limited set of analytics cookies to understand aggregate usage and improve reliability. We do not use cookies to sell your personal information or to serve third-party advertising. You can control or disable cookies through your browser settings, though some features of the Service may not function properly without them.

1b. AI processing of your content

The Lull is an AI-powered service. When you upload documents or generate memos, valuations, or other analyses, the relevant inputs are processed by AI models provided by Anthropic to produce those outputs. These inputs are sent to Anthropic under their enterprise terms and are not used to train their public models. See our Terms of Service for important disclaimers about AI-generated content.

2. How we use information

• Provide and secure the Service.
• Generate AI memos, valuations, and market narratives from the inputs you submit.
• Send product, security, and billing communications.
• Improve reliability and features.

3. Subprocessors

We use Supabase (database and auth), Anthropic (Claude AI models), Vercel (hosting), and Stripe (billing). When you generate AI content, the relevant inputs are sent to Anthropic under their enterprise terms and are not used to train their public models.

3a. Data Processors

We use the following third-party services to process your data:

• Anthropic, Inc.: AI document processing and analysis
• Supabase: Database and file storage
• Vercel: Application hosting
• Google LLC: Maps and location services
• Exa.ai: News and market intelligence

None of these providers use your uploaded data to train AI models.

4. Data sharing

Team plans share workspace data within your team. We do not sell personal data. We may disclose data if required by law or to protect the Service.

5. Retention

We retain account and workspace data for the life of your account. You can request deletion at any time by contacting support.

6. Security

Data is encrypted in transit and at rest through our subprocessors. Access is limited to authorized personnel who need it to operate the Service.

7. Your rights

You can access, export, or delete your data at any time by contacting support@thelull.fyi.

8. Children's privacy

The Lull is an institutional product intended for commercial real estate professionals and is not directed to children. The Service is not intended for, marketed to, or designed for use by anyone under the age of 18, and in particular is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are under 13, please do not use the Service or submit any personal information to us.

If we learn that we have collected personal information from a child under 13 without verified parental consent, we will promptly delete that information. If you believe a child under 13 may have provided us with personal information, please contact us at support@thelull.fyi so we can take appropriate action. This policy is intended to comply with the U.S. Children's Online Privacy Protection Act (COPPA).

9. Changes

We may update this policy. Material changes will be announced via email or in-app notification.