Privacy Policy · Closeable

Draft — attorney review required before launch. This is a working template, not final legal copy. Items in [brackets] — including the list of third-party processors and retention periods — must be confirmed against actual practice and reviewed by counsel before this policy takes effect.

Your deal data is never used to train models, and never shown to anyone outside your team. Deals are encrypted at rest and scoped to your account. See Security for detail.

1. What we collect

Account information — your email address and basic profile details needed to sign you in (Closeable uses passwordless, magic-link sign-in) and, optionally, sign-in through a connected Google account.
Deal data and uploaded documents — the figures you enter, and any documents you upload (such as CIMs, tax returns, or P&Ls) for automated figure extraction.
Usage data — standard logs and analytics about how the service is used, to keep it running and improve it. [Confirm exactly what telemetry/analytics is collected.]

2. How we use it

We use account information to operate your account; deal data and uploaded documents to produce your analysis; and usage data to run, secure, and improve the service. We do not sell your personal information or your deal data.

3. Your deal data is never used to train models

Your deal data is never used to train models, and is never shown to anyone outside your team. Documents you upload are processed only to extract the figures you review and confirm. Deals are encrypted at rest and scoped to your account.

4. Third-party processors

Closeable relies on a small number of trusted service providers to operate. These currently include [bracketed list — for example: the document-AI / OCR provider, the transactional email provider, the database/hosting provider, and, once billing is live, the payment processor]. Each processes data only as needed to provide its service. [Link each provider's terms / data-processing addendum as required.]

5. Data retention

We retain account and deal data for [retention period], and handle uploaded documents per [retention practice — describe whether source files are deleted after extraction]. You can request deletion of your account and associated data as described below. [Confirm actual retention practice with engineering and counsel.]

6. Your rights

You may access, correct, export, or delete your account data. [Insert the specific rights and request process under applicable law — e.g., CCPA/CPRA, GDPR — as advised by counsel.] To make a request, contact us at the address below.

7. Security

We encrypt deal data at rest and scope it to your account. For more detail and for security-review requests, see our Security page. SOC 2 Type II is in progress.

8. Changes to this policy

We may update this policy from time to time. Material changes will be communicated [method], and the effective date above will be updated.

9. Contact

Privacy questions or requests? Email security@closeable.app.