Privacy Policy

OpusStack

Effective Date: May 23, 2026    |    Last Updated: May 23, 2026

OpusStack LLC ("OpusStack," "we," "our," or "us") operates the OpusStack platform, an AI-powered operational intelligence service for commercial real estate operators (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, including our website at www.opusstack.ai and any associated software, applications, or services.

By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.

1. Information We Collect

1.1 Information You Provide Directly

We collect information you voluntarily provide when you:

•       Create an account: name, email address, phone number, business name, business address, role/title, and password.

•       Upload documents and content: commercial real estate transaction documents including purchase agreements, letters of intent, title commitments, leases, financial statements, environmental reports, property condition reports, rent rolls, and other deal-related materials you choose to upload.

•       Provide deal information: property addresses, transaction parties (buyers, sellers, lenders, brokers, title companies), deal terms, milestones, dates, and notes.

•       Communicate with us: support requests, feedback, and other correspondence.

•       Connect third-party services: OAuth credentials and metadata when you connect email, calendar, CRM, or other integrations.

1.2 Information Collected Automatically

When you use the Service, we automatically collect:

•       Usage data: pages visited, features used, actions taken, session duration, and timestamps.

•       Device and technical data: IP address, browser type, operating system, device identifiers, and access times.

•       Log data: server logs, error reports, and diagnostic information.

1.3 Information from Third Parties

When you connect third-party services (such as Gmail, Google Calendar, or other integrations), we receive information from those services as permitted by your authorization and the third party's terms. This may include emails, calendar events, contacts, and other data related to your commercial real estate transactions.

2. How We Use Your Information

We use the information we collect to:

•       Provide, operate, and maintain the Service.

•       Process your uploaded documents using artificial intelligence to extract data, generate summaries, identify risks, and surface operational insights for your deals.

•       Communicate with you about your account, deals, milestones, and Service updates.

•       Send transactional SMS notifications to which you have expressly consented (see Section 5).

•       Improve, personalize, and expand the Service.

•       Monitor and analyze usage and trends to enhance your experience.

•       Detect, prevent, and address technical issues, fraud, and security incidents.

•       Comply with legal obligations and enforce our Terms of Service.

3. AI Processing of Your Data

OpusStack uses artificial intelligence (including large language models) to process your uploaded documents and deal data. Specifically:

•       No training on your data: We do not use your data, uploaded documents, or deal information to train our AI models or any third-party AI models. Your data is processed solely to deliver insights and functionality to you.

•       Third-party AI providers: We may use third-party AI services (such as Anthropic) to process your data. These providers process data on our behalf under contractual obligations that prohibit using your data for their own model training.

•       AI outputs are informational: AI-generated summaries, risk assessments, and insights are provided for your operational reference only and do not constitute legal, financial, tax, or real estate advice. You are responsible for independently verifying any AI-generated information before relying on it for business decisions.

4. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who help us operate the Service. These providers are contractually obligated to handle your data in accordance with this Privacy Policy and applicable law. Our key service providers include:

•       Twilio: SMS message delivery.

•       Anthropic: AI processing and analysis.

•       Supabase: database hosting, authentication, and file storage.

•       Vercel: application hosting and infrastructure.

•       Google: OAuth authentication and integration with Google Workspace services you connect.

4.2 SMS-Specific Disclosure

We do not share, sell, rent, or transfer your phone number or SMS opt-in data to any third party or affiliate for marketing or promotional purposes. Phone numbers collected for SMS notifications are used solely to deliver transactional messages you have requested and are processed only through our SMS provider (Twilio) for that purpose.

4.3 Legal Requirements

We may disclose your information if required by law, subpoena, court order, or government request, or if we believe in good faith that disclosure is necessary to:

•       Comply with legal obligations.

•       Protect and defend our rights or property.

•       Prevent or investigate possible wrongdoing in connection with the Service.

•       Protect the personal safety of users or the public.

4.4 Business Transfers

If OpusStack is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

4.5 With Your Consent

We may share your information for any other purpose with your explicit consent.

5. SMS Communications

OpusStack offers SMS notifications as an optional feature. By providing your phone number and opting in, you consent to receive transactional SMS messages from us. The following terms apply:

5.1 Types of Messages

All SMS messages we send are strictly transactional and tied to your active use of the Service. Examples include deal alerts, contract analysis summaries, milestone updates, report notifications, AI-detected risks, and important account activity. We do not send marketing or promotional SMS messages without obtaining separate, explicit consent.

5.2 Opt-In

You provide express consent to receive SMS messages by:

•       Checking an unchecked consent checkbox during account signup that states: "I consent to receive SMS notifications and alerts related to my real estate transactions, deal updates, and account activity. Message and data rates may apply. Reply STOP to unsubscribe."

•       Enabling SMS notifications in your account Settings under Notifications, where you can toggle specific alert types (transaction alerts, report summaries, milestone updates, etc.).

5.3 Opt-Out

You may opt out of SMS messages at any time by:

•       Replying STOP to any SMS message you receive from us.

•       Disabling SMS notifications in your account Settings.

Upon opt-out, we will immediately remove your number from future SMS sends and confirm the opt-out. Reply HELP at any time for support information.

5.4 Message and Data Rates

OpusStack does not charge for SMS messages. However, message and data rates may apply from your mobile carrier. Frequency of messages varies based on your activity and notification preferences (typical: 8–15 messages per user per month).

5.5 Independent Consent

SMS opt-in is optional. You may use the Service without providing a phone number or consenting to SMS communications.

6. Data Security

We implement industry-standard administrative, technical, and physical safeguards designed to protect your information, including:

•       Encryption of data in transit (TLS/SSL) and at rest.

•       Authentication and access controls to limit data access to authorized personnel.

•       Regular security reviews and updates to our systems.

•       Service provider agreements requiring appropriate data protections.

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

7. Data Retention

We retain your information as follows:

•       Active accounts: we retain your information for as long as your account is active.

•       After account deletion: we retain your data for up to 30 days in backups, after which it is permanently deleted.

•       Legal and compliance retention: certain records (financial transactions, tax-related data) may be retained for up to 7 years as required by applicable law.

•       Aggregated or de-identified data: we may retain anonymized or aggregated data that cannot be linked to you indefinitely for analytics and Service improvement.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

•       Access: request a copy of the personal information we hold about you.

•       Correction: request correction of inaccurate or incomplete information.

•       Deletion: request deletion of your personal information, subject to legal retention requirements.

•       Portability: request your data in a structured, machine-readable format.

•       Opt-out of marketing: opt out of any marketing communications (note: we do not currently send marketing communications).

•       Withdraw consent: withdraw consent for processing where we rely on consent.

To exercise any of these rights, contact us at privacy@opusstack.ai. We will respond within the timeframes required by applicable law.

8.1 California Residents (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale or sharing of personal information. OpusStack does not sell personal information. To exercise your rights, contact privacy@opusstack.ai.

8.2 Other State Privacy Laws

Residents of Virginia, Colorado, Connecticut, Utah, and other states with applicable privacy laws have similar rights. Contact us at privacy@opusstack.ai to exercise these rights.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate the Service, maintain your session, and analyze usage. You can control cookies through your browser settings, but disabling cookies may affect Service functionality.

10. Children's Privacy

OpusStack is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly. If you believe we may have collected information from a child, please contact us at privacy@opusstack.ai.

11. International Users

OpusStack operates from and stores data in the United States. The Service is currently intended for users located in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

12. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party service you access through the Service.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this policy and, where appropriate, by email or in-app notification. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

OpusStack LLC

3575 Katherine Way

Frederick, MD 21704

United States

Email: privacy@opusstack.ai

Website: www.opusstack.ai