Privacy Policy

• Your deal materials are yours. We use them to prepare your financing request and run the Service.
• Nothing goes to a lender without your approval.
• We do not sell your personal information or your deal information.
• We do not use advertising cookies or third-party advertising trackers.
• You can ask us to access, correct, or delete your information at any time.

Account information. Your name, email address, password (stored only in hashed form), organization name, and role. If you sign in with Google, we receive your name and email address from Google.

Deal information and documents. Files and data you or your team upload or enter, such as rent rolls, operating statements, appraisals, financial models, budgets, offering materials, and sponsor or guarantor information. These can include personal financial information about sponsors and guarantors.

Communications. Messages, comments, and questions exchanged on the Service. If you use video meetings on the Service, a meeting is recorded and transcribed, and a summary generated, only after participants are notified and accept in the Service.

Technical information. IP address, browser and device type, pages visited, and timestamps, collected in server logs to operate, secure, and troubleshoot the Service.

Cookies and local storage. We use cookies and browser storage that are necessary to keep you signed in and to remember preferences such as display settings. We do not currently use analytics or advertising cookies. If that changes, we will update this policy.

• To create and manage your account and your organization's workspace.
• To organize your deal materials, extract and cross-check data, flag discrepancies, and prepare lender-ready materials such as offering memoranda and underwriting documents.
• To identify capital sources that may fit your financing request and to support communication with them.
• To provide support and respond to your requests.
• To protect the Service, prevent misuse, and meet legal obligations.
• To maintain and improve the Service.

Automated processing. We use AI models, including models provided by Google, to read documents, extract data, and draft materials. Our team reviews critical information. AI providers process your content on our behalf under terms that do not allow them to use it to train their own models.

We share information only as described here:

• Lenders and capital providers. We share deal materials with lenders and other capital providers only with your approval, and only to pursue the financing you request. We never send your materials to a lender without it.
• Your team. People you invite into a project see what your permission settings allow, at the project and document level.
• Service providers. Companies that host and run the Service on our behalf, including cloud hosting (Google Cloud), database, authentication, and file storage (Supabase), AI processing (Google), and video meetings (Daily.co). They may use your information only to provide services to us.
• Legal and safety. When required by law or legal process, or to protect the rights, property, or safety of CapMatch, our users, or others.
• Business transfers. As part of a merger, acquisition, financing, or sale of assets, subject to the commitments in this policy.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

Data is encrypted in transit and, using AES-256, at rest. Access is role-based and enforced at the project and document level, and our controls are designed to SOC 2 standards. We have not yet completed an independent SOC 2 audit. No system is perfectly secure, so we cannot guarantee absolute security. If we learn of a breach that affects your information, we will notify you as required by law.

We keep account information while your account is active. We keep deal materials for as long as you keep them on the Service, and delete them within 30 days after you delete them or close your account (backup copies are overwritten within a further 90 days), unless we must keep them longer for legal, tax, or dispute-resolution reasons. Materials already shared with a lender at your direction are subject to that lender's own retention practices.

You can view and update most account and deal information directly in the Service. You can also ask us to access, correct, export, or delete your personal information by emailing legal@capmatch.com. We may need to verify your identity before acting on a request, and we will not discriminate against you for making one.

Depending on where you live, including California, you may have additional rights under local law. We honor those rights as the law requires.

Business users. The Service is built for commercial real estate professionals and is not directed to children. We do not knowingly collect information from anyone under 18.

Where data is stored. We store and process information in the United States.

Changes. If we make material changes to this policy, we will update the effective date and notify account holders by email or in the Service before the changes take effect.

This policy works together with our Terms of Service.

Questions about privacy or your information: legal@capmatch.com
CapMatch, Inc.
108 W. 13th Street, Suite 100
Wilmington, DE 19801