Privacy & data policy

What we keep

• Your email address and (optional) company name.
• The redacted text of every proposal you upload.
• The structured metadata extracted from each proposal.
• The five-digit zip code from each proposal.
• Your token-purchase history and ledger.
• The reports and playbooks the analysis engine produced.

What we strip from every upload

• Client and household names.
• Project street address, city, and state (zip kept).
• Architect / builder / designer / GC names.
• Your company name and your employees' names.
• Phone numbers, email addresses, and websites.
• Project codes, PO numbers, and quote IDs.
• Bank account and routing numbers.
• Notary stamps and signature names.

Original uploads

We process the original PDF entirely in memory during the upload request. The unredacted file is not persisted to disk. Only the redacted text and structured metadata are stored.

LLM provider

We use the Anthropic API with zero-retention enabled. Your content does not train any AI model. Anthropic does not retain your content beyond the call.

Storage

Encrypted at rest in Supabase. Auto-purge of any retained redacted text 30 days after upload unless you've explicitly opted to keep it. You can delete your data at any time from your account.

Withdraw a corpus contribution

If you've contributed a proposal to the corpus and want to withdraw it, contact support@bostonautomations.com with the upload ID. We mark the row as withdrawn within 24 hours.