- Use the desk without an account and we collect nothing. Your figures stay in your browser and are never transmitted to us. There is no anonymous telemetry hiding behind that sentence.
- With an account we hold your email, your name and your sheets. That is the list.
- We do not sell or share your data with advertisers, brokers or lead buyers. Not now, not as a later revenue idea.
- No third-party analytics, no advertising pixels, no fonts loaded from someone else's server. Nothing on our pages phones anyone.
- Your deals never train a model. Photographs and sheets sent to the condition read are processed and discarded, not learned from.
- Export everything or delete everything, yourself, at any time. Section 9.
01Who is asking
StormRiver Real Estate LLC, a Georgia limited liability company trading as Negotiation Inc is the controller of the personal data described here. Write to privacy@negotiationinc.com about anything on this page and a person will answer it.
This page covers the website, the desk, the comparison workbench, the course and the arcade. It does not cover anything you reach by clicking a link out of them — once you are on someone else's site you are on their policy.
02The free desk transmits nothing
This is the part most privacy policies would bury, so it goes first.
When you price a property without an account, the whole thing runs in your browser. Your address, your figures, your comps and your condition ratings are written to that browser's local storage and read back from it. They are not sent to us. We have no copy, no backup and no way to look at them.
The practical consequences are worth knowing:
- Clearing your browser data, or using private browsing and closing the window, deletes the work permanently. We cannot recover it, because we never had it.
- The work does not follow you to another device or another browser.
- Anyone with access to that browser profile can see it. On a shared machine, that matters.
An account exists to solve the first two. It costs you an email address, and that is the trade we are making explicit here rather than in a footnote.
03What we collect when you have an account
| What | Why | How long |
|---|---|---|
| Name and email | To sign you in, and to send billing and security notices | Until you delete the account |
| Password hash | To sign you in. We never hold the password itself | Until you delete the account |
| Your sheets — addresses, figures, comps, notes, condition ratings, saved assumptions | They are the product. Storing them is the feature you signed up for | Until you delete them, or 30 days after you close the account |
| Plan, trial dates and billing status | To know what to unlock and what to charge | Seven years, because tax law says so |
| Photographs you upload | To read condition from them | Never stored. They exist in memory for the length of one request (section 5) |
| Server logs — IP address, browser string, page, timestamp, errors | To keep the thing running and to notice an attack | 30 days, then deleted |
| Support email | To answer you, and to remember the answer next time | Two years |
| Twilio | Phone calls and text messages | The numbers dialled or texted and the message contents — see section 7 |
What we deliberately do not collect
- Card numbers. Stripe takes those directly. They never reach our servers.
- Social security numbers, credit reports, bank credentials or income verification. The software has no use for them and no field to put them in.
- Your location. We never ask the browser for it. Typing an address is not the same thing.
- Contacts, calendar or files. Nothing on our pages asks for access to any of it.
- Behavioural profiles. There is no analytics product recording what you click, how long you hovered, or where your mouse went.
04The lawful basis, for those who need one
If you are in the UK or the EEA, the bases we rely on are: contract for anything needed to give you the service you signed up for; legitimate interests for security logging, fraud prevention and answering support email; legal obligation for keeping billing records; and consent for the one optional thing we do, which is product email you can decline at signup and unsubscribe from in one click.
05Photographs and the AI features
Two features send data outside our own systems to a model provider: the photo condition read, and the written comparison that explains why one deal beats another.
Both run on Anthropic's models. When you use them:
- The photograph, or the two sheets being compared, is sent to Anthropic to produce the answer, along with the prompt that asks for it.
- Photographs are resized in your browser before they leave it — partly because it makes the read cheaper, and partly because a smaller image carries less than a full-resolution one.
- Anthropic does not use it to train its models. We use their commercial API, where that is the contractual default.
- We never store the photograph. It exists in the memory of one server process for the length of one request — it is not written to a disk, not written to a log, and not cached anywhere. There is no deletion job because there is nothing to delete. The result — the condition ratings it produced — stays on your sheet, because that is what you asked for.
The metadata is gone before the image leaves your browser. A phone photograph carries GPS coordinates and a timestamp. Every image is resized and re-encoded in your own browser before it is sent — re-encoding is what removes the metadata, so the file that leaves is not the file you chose and carries none of it. What that does not remove is the fact that a photograph of a house is a photograph of a house: do not upload images containing people, documents, or anything else you would not want processed.
Neither feature runs unless you press the button that runs it. Nothing is sent to a model in the background.
07Text messages and phone calls
The desk can place calls and send text messages on an operator’s behalf — to property owners they are trying to reach, and to people who have asked to hear from them. That traffic runs over Twilio, so Twilio joins the table in section 6 for exactly that slice: the phone numbers dialled or texted, and the contents of the messages. Nothing else.
If you get a text from an operator using this desk
Message frequency varies and message & data rates may apply. Two words do everything:
STOP ends it. You get one confirmation — “You will not receive further messages from this number.” — and the number goes onto a suppression list that nothing in the software overrides. Not a sequence, not a campaign, not a keen operator. Writing “please stop texting me” in a sentence works too; the software reads it the same way.
HELP gets the program name and how to opt out. You can also reply and ask anything — a person reads the replies.
The part the carriers ask us to say plainly
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. The suppression list exists so that a “no” is permanent; it is never a mailing list, and nobody can export it as one.
The program terms — frequency, carriers, the fine print — live on their own page: SMS terms.
09How it is kept
- Everything travels over TLS. Everything at rest is encrypted on the provider's disks.
- Passwords are stored as salted hashes. Nobody here can read yours, including us.
- Access to production data is limited to the people who need it to fix something and is logged.
- Payments are handled entirely by Stripe, which is PCI-DSS certified. We are not in the card path at all.
No system is perfect. If there is a breach affecting your data we will tell you and the relevant regulator without undue delay, and within 72 hours where the law requires it — what happened, what was taken, and what to do about it.
10Your rights, and the buttons that exercise them
Most policies list rights and then make you write an email to use them. Two of these are buttons.
- Export everything. From the account panel, one click gives you a file containing every sheet, comp, note and assumption you have. It is plain readable JSON, not a locked format, and it is yours to take elsewhere.
- Delete everything. Also from the account panel. It removes the account and its sheets. Billing records survive because tax law requires it; nothing else does.
- See what we hold — ask and we will send it, within 30 days.
- Correct it — your name and email are editable in the account panel; anything else, ask.
- Object, restrict, or withdraw consent — ask, and for product email, one click in any email.
- Complain — to us first, please, at privacy@negotiationinc.com. If we do not fix it, UK and EEA residents may complain to their data protection authority; the UK's is the Information Commissioner's Office.
We do not charge for any of this, and we will not make you sit through a retention offer to do it.
11California residents
Under the CCPA and CPRA you have the right to know what personal information we collect, to have it deleted, to correct it, and to opt out of its sale or sharing.
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the past twelve months. There is therefore no “Do Not Sell or Share” link, because there is nothing behind it.
The categories we collect are identifiers (name, email, IP address), commercial information (your subscription), internet activity (server logs), and the content you create. Section 3 says what each is for and how long it stays. We will never discriminate against you for exercising these rights — the product does not change based on whether you have asked us something.
12Children
The service is for adults doing property deals and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, write to privacy@negotiationinc.com and we will delete it.
13Changes to this page
If we change something material — a new company in the table in section 6, a new category of data in section 3 — we will email account holders before it takes effect, and the date at the top will change. We will not quietly add an analytics provider and rely on you re-reading this page.
14Getting hold of us
Contact
Privacy, exports, deletion and anything on this page — privacy@negotiationinc.com
Everything else — support@negotiationinc.com
Related: the terms cover what the software is and is not, and the billing page covers money.