CREMODEL
Privacy Policy
Effective September 2026. The short version: a document you drop in is sent once for processing and is not stored; what you type stays in your browser unless you save a deal to your account; we keep only what an account needs to work; and we do not sell your information to anyone, ever.
What we collect, and why
Your account. Your email address, and if you use a password, a hash of it, held by our authentication and database provider. If you sign in with Google we receive your email address from Google and nothing else. We use it to identify your account, to let you back in, and to write to you about the service.
Your subscription. Payment is processed by Stripe, Inc. Card numbers, bank details and billing addresses are collected and held by Stripe, not by us. We never see or store a card number. What we hold is whether your subscription is active, an opaque customer reference, and the amount and date of any extra reads you bought, so the paywall and the allowance work.
Deals you save. When you save a deal we store it against your account: its name, the address if you typed one, every assumption, the rent roll, any scenarios, any actual figures you entered against a purchased asset, and a small summary of the result so the pipeline can show a price and a return without opening it. They remain yours. Deals you run without saving stay in your browser and never reach us.
Your house assumptions. If you set a house standard, the figures in it are stored against your account so they follow you to another machine. They are conventions, not personal information, and only you can read them.
The read ledger. To make the allowance work and to keep a re-run free, we record that a read ran, when, whether it succeeded, how much of the document it covered as page and tenant counts, and a one-way fingerprint of the document. The fingerprint is a hash: it lets us recognize the same document if you run it again, and it cannot be turned back into the document or into anything in it. We do not keep the document, its pages, its text or its figures.
Reports you send us. If you tell us the model got something wrong, we keep what you typed, the deal name, the engine version and the site build, so it can be reproduced and fixed, along with any points awarded. If you tick the box to send the deal on screen with it, that deal is stored with the report. Nothing is sent unless you press the button.
What we do not collect
The document is not stored. A PDF you drop in has its pages sent once for automated processing, the structured result comes back to your browser, and the document is processed in memory rather than kept. It is not used to train any model. The one exception is a document you choose to attach to a dispute or a report about a read: that copy is stored with the report so the read can be checked against it, and is kept as long as the report is.
Anything you paste or type, a rent roll, a T-12, the deal itself, is read entirely in your browser and never uploaded. We run no advertising trackers, no analytics that follow you between sites, and no third-party pixels. We do not collect your location, your contacts, or anything from your device beyond what a browser sends to any website.
Who processes it
We use a small number of providers, and only what the service needs reaches each one: an authentication and database provider that holds your account and your saved deals; Stripe for payments; a hosting and content network that serves the site; and an artificial intelligence document-processing provider, which receives the pages of a document you choose to read and returns the structured result. Each operates under its own security practices and under agreements that restrict what they may do with what they receive. These providers may process and store data in the United States and, depending on the provider, elsewhere; by using the service you understand your information may be processed in a country other than your own.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are used in United States state privacy law. We disclose information only to the providers above, and where we are compelled to by law or need to in order to protect the service or someone’s safety.
What stays on your own machine
Your browser keeps a small amount of local data on your own device: your sign-in session, the sheet you were last working on so a closed tab does not cost you an afternoon, your house assumptions, and small preferences. None of it is advertising, none of it is shared, and clearing your browser storage removes it. We use no cookies for tracking; the only browser storage the site sets is the kind described here.
How long we keep it
A saved deal is kept until you delete it or the account ends. A deal you delete goes to an archive for seven days, where you can restore it, and is then removed for good. The read ledger is kept while the account exists, because it is what the allowance counts. Reports you send are kept while the account exists.
When a subscription ends, the deals go with it. Access, saved deals and any unspent extra reads end with the paid period and are not recoverable. Export the report or the workbook before you cancel if you want to keep the work.
Your rights, and how to use them
You can see and change your saved deals at any time in the account panel, and delete any of them. To get a copy of what we hold on you, correct it, or delete your account and everything under it, write to contact@cremodel.com from the address on the account. We will act on it within 30 days and we will not charge you for it or treat you differently for asking.
Depending on where you live you may have further rights: to know what is collected and why, to have it deleted or corrected, to receive it in a portable form, to object to or restrict certain processing, to withdraw consent, and to complain to your data protection authority. Where the law requires a legal basis, ours is the performance of the contract you entered into by subscribing, and our legitimate interest in running, securing and improving the service.
Security, and its limits
Access to your data is restricted at the database level so that one account cannot read another’s. Traffic is encrypted in transit. The operator of the service can see account-level information, an email address, a subscription state, counts of deals and reads, in order to run the business, handle support and remove accounts on request. No system is perfectly secure, and we do not claim otherwise; if a breach affects you we will tell you and the relevant authority as the law requires.
The rest
The service is not directed at anyone under 18 and we do not knowingly collect information from children. If you believe a child has given us information, write to us and we will remove it. If this policy changes, the current version lives at this address and is dated at the top; if a change is material we will make it visible in the product rather than only here. © 2026 CREMODEL.
Questions: contact@cremodel.com · Back to the model · Terms · Privacy