Privacy Policy
Last updated: July 17, 2026
CommercialView ("we," "us") provides a survey-mapping platform for commercial real estate brokers at commercialview.ai (the "Service"). This policy explains what information we collect, how we use it, and the choices you have. It applies to brokers with accounts and to clients who view surveys through share links.
1. Information we collect
- Account information. Name, email address, and a password (stored only as a salted cryptographic hash — we cannot read your password).
- Content you upload. Property surveys, brochures, floor plans, photos, addresses, and related notes that brokers add to the Service. Uploaded documents may contain business contact information of third parties (for example, listing brokers named in a brochure).
- Share-link activity. When a client opens a share link we process the link token, and for password-protected links, an essential session cookie that remembers a successful unlock. We log failed unlock attempts by IP address to prevent abuse.
- Technical logs. Standard web-server logs (IP address, timestamp, request path) kept for security and troubleshooting.
- Security and account records. When you sign in we record the internet address you connected from, the type of device and browser you used, and the time. We keep a record of actions taken in your account, such as signing in, deleting a file or creating a client link, together with who did it and when. We use this to keep accounts secure, to enforce the limit on how many devices can use one login, and to answer questions like who changed something. You can see and remove your own devices at any time from your account. We keep internet addresses for up to 180 days and then remove them from these records, while keeping the rest of the entry.
- Payment information (when subscriptions are enabled). Payments are handled by Stripe; card details go directly to Stripe and never touch our servers. We store only opaque customer and subscription identifiers.
2. How we use information
- To operate the Service: display surveys and maps, generate share links and tour books, and process uploaded documents.
- Automated document review. Uploaded brochures are processed automatically to remove competing brokerage branding and contact details before a client can see them. Page images from your documents are sent to Anthropic (our AI provider) solely for this review; Anthropic processes them on our behalf and does not use them to train its models.
- Geocoding. Property street addresses (only the address, nothing else) are sent to OpenStreetMap's Nominatim service to place pins on the map.
- To secure the Service: rate limiting, abuse prevention, and access logging.
- To communicate with you about your account.
3. Service providers (subprocessors)
- DigitalOcean — cloud hosting (United States).
- Anthropic — automated document review, as described above.
- OpenStreetMap / Nominatim — address geocoding.
- Stripe — payment processing (when subscriptions are enabled).
4. Sharing
Content a broker uploads is visible to that broker's account, teammates the broker adds, and clients the broker shares it with via a share link. We never sell personal information, and we disclose it outside the providers above only if required by law or to protect the Service from abuse.
5. Retention
- Account data and uploaded content are kept while the account is active.
- Items a broker deletes go to a Trash and can be restored; purged items are permanently removed from the live system.
- Server backups are kept on a rolling 14-day window.
- Original uploaded documents are retained so the automated review can be re-run and audited; ask us to delete them entirely and we will.
6. Security
All traffic is encrypted with TLS. Passwords are hashed, access to client-facing files is deny-by-default (a document is never visible to a client until its review completes), share links are scoped to exactly the survey or company they were created for, and repeated failed logins are rate-limited and blocked.
7. Your rights
Email hello@commercialview.ai to access, correct, export, or delete your personal information. If you are a California resident, the CCPA/CPRA gives you the rights to know, delete, correct, and opt out of sale or sharing — we honor all of these, and we do not sell or share personal information as those laws define it. If you appear in a document uploaded by a broker (for example, as a contact on a brochure) and want it removed, contact us and we will address it promptly.
8. Children
The Service is for business use and not directed to anyone under 16; we do not knowingly collect information from children.
9. Changes
We will post any changes here and update the date above. Material changes will be flagged to account holders when they sign in.