Private pilot
Privacy notice
This notice describes the information handled by the EstateSpend private pilot. The organization that invited you remains responsible for deciding which estate documents and users belong in its workspace.
Information handled
- Account details such as email address, display name, role, and authentication events.
- Invoices, quotes, contracts, scans, and related document metadata that authorized users upload.
- Structured fields, source-page evidence, findings, corrections, manager decisions, owner responses, and audit events derived from those documents.
- Limited operational diagnostics needed to keep the service secure and reliable. Production logs are designed not to contain document text or access tokens.
Why it is used
Information is used to authenticate authorized users, process private documents, provide evidence-backed spend review, produce manager-curated owner summaries, protect tenant boundaries, and diagnose service failures.
Service providers
The current pilot uses Supabase for authentication, database, and private storage; Railway for the application API and workers; Resend for authentication email delivery; and OpenAI for structured document processing and requested market research. These providers process information only as needed to deliver their part of the service.
Access and sharing
Workspace access is scoped by organization and role. Managers can review source documents and internal findings. Owners receive only confirmed summaries and items deliberately shared for their attention. EstateSpend does not sell personal information or use uploaded documents for advertising.
Retention and deletion
Documents moved to the in-app trash show their recoverable retention window before permanent deletion. Other pilot records are retained for operational, security, and audit needs under the inviting organization's pilot agreement. Authorized users can request account or workspace deletion through their organization administrator.
Security
The pilot uses private object storage, row-level tenant controls, HTTPS, verified email, strong-password rules, session limits, and optional authenticator-based multi-factor authentication. No online service can promise absolute security.
Your choices
You may ask the organization that invited you to correct profile information, review your access, or submit an applicable privacy request. For a private pilot inquiry, use the contact channel provided with your invitation.
Optional demo video
The public pilot page includes an optional YouTube demonstration. No YouTube player is loaded until you choose to play it. Playing the video or opening its YouTube link connects your browser to Google/YouTube, which handles connection and playback information under its own privacy terms. The demo uses synthetic documents, not customer workspace data.
Changes
This notice may be updated as the pilot changes. The effective date above will be revised when material terms change.