Legal
This Privacy Policy describes how Zeal Opco, LLC dba Title & Survey Review (“Company,” “we,” or “us”) collects, uses, stores, and deletes information when you use the Title & Survey Review platform (“Service”). We are a data processor for your deal documents — not a data broker. We do not sell your data.
Name, email address, and password (hashed) when you create an account.
Borrower entity name, lender name, loan amount, and anticipated note date — provided by you during onboarding. All optional.
PDF files you upload (ALTA Survey, Title Commitment, Flood Determination, Zoning Report). These are transmitted to our AI processing pipeline, which includes Anthropic's Claude API and Microsoft Azure Document Intelligence. Both providers process your document content to extract text and structure. Documents are not used to train AI models.
Findings, scores, extracted text, and recorded document analyses produced by our review engines are stored associated with your review.
Payment is processed by Stripe. We do not store your card number or full payment details. We retain Stripe session and payment intent IDs for reconciliation.
Standard server logs including IP address, browser type, and access timestamps. These are used for security and performance monitoring.
To enforce the one-free-review-per-account policy and prevent abuse, we retain a one-way hash of your email address in a separate consumed_free_reviews table. This record survives account deletion. It does not contain your name, password, or any reversible identifier.
The “Ask a question” assistant appears on every page, including to visitors who are not signed in. Questions you type and the assistant's answers are sent to Anthropic's Claude API to generate a response; on a report page, the assistant is also given that review's findings as context. If you are not signed in, the assistant answers a few questions and then asks for your email address before it will continue. We use that address to follow up with you about the product. You do not have to provide it — but the assistant will not answer further questions in that browser session until you do. We do not store your IP address; anonymous usage is rate-limited using a salted, one-way hash of it.
You can ask to see a sample Lender Readiness Report™ without uploading anything or creating an account. To do that we ask for your name and email address, and we record which page you asked from. We email you a copy of the sample and may follow up with you about the product. We do not store your IP address; this request is rate-limited using a salted, one-way hash of it.
Our public marketing pages — the homepage, features and use-case pages, the glossary, and our policy, security and contact pages — load two third-party marketing tools. ID Pixel (idpixel.app) records the pages you view, how you arrived, and basic information about your device and browser, and stores a persistent identifier in your browser. It is designed to identify website visitors, which can include matching your visit to your name and email address using data from third-party sources. Our CRM provider, HighLevel (LeadConnector), records the pages you view and the forms you submit on those pages; it excludes password fields. Neither tool is loaded on the sign-in, account, upload, dashboard or report pages, so neither receives your documents, your reports, your deal information, or your login credentials.
We use the data we collect to: (a) operate and improve the Service; (b) generate your Lender Readiness Report™; (c) communicate with you about your account and reviews; (d) process payments; (e) enforce our Terms of Service; (f) comply with legal obligations; (g) follow up about the product with visitors who voluntarily provide their email through the chat assistant or when requesting a sample report; (h) understand how visitors use our public website and follow up with prospective customers, using the website activity described in §1.
We do not use your documents or deal data to train AI models. We do not sell your data to third parties. We do not use your documents, reports, deal information or account data for advertising.
We rely on the following sub-processors to deliver the Service. Each is bound by a Data Processing Agreement:
These tools run only on our public marketing pages, as described in §1. They are not sub-processors of your documents or reports and never receive them: ID Pixel (idpixel.app) — website visitor identification; HighLevel (LeadConnector) — CRM and website activity tracking.
Review reports, uploaded documents, extracted text, and AI processing logs are retained for 90 days from the date the review is created, unless you extend access from your dashboard or delete the review sooner.
At the end of the retention period, data is automatically and permanently deleted — including files stored in our document storage, extracted text, findings, and AI logs. This is a hard delete, not an archive.
Account data (name, email, profile settings) is retained until you delete your account.
The one-way email hash in consumed_free_reviews is retained indefinitely to prevent abuse of the free review policy. It cannot be reversed to your email address.
Chat assistant sessions and any email address provided to it are retained for 90 days from your last message, then automatically deleted — the same window as everything else in this section. This is not a special case for chat data; we do not hold marketing contacts collected this way any longer than we hold anything else.
Sample report requests (your name and email) are retained for 90 days from the date of the request, then automatically deleted — again, the same window as everything else.
Your ALTA Survey and Title Commitment PDFs — including all pages and embedded data — are transmitted to Anthropic and Azure Document Intelligence for text extraction and AI analysis. These providers process your document content as data processors on our behalf. They are contractually prohibited from using your data to train their models or sharing it with third parties.
We do not share your documents or deal data with any other third party, including other users, lenders, title companies, or brokers.
All data is encrypted in transit (TLS) and at rest. Document storage uses private Supabase Storage buckets with row-level security enforced at the database layer. Your reviews and documents are not accessible to other customers.
Staff cannot open your uploaded documents through the application. Administrative access requires an administrator account and multi-factor authentication, and the console displays review metadata only. A separate internal endpoint, subject to the same controls, returns extracted text and findings for support and debugging. Direct database and storage access is limited to named engineering personnel with multi-factor authentication and is used only for incident response.
No security system is impenetrable. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.
Depending on your jurisdiction, you may have the right to: access your personal data; correct inaccurate data; request deletion of your data; restrict processing; and data portability.
To exercise any of these rights, submit a Data Subject Access Request (DSAR) to:
information@titleandsurveyreview.com
We will respond within 45 days. We may need to verify your identity before processing the request. A DSAR is checked against account data and any email address you provided through the chat assistant or when requesting a sample report, whether or not you have an account.
You can delete your account at any time from your dashboard. Deletion permanently removes your name, email, profile settings, all reports, all documents, all findings, and all AI processing logs associated with your account. The email hash in consumed_free_reviews is not removed, as it is necessary to prevent abuse.
We use session cookies for authentication, set by our hosting infrastructure (Vercel and Supabase). If you use the chat assistant without an account, we set one additional cookie to remember your conversation session (so you are not asked for your email on every question); it does not identify you beyond that session and expires after 30 days. If you request a sample report, we set a cookie that lets you reopen it for 30 days without filling in the form again; it contains no personal information. On our public marketing pages only, ID Pixel stores a persistent visitor identifier in your browser and HighLevel may set its own cookies, to support the website activity tracking described in §1; neither is used on the sign-in, account, upload, dashboard or report pages. Our optional feedback form, provided by Tally, loads on completed report pages and may set its own cookies; it receives no document content.
The Service is not directed to individuals under 18. We do not knowingly collect personal information from minors.
We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-app notice before they take effect. Continued use of the Service after the effective date of an updated policy constitutes your acceptance.
Privacy questions, DSARs, or requests to exercise your rights:
information@titleandsurveyreview.com
Zeal Opco, LLC dba Title & Survey Review
637 Broadway Street, Suite B-148, Boulder, CO 80305