Privacy Policy
Last updated: August 19, 2026
CommercialView ("we," "us") provides a survey-mapping platform for commercial real estate brokers at commercialview.ai (the "Service"). This policy explains what information we collect, how we use it, and the choices you have. It applies to brokers with accounts and to clients who view surveys through share links.
1. Information we collect
- Account information. Name, email address, and a password (stored only as a salted cryptographic hash — we cannot read your password).
- Content you upload. Property surveys, brochures, floor plans, photos, addresses, and related notes that brokers add to the Service. Uploaded documents may contain business contact information of third parties (for example, listing brokers named in a brochure).
- Share-link activity. When a client opens a share link we process the link token, and for password-protected links, an essential session cookie that remembers a successful unlock. We log failed unlock attempts by IP address to prevent abuse. We also record that the link was opened and which buildings were opened from it, and we show that to the broker who shared it. These records are kept against a one-way key we work out from the visitor's internet address and browser. We do not store the address or the browser details themselves, and no name is attached to the key. Repeated opens by the same visitor within half an hour count as one. Recording an open does not read anything from, or store anything on, the client's device.
- Client reactions. If a client marks a building as a favorite or passes on it from a share link, we store that choice and show it to the broker who shared the link. It is stored against the link it came from, not against a name.
- Technical logs. Standard web-server logs (IP address, timestamp, request path) kept for security and troubleshooting.
- Security and account records. When you sign in we record the internet address you connected from, the type of device and browser you used, and the time. We keep a record of actions taken in your account, such as signing in, deleting a file or creating a client link, together with who did it and when. We use this to keep accounts secure, to enforce the limit on how many devices can use one login, and to answer questions like who changed something. You can see and remove your own devices at any time from your account. We keep internet addresses for up to 180 days and then remove them from these records, while keeping the rest of the entry.
- Payment information (when subscriptions are enabled). Payments are handled by Stripe; card details go directly to Stripe and never touch our servers. We store only opaque customer and subscription identifiers.
2. How we use information
- To operate the Service: display surveys and maps, generate share links and tour books, and process uploaded documents.
- Automated document review. Uploaded brochures are processed automatically to remove competing brokerage branding and contact details before a client can see them. Page images from your documents are sent to Anthropic (our AI provider) solely for this review; Anthropic processes them on our behalf and does not use them to train its models.
- Geocoding. Property street addresses (only the address, nothing else) are sent to OpenStreetMap's Nominatim service to place pins on the map.
- Share-link reporting. We show a broker when their own client link was opened, which buildings were opened from it, and which ones their client marked as a favorite or passed on. This is reporting between a broker and their own client, and it goes to no one else.
- To secure the Service: rate limiting, abuse prevention, and access logging.
- To communicate with you about your account.
3. Service providers (subprocessors)
- DigitalOcean — cloud hosting (United States).
- Anthropic — automated document review, as described above.
- OpenStreetMap / Nominatim — address geocoding.
- Stripe — payment processing (when subscriptions are enabled).
4. Sharing
Content a broker uploads is visible to that broker's account, teammates the broker adds, and clients the broker shares it with via a share link. We never sell personal information, and we disclose it outside the providers above only if required by law or to protect the Service from abuse.
5. Retention
- Account data and uploaded content are kept while the account is active.
- Items a broker deletes go to a Trash and can be restored; purged items are permanently removed from the live system.
- Server backups are kept on a rolling 14-day window.
- Original uploaded documents are retained so the automated review can be re-run and audited; ask us to delete them entirely and we will.
6. Security
All traffic is encrypted with TLS. Passwords are hashed, access to client-facing files is deny-by-default (a document is never visible to a client until its review completes), share links are scoped to exactly the survey or company they were created for, and repeated failed logins are rate-limited and blocked.
7. Your rights
Use our contact form to access, correct, export, or delete your personal information. It records your request and gives you a reference to quote if you follow up. You can also write to hello@commercialview.ai. If you are a California resident, the CCPA/CPRA gives you the rights to know, delete, correct, and opt out of sale or sharing — we honor all of these, and we do not sell or share personal information as those laws define it. If you appear in a document uploaded by a broker (for example, as a contact on a brochure) and want it removed, contact us and we will address it promptly.
8. Children
The Service is for business use and not directed to anyone under 16; we do not knowingly collect information from children.
9. Changes
We will post any changes here and update the date above. Material changes will be flagged to account holders when they sign in.