Concessio privacy & data

When you create an account or request a demo, we collect your name, work email address, company name, job title, and optionally your firm’s assets under management range.

We collect standard web analytics through Vercel Analytics, including pages visited, feature usage patterns, API request counts, and session duration.

Uploaded documents. You may upload concession agreements, fund documents, or other files for analysis.

Your account data authenticates you and determines your access tier.

Aggregated, anonymized usage patterns help us prioritize features.

We send transactional emails (account verification, alert notifications, intelligence digests) via Resend.

Account data is retained for the duration of your subscription and for 90 days following account closure.

Uploaded documents are permanently deleted within 30 days of a deletion request or account closure.

Platform usage analytics are retained in anonymized form indefinitely.

API access logs are retained for 12 months.

Our infrastructure is hosted in the United States (Vercel, Supabase).

your data is transferred to the US under Standard Contractual Clauses maintained by our sub-processors.

We use the following sub-processors to deliver the service: Provider Purpose Data Processed Vercel Hosting, CDN, analytics Web requests, session data Supabase Database infrastructure All platform data Clerk Authentication Email, password hashes, session tokens Anthropic AI analysis (no data retention) Document text for analysis Resend Transactional email Email address, message content Mapbox Map visualization Geographic coordinates only

Uploaded documents are permanently deleted within 30 days of a deletion request or account closure.

Access. Request a copy of the personal data we hold about you.

Rectification. Request correction of inaccurate personal data.

Erasure. Request deletion of your personal data, subject to legitimate retention needs.

Portability. Request your data in a structured, machine-readable format.

Restriction. Request that we limit processing of your data in certain circumstances.