Acretix

Legal

Privacy Policy

What the Acretix product stores, shares in a deal, and makes available for verification.

Version
privacy-2026-09-09-draft-2
Effective
2026-09-09
Status
Draft v1 - last updated 2026-09-09 - pending counsel review

Placeholder pending legal review. This document is a structural draft. The final wording is being prepared by counsel and will replace this text.

TODO — founder input needed (6)

Deliberately unanswered. Each item below was left blank because it could not be verified against the product — not overlooked. A stated practice we do not follow is worse than a gap.

  • The legal entity acting as controller, its legal name and address, and a monitored privacy contact address.
  • Retention periods for account, deal, invite, notification, billing, backup, and proof data.
  • Applicable privacy-law commitments, individual rights, and the process for access, correction, export, or deletion requests.
  • A complete list of subprocessors, the purposes for which each processes data, and any required notices or contractual terms.
  • Data-storage locations and any international transfer mechanism.
  • Age limits or other eligibility requirements for the service.

1. What this policy covers

This policy describes the Acretix deal and verification product. It is a product-specific draft, not a statement of facts that have not yet been decided. Missing legal and operational details are listed at the top of this page.

2. Information stored by the product

The profiles table holds account information, including an email address and role. The deal_participants table holds deal-party information used to identify and authorize people participating in a deal. The deal_invites and participant_invites tables hold an email address and other information needed to invite a person to a deal.

The notification_sends table records notification delivery activity connected to a deal, cycle, or statement. Deal records and related review, measurement, statement, and proof records hold the information submitted and generated for that deal workflow.

3. Sharing with the other deal party

a deal is shared, and the other side can read it. The owner and counterparty each see the other side's submitted data for the deal they share. This sharing is part of the verification workflow, not an optional public posting.

The platform uses deal-party records and access controls to determine participation in a deal. Information is not made available to unrelated users merely because it is in the platform.

4. Email and invitations

The product sends invitation and notification emails through its configured mail provider. Invite and notification records support those sends and the deal workflow.

5. AI verification

Verification determinations use AI models. Depending on the configured review path, a review may use the service's inline AI review or be delegated to the external Acretix Verify engine. A review can request more information instead of making a determination when the available evidence is insufficient.

A case can also enter human review through the escalation ladder. The product supports analyst, auditor, and arbitration tiers for escalated cases; the case state and role determine when those actions are available.

6. Billing information

Stripe billing supports service plans and credits. Where enabled, Acretix also records success-fee metering for a deal. This billing is for Acretix service use and is separate from any settlement the deal parties make with each other.

7. Settlement proofs and public verification

Issued statements have signed settlement proofs designed to be checked by third parties outside the platform. The public verification path evaluates a supplied signed engine proof against trusted published keys and the engine's terminal record when configured, and rejects proofs that do not authenticate or match that trusted record.

Sharing a proof with a third party is a disclosure to that recipient. The proof is designed to remain checkable outside the platform.

8. Backups

The repository includes a daily backup process for the database and the evidence-storage bucket. This policy does not state a retention period for those backups; that missing fact is listed above.

9. Changes to this draft

This is a counsel-review draft. A revised Privacy Policy will receive a new version identifier so an acceptance record can identify the text presented at signup.