Privacy Policy

Last updated: October 7, 2026

PRIVACY POLICY

This Privacy Policy explains how DELFIN ONE, LLC (“DELFIN”, “we”, “us” or “our”) collects, uses, shares, protects and retains information when you use the DelfinOne developer portal, lender portal, back office and related websites and services (the “Services”). It applies together with our Terms of Service.

1. INFORMATION WE COLLECT

Information from Google Sign-In. If you choose to sign in with Google, we receive your name, email address and profile picture from your Google account, and the Google account identifier used to recognize you on later sign-ins. We do not request access to your Gmail, Google Drive, Calendar, contacts or any other Google data.

Account information. Name, email address, phone number (used for verification codes), password (stored only as a hash by our authentication provider), company name and role.

Project and financing information. Property addresses, project budgets, scenarios, financing requests and the documents you upload, which may include financial statements, tax returns and other Sensitive Financial Documents described in our Terms of Service.

Payment information. Subscription and billing details are processed by Stripe. We do not store your full card number.

Usage information. Pages visited, actions taken in the Services, device and browser information, IP address and session recordings of your use of the Services, collected through our product analytics provider to diagnose errors and improve the product.

2. HOW WE USE INFORMATION

We use the information above to create and secure your account, authenticate you (including with Google Sign-In), provide the analyses, reports and financing workflows you request, share your financing requests with the lenders you choose, send transactional emails and verification codes, process payments, provide support, and diagnose and improve the Services. We do not sell your information and we do not use it for advertising.

Google user data. The name, email address and profile picture received from Google are used only to create and identify your DelfinOne account and to show your name and picture inside the Services. DELFIN’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to develop, improve or train generalized artificial intelligence or machine learning models, and we do not transfer it to third parties except as described in Section 3.

3. HOW WE SHARE INFORMATION

We share information only:

  • With lenders you choose. When you submit a financing request or grant a lender access, that lender receives the project information and documents you share, under the conditions in our Terms of Service.
  • With service providers that operate the Services on our behalf, bound by contract to use the information only to provide their service to us: Amazon Web Services (hosting and storage), Supabase (authentication and database), MongoDB Atlas (database), Stripe (payments), Resend and Amazon SES (email), Twilio (SMS verification codes), PostHog (product analytics), HubSpot (customer relationship management), OpenAI and Anthropic (AI processing of project information and documents to generate the analyses you request), and Google Maps Platform (address validation, geocoding and maps).
  • When required by law, to protect our rights, or in connection with a merger, acquisition or sale of assets, subject to this Privacy Policy.

Google user data is never shared with lenders or service providers for their own purposes.

4. HOW WE PROTECT INFORMATION

Information is encrypted in transit (TLS) and at rest by our hosting, database and storage providers. Access to production systems is limited to authorized personnel, protected by authentication and logged. Documents are stored in private storage and are accessible only to you, the members of your company and the lenders you grant access to.

5. RETENTION AND DELETION

We keep your information for as long as your account is active and as needed to provide the Services, comply with legal obligations, resolve disputes and enforce our agreements. You may request access to, correction of, or deletion of your information, including the information received from Google, by writing to Info@delfinone.com. When an account is deleted we remove or anonymize its personal information, except where we are required to keep it by law. You can also revoke DelfinOne’s access to your Google account at any time at https://myaccount.google.com/permissions.

6. YOUR CHOICES AND RIGHTS

Depending on where you live, you may have rights to access, correct, delete or limit the use of your personal information. California residents have the rights described in the CPRA, including for Sensitive Personal Information as described in our Terms of Service. To exercise any right, contact Info@delfinone.com.

7. CHILDREN

The Services are intended for businesses and are not directed to anyone under 18. We do not knowingly collect information from children.

8. CHANGES

We may update this Privacy Policy. The “Last updated” date shows the latest version, and material changes will be communicated through the Services or by email.

9. CONTACT

DELFIN ONE, LLC - Info@delfinone.com