Privacy Policy

1. Information we collect

We collect information across three categories:

• Information you provide directly — account registration details (name, email), business information (basic, additional, and specific details), financial statements (Profit & Loss, Balance Sheet, Cash Flow, Income History), uploaded documents, and all inputs to our AI assistants Sienna (chat) and Hamsa (voice).
• Information generated by the platform — Fair Market Value calculations, EBITDA bridge analysis, normalized financial data, valuation reports, action plans, AI-generated narratives and insights, and autosaved drafts.
• Information collected automatically — usage logs, session data, device identifiers, browser type, IP address, timestamps, and page-interaction events used to maintain performance and security.

2. How we use your information

We use the information we collect to:

• Deliver core platform features — calculate Fair Market Value, generate valuation reports and action plans, produce charts and financial summaries, and power the real-time FMV dashboard.
• Power AI assistants — Sienna (chat) and Hamsa (voice) use your project data to provide contextual explanations, key findings, growth potential analysis, and risk assessments in plain language.
• Enable collaboration — facilitate sharing with teammates, advisors, and prospective buyers you invite through the Share panel.
• Maintain and improve the platform — monitor performance, detect anomalies, fix bugs, and improve valuation accuracy using aggregated, anonymized usage patterns.
• Communicate with you — send service updates, security alerts, onboarding materials, and legally required notices.

3. AI assistants & data processing

When you interact with Sienna (chat) or Hamsa (voice), your prompts and relevant project data are processed by AI models to generate responses. We retain AI conversation history within your project so you can reference past interactions. AI inputs and outputs are treated with the same confidentiality as all other project data and are not shared outside your project.

AI-generated report narratives. The platform also uses third-party AI providers (such as Google Gemini and other large language model services) to write narrative sections of your valuation reports and action plans — including executive summaries, key findings, valuation commentary, and the Buyer's, Seller's, and Investor's Perspective pages. To produce these narratives, the platform sends the AI providers financial metrics and business context — such as industry, business type, revenue, earnings, margins, cash flow, leverage, and valuation figures.

Shared without personally identifiable information. The data sent to AI providers for report generation is stripped of direct identifiers — your name, email address, and account contact details are not included. However, financial figures from your project are necessarily part of these prompts. If avoiding third-party AI processing of your financial data is important to you, do not use the AI-powered report and action-plan features, and avoid entering sensitive personal information (such as SSNs, bank account numbers, or third parties' personal details) into any field, document upload, or AI assistant on the platform.

Variability of AI output. Generative AI is non-deterministic: the same financial data can produce differently worded narratives from session to session and from refresh to refresh. This is expected behavior and does not indicate an error or a change in your underlying data.

4. Sharing & disclosures

We do not sell, rent, or trade your data. We only share information with:

• Collaborators you invite — teammates, advisors, or buyers you grant access to through the Share panel. You control permissions and can revoke access at any time.
• Infrastructure & service providers — cloud hosting, AI model providers, and payment processors that help us operate the platform. All vendors are bound by confidentiality and data protection agreements.
• Legal authorities — only when compelled by valid legal process, such as a court order or subpoena.

5. Cloud synchronization & storage

By default, project data is synchronized to secure cloud infrastructure hosted in the United States. This enables real-time collaboration, cross-device access, and full AI assistant functionality. If you prefer maximum data privacy, you can disable cloud synchronization in System Settings. Disabling cloud sync will restrict sharing, certain AI features, and multi-device access.

6. Security measures

We implement multiple layers of protection for your data:

• Encryption at rest and in transit for all project data, financial statements, and AI interactions.
• Session management with automatic expiration of compromised or inactive sessions.
• Role-based access controls enforced through the Share panel.
• Continuous monitoring for anomalous behavior and unauthorized access attempts.
• Regular security reviews of infrastructure and application code.

7. Data retention

We retain your project data — including business information, financial statements, valuation results, AI conversations, and generated reports — for as long as your account remains active. If you close your account or request deletion, we archive data for up to 30 days to allow for export requests, then permanently delete it unless a longer retention period is required by law or to resolve outstanding disputes.

8. Your rights & choices

You have control over your data through the platform and by contacting us:

• Access & update — edit your profile, business information, and financial data at any time through the platform.
• Manage collaborators — add or remove project members through the Share panel.
• Control cloud sync — enable or disable cloud data synchronization in System Settings.
• Export your data — request a full export of your project data by contacting support.
• Delete your account — close your account through System Settings or by contacting us. All associated data will be permanently deleted after the retention period.
• Opt out of communications — unsubscribe from non-essential emails at any time. Service and security notices cannot be opted out of.

9. Cookies & analytics

Practice Eval uses essential cookies and local storage to maintain your session, remember preferences (such as dark mode and sidebar state), and ensure the platform functions correctly. We may use anonymized, aggregated analytics to understand usage patterns and improve the product. We do not use third-party advertising trackers.

10. International data transfers

Practice Eval stores and processes data in the United States. If you access the platform from outside the US, your information will be transferred to and processed in the United States. We rely on contractual safeguards, including Standard Contractual Clauses where applicable, to ensure your data receives adequate protection regardless of your location.

11. Children

Practice Eval is a professional business valuation platform intended for users who are at least 18 years of age. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided data to the platform, please contact us immediately so we can delete it.

12. Changes to this policy

We may update this Privacy Policy when we introduce new features, change AI capabilities, or adjust our data practices. When changes are material, we will notify project owners by email or in-app message at least 14 days before the changes take effect. The "Last updated" date at the top of this page will always reflect the most recent revision.