P2D, a product of Sum28 · California, USA · Effective: [DATE]
Draft — pending legal review. This describes our intended practices and is not yet legal advice; final wording will be reviewed by counsel.
This policy explains what P2D (“we”, operated by Sum28) collects when you use the service to turn listing photos and your notes into marketing copy, how we use it, and your choices.
What we collect
Account — your email and a hashed password (we never store your password in plain text).
Inputs you provide — the listing photos you upload, any text you paste (fact sheets, notes, prior listings), and structured facts you confirm (architect, selling points, etc.).
Generated content — the descriptions we produce and your edits/refinements, kept in your history so you can return to them.
Usage & billing — credits, generations, refinements, and plan. Payments are processed by Stripe; we never see or store your card number.
What we deliberately do NOT keep
Your photos are processed in memory and are not stored on our servers after we extract the visual features. We keep the derived feature list, not the images.
Raw text you paste is not retained. We extract the factual selling points you then confirm, and discard the original pasted text.
This minimizes the data we hold about you and the listings you work on.
How we use your information
To provide the service — read photos, generate and refine copy, check it for grounding and Fair-Housing compliance.
To run your account, process payments, provide support, and prevent abuse and fraud.
To improve the service — we use de-identified, aggregated usage data and the AI-generated outputs we produce to evaluate and calibrate quality. We do not train models on your raw inputs or personal information, and we do not sell your data.
Service providers (sub-processors)
To operate, we share data with vetted providers strictly to deliver the service:
Anthropic and OpenAI — to process photos and text and generate copy. We use no-training / limited-retention API tiers where available.
CoreLogic (Trestle) — to look up listing facts you request by MLS # or address.
Stripe — to process payments.
Retention
We keep your generated listings and account data until you delete them or close your account. Photos and pasted source text are discarded after processing, as described above.
Your rights
You can access, export, or delete your data at any time from your account, or by contacting us. If you are a California resident, the CCPA/CPRA gives you the right to know what we collect, to delete it, to correct it, to opt out of “sale”/“sharing” (we do not sell or share your data for cross-context advertising), and to not be discriminated against for exercising these rights. If you are in the EU/UK, you have equivalent rights under the GDPR.
Security
We protect your data with encryption in transit and at rest, access controls, and a payment processor (Stripe) that handles card data under PCI-DSS. No system is perfectly secure, but we work to safeguard your information.
Children
P2D is a professional tool for real-estate agents and is not directed at anyone under 18.
Changes
We may update this policy; we’ll post the new effective date and, for material changes, notify you.