Privacy Policy
Last updated October 26, 2026
Underridge (app.underridge.com and underridge.com) is operated by Greenridge Technologies, part of Greenridge Group, LLC ("we"). This policy explains what we collect when you use Underridge and what we do with it.
What we collect
- Account details. When you sign in with Google or email, we receive your name and email address. We never receive your Google password.
- Deal materials you upload. Documents, data rooms and answers you provide for an underwrite, and the packages generated from them.
- Workspace data. Your workspace name, its members and invite links.
- Billing. Payments are handled by Stripe. We receive confirmation of a purchase and your credit balance, not your card number.
- Gmail, only if you connect it. If you connect a Gmail inbox, we use the permissions you approve on Google's consent screen to find deal materials, match them to your pipeline, save reply drafts, or send messages you ask us to send. We never send an email without your action. You can disconnect in the app at any time and revoke access at myaccount.google.com/permissions.
- Google Drive files, only if you pick them. If you import from Google Drive, we can open only the files you choose in Google's file picker, and we handle them like other deal materials.
- Feedback and usage. Ratings, feedback and corrections you send, and a record of what you do in the app, such as runs started and files exported.
- Visit statistics. Our hosting providers count pages viewed on underridge.com and in the app.
- Connector requests, only if you connect an AI assistant. The tool calls an assistant such as Claude makes to Underridge for you, and their inputs. See Claude and other AI assistants below.
How we use it
- To run the underwrites you request. Your materials are processed to produce the package and sent to our AI model provider (Anthropic) for that purpose only.
- To show your deals to you and to the other members of any workspace you join. Workspace members see each other's deals, including deals run before they joined.
- To operate billing, security and support.
We do not sell your data and do not use your deal materials or Gmail data for advertising. Data received from Google APIs is used only to provide the features you turned on, in line with the Google API Services User Data Policy, including its Limited Use requirements.
Where it lives
Account and underwrite records are stored with Supabase. The app is served by Cloudflare. Each account can read only its own records, through row-level security in the database and server queries scoped to your account, except that members of a workspace see each other's deals. Different workspaces cannot read each other's data.
Service providers
These companies handle personal data or deal materials for us so we can run Underridge:
- Anthropic: the AI model. It reads the text of your deal materials and your requests and drafts your results. If you use the Gmail inbox features, it also reads the sender, subject, preview and attachment names of the emails they check. It also sorts the feedback and corrections you send us for our internal review, with email addresses, links and phone numbers removed. Text from bank pilot accounts is left out.
- Supabase: our database, sign-in and private file storage. It sends sign-in emails, either itself or through an email delivery provider.
- Cloudflare: runs the Underridge app and its API, and counts visits to app pages.
- Google: sign-in with Google, and the Gmail and Google Drive connections if you turn them on.
- Stripe: card payments. It receives your account email and the card details you enter on its checkout page.
- Vercel: hosts underridge.com and its visit statistics, and runs the purchase webhook that adds your credits. It receives the buyer's email address from Stripe when a purchase completes.
- Resend: sends emails you write in the Desk when they do not go through your connected Gmail.
- GitHub: our internal review of product feedback. It holds short feedback quotes with email addresses, links and phone numbers removed. Text from bank pilot accounts is left out.
- Slack: internal notices to our team. A notice of a purchase can include the buyer's email address.
Our security page says which of these handle data from bank pilot accounts.
Retention and deletion
Underridge is set to delete uploaded files when a run succeeds, and 30 days after a failed run last moved. We keep your account, saved results, corrections and feedback while your account is active, until they are deleted. To delete your account and its underwrites, email support@greenridgegroup.org from the address on the account. Copies in any database backups and at our service providers, including Anthropic's standard API retention, are removed on those providers' own schedules.
Claude and other AI assistants
You can connect Underridge to Claude, or to another AI assistant that supports the Model Context Protocol (MCP), through our connector at app.underridge.com/mcp. This section explains what happens when you do. The rest of this policy applies too.
- What the assistant sends us. When you ask the assistant to use Underridge, it calls one of our tools and sends us that tool's inputs. Depending on the tool, these can be: deal documents, or links to them, that you ask it to underwrite, with a deal name and optional intake answers (such as your role, objective, currency or ticket size); deal ids; pipeline entries (a name and, if given, the type, market, structure, size and where the deals came from); and tasks (a title, the deal it belongs to and, if given, a counterparty). When the assistant sends a link, our servers download the file from that address to underwrite it.
- What we do not receive. Only what the assistant puts into a tool call reaches us. We do not receive the rest of your conversation with the assistant, the other messages or files in it, or the assistant's memory.
- What we send back. Our tools return data from your account to the assistant, such as your account email and credit balance, your deals and their verdicts, underwriting packages (a summary by default, or the parts the assistant asks for), the file names of the documents a deal was underwritten from, pipeline entries and tasks. Once returned, that data is part of your conversation, and the assistant's provider handles it under its own terms and privacy policy (for Claude, Anthropic's).
- What we store and for how long. Tool inputs are handled like anything you enter in the Underridge app. To run an underwrite, we hold the documents in private storage (Supabase) until the run finishes and delete them once it completes; if a run fails, they are kept with that deal so it can be retried, and deleted 30 days after the run last moved. The text we read from the documents, with your intake answers, is sent to our AI model provider (Anthropic) to produce the package, as described in How we use it. We save the deal to your account: its name, your intake answers, the finished package and a short record of each document it read (its name and a note on what was read, such as the page count or sheet names). Pipeline entries and tasks are saved to your account too. All of it appears in the app like any other deal, and we keep and delete it as described in Retention and deletion.
- How the connector signs in. The connector uses OAuth. When you connect, the assistant opens an Underridge page where you sign in to your Underridge account (signing in creates one if you are new) and choose Allow or Cancel. The page shows where you will be returned. If you allow it, we give the assistant an access key for your account, named after the assistant (for example "Claude connector"). We store only a SHA-256 hash of the key, never the key itself, along with its name, its first few characters so you can recognize it, your email, and when it was created, last used and revoked. The assistant renews access with an encrypted refresh token that it holds and we do not store; each renewal replaces the key with a new one and revokes the old one. The key works only with Underridge's API and connector, and only for your account. With it, the assistant can read your deals, packages, tasks and credit balance, start underwrites (which use your credits), and add pipeline deals and tasks. No connector tool deletes data.
- How to disconnect. Remove the Underridge connector in the assistant's settings (in Claude: Settings, then Connectors). To end access on our side right away, sign in to Underridge, open Settings, then API & MCP, and revoke the key named after the assistant. A revoked key stops working at once and cannot be renewed, so the assistant has to connect again. Removing the connector in the assistant does not revoke the key by itself, so revoke it in Underridge as well. Deals, pipeline entries and tasks created through the connector stay in your account after you disconnect. To delete your account and its data, see Retention and deletion.