Privacy Policy
Last updated: July 19, 2026
ANVIL is a real-estate CRM operated as a private alpha by Raz Levy (“we”, “us”). This policy explains what data ANVIL collects, how it’s used, and your rights.
For questions: privacy@anvil.estate
1. What we collect
Account information you provide. Email address, name, workspace/team details, real-estate deal data (properties, contacts, vendors, investors, budgets, SOWs, communications).
Google account data (via OAuth). When you connect your Gmail:
- Your email address (
userinfo.email) - Email content and metadata (
gmail.readonly) — used to auto-ingest wholesaler leads, offers, and receipts into your ANVIL account. We only process emails matching your configured lead intake patterns. - The ability to send emails on your behalf (
gmail.send) — used only for replies you explicitly initiate from ANVIL’s inbox interface. We never send emails without your action.
We do not sell, share, or use Google user data for advertising, or for anything beyond providing the ANVIL service to you.
Automatically collected. IP address, browser type, pages viewed (via Vercel Analytics), error logs (Vercel Observability). No third-party ad trackers.
2. How we use it
- Provide the ANVIL service (deal intake, tracking, reporting, communications)
- Generate AI-powered insights and summaries (via Anthropic’s Claude API)
- Send you notifications you’ve opted into
- Diagnose bugs and improve the product
- Comply with legal obligations
3. Third-party sub-processors
ANVIL uses these services to operate:
- Google — Gmail API (email ingestion + sending), Maps + Places API
- Anthropic — Claude AI for insights, condition analysis, listing generation
- Supabase — database + authentication
- Vercel — hosting + observability
- Amazon Web Services (SES, Lambda, S3) — email infrastructure + file storage
- RentCast — property data enrichment
Each sub-processor accesses only the data necessary to perform its function.
4. Data retention
- Account and deal data: retained while your account is active + 90 days after deletion request
- Email data ingested from Gmail: retained per your account retention settings (default 12 months)
- Error logs: 30 days
- On account deletion: we permanently delete your data within 30 days
5. Your rights
You may:
- Access your data (export from Settings → Data)
- Correct inaccurate data (edit in-app or email us)
- Delete your account and data (Settings → Danger Zone → Delete Account, or email us)
- Revoke Google access at any time via your Google Account → Security → Third-party apps
6. Security
Data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access is limited to authorized systems and, when necessary, to Raz Levy personally. We follow industry-standard security practices; no system is 100% secure.
7. Children
ANVIL is not intended for anyone under 18.
8. Changes
We may update this policy. Material changes will be announced in-app or by email at least 14 days before taking effect.
9. Contact
privacy@anvil.estate
ANVIL is currently operated as a sole proprietorship by Raz Levy, and may be assigned to Levy Technologies or another successor entity in the future.