Privacy Policy

Effective date: April 20, 2026

1. Overview

Lucky Duck Group, LLC (“Lucky Duck Group,” “we,” “us,” or “our”) operates TrueNOI at truenoi.io. This Privacy Policy describes how we collect, use, store, and share information when you use TrueNOI. We take data privacy seriously and collect only what is necessary to deliver the Service.

2. Information We Collect

2.1 Information you provide directly

  • Email address — required to receive analysis reports and follow-up communications
  • Sponsor and deal names — optional fields you provide when submitting a document for grading
  • Uploaded documents — PDFs you upload for analysis (PPMs, offering memoranda, pitch decks)
  • Account information — name, email, and password if you create a paid account
  • Payment information — handled entirely by Stripe; we do not store payment card numbers

2.2 Information collected automatically

  • IP address — collected at submission time for rate limiting and abuse prevention
  • Usage data — pages visited, features used, timestamps, browser and device type
  • Cookies — session cookies for authentication; no third-party advertising cookies

3. How We Use Your Information

  • To perform document analysis and deliver grader reports, deal reviews, and other purchased services
  • To send transactional emails including report delivery, account confirmation, and billing notifications
  • To send follow-up nurture emails related to your grader report (you may opt out by replying STOP)
  • To enforce quota limits (one free scan per email per 365 days)
  • To prevent fraud and abuse
  • To improve the Service using anonymized, aggregated analysis data (see Section 5)
  • To comply with legal obligations

4. Document Storage and Deletion

90-Day Document Retention

Uploaded documents are stored in encrypted cloud storage and automatically deleted 90 days after upload. After deletion, only the analysis results (grade, score, summary, and anonymized patterns) are retained.

Specifically:

  • Your uploaded PDF is deleted from storage 90 days after submission. The deletion timestamp is recorded.
  • The analysis output (grade, score, summary, concerns, strengths, fee stack) is retained indefinitely to support your report URL remaining accessible.
  • Anonymized pattern data (no email, no sponsor name, no deal name) may be retained in our pattern corpus to improve future grading accuracy.
  • To request early deletion of your document or report, contact david@truenoi.io with your scan ID or report URL.

5. Anonymized Data and Service Improvement

We retain anonymized pattern data from completed scans to improve the accuracy of future analyses. This data includes: the grade and score, the distress patterns flagged, the asset class and geographic region, and an anonymized summary. It does not include your email address, sponsor names, deal names, or any personally identifiable information. This data helps us calibrate the grading rubric over time as market conditions change.

6. Sharing of Information

We do not sell your personal information. We share information only in the following circumstances:

  • Service providers — Supabase (database and file storage), Vercel (hosting), Resend (transactional email), Stripe (payments), Anthropic (AI analysis). Each is bound by appropriate data processing agreements.
  • Legal requirements — We may disclose information if required by law, subpoena, or court order, or to protect the rights and safety of Lucky Duck Group and its users.
  • Business transfers — In the event of a merger, acquisition, or sale of substantially all assets, user data may be transferred as part of that transaction.

7. Data Security

We use industry-standard security measures including encryption at rest and in transit, role-based access controls, and row-level security on our database. Uploaded documents are stored in private storage buckets not accessible via public URLs. Despite these measures, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Email Communications

By submitting a document for grading, you consent to receive:

  • Your grader report via email (transactional — cannot be opted out of)
  • Follow-up nurture emails at approximately Day 2, Day 7, Day 14, and Day 30 after your scan, providing educational content related to your grade

You may opt out of nurture emails at any time by replying STOP to any nurture email or by contacting david@truenoi.io. Opting out of nurture emails does not affect transactional communications.

9. Your Rights

Depending on your location, you may have rights including:

  • The right to access the personal information we hold about you
  • The right to request correction of inaccurate information
  • The right to request deletion of your personal information (subject to our retention obligations)
  • The right to opt out of certain uses of your information

To exercise any of these rights, contact us at david@truenoi.io. We will respond within 30 days.

10. Children’s Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us immediately at david@truenoi.io.

11. Third-Party Links

The Service may contain links to third-party websites. This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. For material changes, we may notify you by email or by a prominent notice on the Service.

13. Contact

For questions about this Privacy Policy or our data practices, contact: Lucky Duck Group, LLC — Cape Coral, FL — david@truenoi.io