EndCap

Privacy Policy

Last updated July 12, 2026

In short: we collect the deal materials you send us, the details of the people on those deal threads, and basic account and usage information. We use it to underwrite deals for you and run the service. We do not sell it, and we do not use your deal materials to train our own models.

1. Who this covers

This policy explains how EndCap (“EndCap,” “we,” “us”) handles personal information in connection with the EndCap underwriting platform, including our websites, applications, and the email intake addresses we operate for customers. It applies to firm members who use the platform, and to external participants — brokers and partners — who appear on a deal thread or are given view-only access to a deal.

2. Information we collect

  • Account information. Your name and email address when you sign in with Google or a magic link, and the firm you belong to.
  • Deal materials. The offering memorandums, rent rolls, operating statements, and other documents you email or upload to us, along with the contents of the email you send them with. These may contain personal information about tenants, owners, and brokers.
  • Deal-thread participants. When a deal arrives by email, we record the addresses on the message — sender, To, Cc, Reply-To — including addresses that appear in the quoted headers of a forwarded broker email. We use these to copy the relevant people on the completed underwriting and to offer them view-only access to that one deal.
  • Guest registration details. If you follow a deal invitation link, we capture the name, company, and phone number you provide so we know who is viewing the deal and can follow up with you.
  • Calls and voice data.If your plan includes the calling features, we collect the call records you create (numbers dialed, timestamps, outcomes) and we may record calls where permitted by law — recordings are transcribed and summarized to build your call history. If you record a voice sample, we store it and the AI voice clone created from it until you delete the clone.
  • Usage and device information. Log data, IP address, browser and device details, and product-analytics events describing how the application is used.
  • Cookies. We use cookies that are strictly necessary to keep you signed in, plus analytics cookies to understand product usage. See section 10.

3. How we use information

  • To underwrite deals: extracting facts from your documents, building the financial model, and producing the deal brief and recommendation.
  • To operate the platform: authentication, firm-scoped access control, and the deal pipeline.
  • To send transactional email — screening results, completed underwriting, and access links.
  • To provide support, investigate problems, and secure the service against abuse.
  • To improve the product in aggregate, and to measure whether features work.
  • To comply with law and enforce our Terms & Conditions.

4. Automated processing and AI

The platform is built on automated analysis. Your documents are processed by third-party AI model providers to read the document, extract its facts, populate the financial model, and answer questions about the deal. We do not use your deal materials to train our own models, and we work with AI providers under terms that do not permit them to train their models on your content.

The output is an estimate produced by software. It is not investment advice, and it can be wrong — see the Terms & Conditions.

5. How we share information

We do not sell your personal information, and we do not share it for advertising. We share it only:

  • Within your firm.A deal is visible to members of the firm it belongs to. An external guest sees only the single deal that was shared with them — never your pipeline.
  • With service providers who process data on our behalf and are bound to protect it. These fall into a small number of categories: cloud hosting; database and authentication; file storage; AI and machine-learning providers; email delivery and inbound email; product analytics; and mapping.
  • For legal reasons — to comply with a law or valid legal process, or to protect the rights and safety of EndCap, our customers, or the public.
  • In a business transfer — if we are involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction.

We also enrich deals with information drawn from public sources — government, census, flood, and market data. That is public data about a property, not personal information about you.

6. Retention

We keep deal materials and the records derived from them for as long as your firm’s account is active, because the pipeline and comparables are the product. We keep account and contact records while an account exists, and delete or de-identify information when it is no longer needed for the purposes above or for our legal obligations. You can ask us to delete a deal or your account at any time.

7. Security

Access to deals is scoped by firm and enforced at the database level, documents are stored in access-controlled storage and served through short-lived signed links, and traffic is encrypted in transit. No system is perfectly secure, and we cannot guarantee absolute security.

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, email us at privacy@endcaphq.com and we will respond as required by law. We will not discriminate against you for exercising a right.

If you received an email from us because you appeared on a deal thread and you would rather not, tell us at the same address and we will remove you.

9. International transfers

We operate in the United States, and our service providers may process information there. If you access the platform from elsewhere, you understand your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

10. Cookies

We use cookies that are strictly necessary to sign you in and keep your session alive — the platform does not work without them — and analytics cookies that help us understand product usage. You can block cookies in your browser, but the platform will not function if you block the necessary ones.

11. Children

EndCap is a business tool and is not directed to anyone under 18. We do not knowingly collect personal information from children.

12. Changes

We may update this policy. When we do, we will change the “Last updated” date above, and we will give notice of material changes to the account holders affected.

13. Contact us

Questions, requests, or complaints: privacy@endcaphq.com.