Privacy Policy
Last updated October 5, 2026
Underridge (app.underridge.com and underridge.com) is operated by Greenridge Technologies, part of Greenridge Group, LLC ("we"). This policy explains what we collect when you use Underridge and what we do with it.
What we collect
- Account details. When you sign in with Google or email, we receive your name and email address. We never receive your Google password.
- Deal materials you upload. Documents, data rooms and answers you provide for an underwrite, and the packages generated from them.
- Workspace data. Your workspace name, its members and invite links.
- Billing. Payments are handled by Stripe. We receive confirmation of a purchase and your credit balance, not your card number.
- Gmail, only if you connect it. If you connect a Gmail inbox, we use the permissions you approve on Google's consent screen to find deal materials, match them to your pipeline, save reply drafts, or send messages you ask us to send. We never send an email without your action. You can disconnect in the app at any time and revoke access at myaccount.google.com/permissions.
- Connector requests, only if you connect an AI assistant. The tool calls an assistant such as Claude makes to Underridge for you, and their inputs. See Claude and other AI assistants below.
How we use it
- To run the underwrites you request. Your materials are processed to produce the package and sent to our AI model provider (Anthropic) for that purpose only.
- To show you, and teammates in your workspace, the deals your workspace underwrites.
- To operate billing, security and support.
We do not sell your data and do not use your deal materials or Gmail data for advertising. Data received from Google APIs is used only to provide the features you turned on, in line with the Google API Services User Data Policy, including its Limited Use requirements.
Where it lives
Account and underwrite records are stored with Supabase. The app is served by Cloudflare. Each account's rows are isolated by row-level security, and workspaces cannot read each other's data.
Retention and deletion
We keep your data while your account is active. To delete your account and its underwrites, email support@greenridgegroup.org from the address on the account.
Claude and other AI assistants
You can connect Underridge to Claude, or to another AI assistant that supports the Model Context Protocol (MCP), through our connector at app.underridge.com/mcp. This section explains what happens when you do. The rest of this policy applies too.
- What the assistant sends us. When you ask the assistant to use Underridge, it calls one of our tools and sends us that tool's inputs. Depending on the tool, these can be: deal documents, or links to them, that you ask it to underwrite, with a deal name and optional intake answers (such as your role, objective, currency or ticket size); deal ids; pipeline entries (a name and, if given, the type, market, structure, size and where the deals came from); and tasks (a title, the deal it belongs to and, if given, a counterparty). When the assistant sends a link, our servers download the file from that address to underwrite it.
- What we do not receive. Only what the assistant puts into a tool call reaches us. We do not receive the rest of your conversation with the assistant, the other messages or files in it, or the assistant's memory.
- What we send back. Our tools return data from your account to the assistant, such as your account email and credit balance, your deals and their verdicts, underwriting packages (a summary by default, or the parts the assistant asks for), the file names of the documents a deal was underwritten from, pipeline entries and tasks. Once returned, that data is part of your conversation, and the assistant's provider handles it under its own terms and privacy policy (for Claude, Anthropic's).
- What we store and for how long. Tool inputs are handled like anything you enter in the Underridge app. To run an underwrite, we hold the documents in private storage (Supabase) until the run finishes and delete them once it completes; if a run fails, they are kept with that deal so it can be retried. The text we read from the documents, with your intake answers, is sent to our AI model provider (Anthropic) to produce the package, as described in How we use it. We save the deal to your account: its name, your intake answers, the finished package and a short record of each document it read (its name and a note on what was read, such as the page count or sheet names). Pipeline entries and tasks are saved to your account too. All of it appears in the app like any other deal, and we keep and delete it as described in Retention and deletion.
- How the connector signs in. The connector uses OAuth. When you connect, the assistant opens an Underridge page where you sign in to your Underridge account (signing in creates one if you are new) and choose Allow or Cancel. The page shows where you will be returned. If you allow it, we give the assistant an access key for your account, named after the assistant (for example "Claude connector"). We store only a SHA-256 hash of the key, never the key itself, along with its name, its first few characters so you can recognize it, your email, and when it was created, last used and revoked. The assistant renews access with an encrypted refresh token that it holds and we do not store; each renewal replaces the key with a new one and revokes the old one. The key works only with Underridge's API and connector, and only for your account. With it, the assistant can read your deals, packages, tasks and credit balance, start underwrites (which use your credits), and add pipeline deals and tasks. No connector tool deletes data.
- How to disconnect. Remove the Underridge connector in the assistant's settings (in Claude: Settings, then Connectors). To end access on our side right away, sign in to Underridge, open Settings, then API & MCP, and revoke the key named after the assistant. A revoked key stops working at once and cannot be renewed, so the assistant has to connect again. Removing the connector in the assistant does not revoke the key by itself, so revoke it in Underridge as well. Deals, pipeline entries and tasks created through the connector stay in your account after you disconnect. To delete your account and its data, see Retention and deletion.