Privacy Policy — Deed
Ava Research LLC · Last updated: October 14, 2026
This policy covers Deed (the "Service"), a connector that turns a pasted rental-property deal sheet into structured underwriting math through Muse. The defining rule of the Service: Deed runs numbers; it doesn't tell you to buy. Every verdict is scored only against the investor's own stated criteria — never a house view of what's a "good deal."
What we store, and why
-
Account ID: an internal ID from your sign-in, used to keep your data separate from everyone else's. Sign-in is handled by Microsoft Entra External ID with a one-time code sent to your email — there is no password, and it asks for nothing but your email address. The Service itself never stores your email address. Unlike some connectors in this portfolio, Deed additionally stores only a one-way SHA-256 hash of your account ID internally, never the ID itself.
-
Deal sheets you paste: analyzed in the conversation by default and not persisted. Only if you explicitly ask Deed to remember a deal (
persist: true) is the normalized, structured output saved — never the raw pasted text, which is never logged or stored at all; only its SHA-256 hash, used purely as a cache key so a re-forwarded deal sheet doesn't re-run extraction. -
Your buy box: markets, price range, minimum cash flow, minimum cap rate, and property types — only if you explicitly ask Deed to remember them.
-
Technical logs: request type, outcome, and timing. Logs never contain deal-sheet contents, buy-box criteria, or sign-in tokens.
What we don't collect
The Service only accepts the fields above. We don't ask for or store payment card or bank account numbers, government ID numbers, precise location beyond what a market name implies, photos, or health information. Deed doesn't arrange financing, process payments, broker introductions, or connect to any MLS.
No third-party services
Deed runs entirely on Ava Research's own infrastructure for every required calculation. An optional, pluggable market-rent comparison (RentCast) is designed into the Service but no comps-provider account exists yet — underwriting works correctly without it, only skipping the optional "rent vs. market" flag. If that integration is activated in the future, this policy will be updated before it goes live.
Permissions Muse asks for
One permission, Deed.ReadWrite: it lets Muse read and update your saved deals and buy box on your behalf. That's all it can touch.
Who can see it
-
You, through your own account.
-
Meta's Muse, if you connect it, acting on your behalf with the permission above.
-
Service providers that host and run the Service (Microsoft Azure, East US 2 region) and handle sign-in (Microsoft Entra External ID), bound by their own security and confidentiality commitments.
-
No one else. We don't sell, rent, or share your data with advertisers or data brokers, and nothing is shared between investors.
How we protect it
Your data is isolated by account — no investor can read another investor's deals or buy box. Access to the underlying systems is limited to what each part of the Service needs to do its job, and administrative access is limited to Ava Research LLC personnel who need it to operate the Service.
Data retention
-
Saved deals and your buy box: kept until you delete them or your account. Nothing persists at all unless you explicitly opted in when you saved it.
-
Technical logs: 30 days.
Delete your data
Deletion is self-service — ask Muse directly, no email required. Ask Muse to delete your data, for example "Delete all my Deed data." This permanently removes every deal you've saved and your buy box. This can't be undone.
Disconnect: remove Deed from your connectors in Muse. Disconnecting stops Muse's access but doesn't delete your data — use the self-service deletion above first if you want it gone.
Children's privacy
The Service is not directed at children, and we don't knowingly collect information from anyone under 13.
Changes to this policy
If we make a material change, we'll update the date at the top of this page and, for significant changes, make a reasonable effort to notify active users.
Contact us
Ava Research LLC
privacy@avaresearchllc.com