Legal

Privacy Policy

Effective date: May 30, 2026  ·  Aldebaran Labs LLC

1. Who we are

The Bull is a product of Aldebaran Labs LLC ("we", "our", "us"), an AI software company that provides The Bull Contracts — a legal process management platform — and The Bull Properties, a real estate portfolio intelligence product. Our registered contact is hello@the-bull.ai.

2. What data we collect

We collect only what is necessary to deliver the service:

  • Account data: name, email address, and password (or OAuth token if you sign in with Google).
  • Contract documents: files you upload for AI analysis — PDFs, DOCX, or plain text.
  • Usage data: actions taken inside the app (uploads, queries, node status changes), timestamped and tied to your user ID.
  • Billing data: subscription tier and payment status. Payment card details are handled entirely by our payment processor and are never stored on our servers.
  • Communications: messages you send through our contact form.

We do not collect data from visitors who do not create an account.

3. How we use your data

  • To provide, operate, and improve the platform.
  • To process your contract documents through our AI pipeline and return analysis results.
  • To send automated reminders, deadline alerts, and confirmation emails as configured by you.
  • To enforce subscription limits and billing.
  • To respond to your support requests.
  • To comply with legal obligations.

We do not sell your data. We do not use your contract content for advertising.

4. AI processing and your contract content

Your contract content is processed by Anthropic's Claude API (SOC 2 Type II, ISO 27001 & ISO 42001 certified) solely to generate the analysis results you request. We use retrieval isolation — only the excerpts relevant to each query are sent to the AI, never the full document. Anthropic does not use your data to train its models. Anthropic retains API data only briefly for security and reliability purposes before automatic deletion.

We are actively working to qualify for Anthropic's Zero Data Retention API tier, which would ensure that no query content is retained by Anthropic beyond the API response. We may also evaluate routing through AWS Bedrock or Google Vertex AI — both platforms have independent data-handling commitments and do not share inputs or outputs with Anthropic — as an additional path to strengthen data handling for security-sensitive clients. We will update this policy when any of these configurations are in place.

5. Data storage and security

  • Database: Supabase (PostgreSQL), hosted on AWS infrastructure in the United States. All data is encrypted at rest and in transit (TLS 1.2+).
  • File storage: contract documents are stored in Supabase Storage, with access scoped strictly to your firm's ID at the database level. No user from another firm can query or retrieve your documents.
  • Email delivery: automated emails are sent via SendGrid. Your email address is shared with SendGrid solely for message delivery.
  • Audit log: every AI query, document upload, and automated action is logged with a timestamp and user identity.

We are working toward SOC 2 Type II certification. All current controls are operational and enforceable by contract today.

6. Data retention

We retain your account data and documents for as long as your account is active. If you cancel your subscription, your data is retained for 30 days to allow export, then deleted from our production systems. Audit logs may be retained for up to 12 months for compliance purposes.

You may request deletion of your data at any time by emailing hello@the-bull.ai.

7. Sharing and disclosure

We share your data only with the following sub-processors, and only to the extent necessary to deliver the service:

  • Anthropic — AI analysis (query content only, not stored)
  • Supabase — database and file storage
  • SendGrid — transactional and automated email delivery
  • Payment processor — billing and subscription management (card data never touches our servers)

We may disclose data if required by law, court order, or to protect the rights and safety of our users.

8. Your rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data (right to erasure).
  • Object to or restrict certain processing.
  • Data portability — receive your data in a machine-readable format.
  • Withdraw consent at any time where processing is consent-based.

To exercise any of these rights, contact us at hello@the-bull.ai. We will respond within 30 days.

9. Cookies

We use only technically necessary cookies — specifically the session token required to keep you logged in. We do not use tracking cookies, advertising pixels, or third-party analytics scripts.

10. Children's privacy

The Bull Contracts is a professional platform intended for business use. We do not knowingly collect data from anyone under the age of 16. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to this policy

We may update this policy as our technology or legal obligations change. Material changes will be communicated by email to active subscribers at least 14 days before taking effect. The effective date at the top of this page will always reflect the current version.

12. Contact

Questions about this policy or your data? Reach us at hello@the-bull.ai.

For Enterprise clients requiring a Data Processing Agreement (DPA), contact us and we will provide one within 5 business days.