Privacy Policy

Aedex is operated by Aedex Inc., a Delaware corporation.

Aedex is a research tool for commercial real estate professionals. Almost everything it holds is information about companies, properties and public records — not about you.

This policy covers the personal information Aedex holds about the people who use it.

When you create an account, authentication is handled by Clerk, our identity provider. Clerk stores the credentials; Aedex receives a user identifier and the basic profile fields you chose to share.

• Email address, and name if you provide one.
• The identity provider you signed in with, if you used a social or SSO login.
• Organization or team membership, if you are invited into one.
• Anything you create in the product, such as saved views and notes.

Aedex never receives or stores your password. If you sign in through a third-party provider, that provider's own privacy policy governs what it collects on its side.

Aedex does not ask you for a model provider API key, and does not store one. Requests to a model provider are made by Aedex’s own backend under Aedex’s own credential.

This is a deliberate choice rather than a technical limitation. Holding a customer’s provider key would make Aedex the custodian of a credential that can be billed against and that Aedex cannot rotate. There is no key-entry screen on any Aedex surface; if you are ever asked for one, it is not us.

Content you send to an assistant feature is processed by that provider under Aedex’s agreement with them, and is not used to train models.

Ordinary operational data: request logs containing IP address, timestamp, requested route and user agent, kept for security, abuse prevention and debugging. Error reports when something breaks. Rate-limiting counters keyed to your account.

Aedex does not run third-party advertising or cross-site tracking, and does not sell or rent personal information to anyone.

• A session cookie set by Clerk, which is what keeps you signed in. Removing it signs you out.
• Local storage on your device for interface state, such as theme and saved views.

Local storage never leaves your browser unless you are signed in and have explicitly chosen to sync a workspace.

• To sign you in and keep you signed in.
• To show you your own saved work, and to sync it across your devices when you ask for that.
• To apply entitlements — which data tiers your plan reaches.
• To prevent abuse, enforce rate limits, and investigate security incidents.
• To contact you about the service. Product email is separate from marketing email, and marketing email is opt-in.

Your queries and saved work are not used to train models.

Aedex relies on a small number of processors, each doing one job and receiving only what that job requires:

• Clerk — identity and sessions. Holds your credentials; Aedex never receives your password.
• Neon — the managed database behind your account and saved work.
• Vercel — hosting and delivery of the web application.
• Fly.io — hosting for the service that answers data requests.
• Resend — delivery of transactional email, including anything you send us through the contact form.
• Cloudflare — bot protection on the public contact form.
• CARTO, and Apple MapKit where enabled — map tiles. Your device requests tiles for the area shown.

We do not otherwise disclose personal information, except where we are legally compelled to and, where the law permits, after telling you. We do not sell or rent personal information, and we do not run third-party advertising or cross-site tracking.

Account and workspace data is kept while your account is open. Operational logs are kept for a limited period and then discarded.

You can delete your account at any time, which removes your profile and workspace content. Records we are required to keep — which hold sourced facts about properties rather than facts about you — are unaffected by account deletion.

Depending on where you live, you may have the right to access, correct, export or delete the personal information we hold, and to object to certain processing. Ask and we will do it; we will not make you jump through hoops for it.

Traffic is encrypted in transit. Access to production systems is restricted and audited. Secrets are held in managed environment configuration and are never committed to source control.

No system is perfectly secure. If you believe you have found a vulnerability, please report it to us before disclosing it publicly, and we will work with you.

Material changes will be announced in the product rather than quietly published.

Questions about privacy: use the contact form on this site, or write to Aedex Inc., 131 Continental Dr, Suite 305, Newark, Delaware 19713. We answer privacy requests ourselves rather than routing them to a queue.