Privacy Policy
Effective September 24, 2026
This Privacy Policy explains how Bradbury ("Bradbury," "we," "us," or "our") collects, uses, and shares information through withbradbury.com, app.withbradbury.com, and related services (the "Service"). It is part of, and subject to, our Terms of Service, including their disclaimers, limitations of liability, and arbitration agreement.
The Service is used by fund managers and their administrators to run their funds. When a fund manager (our customer) puts information about its investors, portfolio companies, or personnel into the Service, the customer decides what is collected and why, and we process that information on the customer's behalf and under its instructions. If you are an investor or other individual whose information a fund manager has shared with us, please direct privacy questions and requests to that fund manager.
1. Information we collect
Information you give us: your name, email address, firm, and message when you request access; account details for users of the Service; and anything you or your organization upload or enter, which can include investor names and contact details, tax identification numbers, addresses, bank account details, subscription documents, signatures, capital account and transaction data, fund documents, and correspondence.
Information from connected services: if a customer connects an email mailbox, the Service reads and stores messages in that mailbox that relate to the customer's funds, and sends messages the customer approves.
Information collected automatically: IP address, browser and device information, pages and documents viewed or downloaded, and timestamps, which we record in server logs and in access and audit logs. We use cookies and similar technologies that are strictly necessary to sign you in and keep your session secure. We do not use advertising or cross site tracking cookies.
2. How we use information
We use information to provide, operate, maintain, secure, and support the Service; to carry out customer instructions; to send sign in links and service messages; to respond to access requests and inquiries; to detect, investigate, and prevent fraud, abuse, and security incidents; to comply with legal obligations and enforce our agreements; and to understand and improve the Service, including by using aggregated or de identified data.
3. Artificial intelligence processing
Some features send portions of Customer Data, such as message text or statement figures, to third party AI model providers to generate suggestions. We route these requests only to providers that state they do not retain prompts or use them to train models, we remove full bank account and routing numbers before sending, and nothing an AI model produces is sent or posted without a person approving it. We do not use Customer Data to train our own or anyone else's models.
4. How we share information
We do not sell personal information and do not share it for targeted advertising.
We share information with service providers that help us run the Service, including hosting and infrastructure (Vercel), database hosting (Neon), email delivery (Resend and Google Workspace), and AI model routing and inference (OpenRouter and the model providers it routes to). They may process information only to provide services to us.
We also share information as a customer directs (for example, publishing a document to an investor or sending an approved email); with a customer's authorized users, investors, auditors, and advisers through features the customer uses, such as share links; when we believe in good faith that disclosure is required by law, subpoena, or legal process, or is needed to protect the rights, property, or safety of Bradbury, our customers, or others; and in connection with a merger, acquisition, financing, or sale of all or part of our business.
5. Security
We use measures we consider reasonable, such as encryption in transit, encryption of sensitive fields at rest, and database level access controls that separate each customer's and investor's data. However, no method of transmission or storage is completely secure, and we cannot and do not guarantee the security of any information.
Bradbury has not obtained any SOC 1, SOC 2, SOC 3, ISO 27001, or similar report or certification, and our security practices have not been audited by an independent third party. Descriptions of our security are informational only and are not a promise or warranty. You are responsible for deciding whether our practices meet your requirements.
6. Retention
We keep information for as long as the customer's account is active and afterwards for as long as we reasonably need it for the purposes above, including legal, accounting, security, dispute, and backup purposes. Because ledger entries, document versions, and audit logs in the Service are permanent by design, information in them generally cannot be edited or deleted while the account is active. Access request information is kept until we no longer need it to respond to you or evaluate the request.
7. Your choices and rights
Depending on where you live, you may have rights to request access to, correction of, or deletion of personal information about you. For information a fund manager has put into the Service, send your request to that fund manager; we will assist the customer as required by law and our agreement with it. For other requests, contact us. We may need to verify your identity, and we may decline or limit a request where the law allows, including where information must be kept for legal, audit, or recordkeeping reasons.
You can stop receiving non essential emails from us by following the instructions in them. You cannot opt out of service messages, such as sign in links, while you use the Service.
8. International transfers
We are based in the United States and store and process information in the United States and other countries where our service providers operate. By using the Service or providing information to us, you consent to that transfer and processing.
9. Children
The Service is for businesses and is not directed to anyone under 18. We do not knowingly collect personal information directly from children.
10. Changes to this policy
We may update this Privacy Policy at any time by posting the updated version on this page and changing the effective date. Changes take effect when posted, and your continued use of the Service means you accept them.
11. Contact
Questions or requests about privacy: drake@withbradbury.com.