Privacy Policy

1. Introduction

Alpine Due Diligence Inc. (“Alpine,” “we,” “us,” or “our”) is committed to protecting the privacy and security of your information. This Privacy Policy describes how we collect, use, store, and disclose information when you use the Alpine Operational Due Diligence Platform (“Platform”).

2. Information We Collect

Account Information: When you register, we collect your name, email address, organization name, and password (stored as a bcrypt hash).

Uploaded Documents: You may upload fund documents (DDQs, Form ADVs, financial statements, compliance manuals) for analysis. These documents are classified as CONFIDENTIAL by default.

Generated Content: The Platform generates gap analyses, verification results, and ODD reports based on your uploaded documents.

Usage Data: We log actions (login, document upload, analysis requests, report generation) for audit and security purposes. We never log raw document content, passwords, or personally identifiable text from your documents.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Platform
• Generate ODD analyses and reports based on your documents
• Verify SEC EDGAR registration and public filing data
• Maintain audit logs for compliance and security
• Communicate with you about your account and the Platform

4. AI Processing — Zero Data Retention

Alpine uses Anthropic's commercial API under a Data Processing Agreement (DPA) with a Zero Data Retention (ZDR) addendum. Your document content is never used to train, fine-tune, or modify any AI model. This is a contractual prohibition, not an opt-out. Document content sent to the API for analysis is not stored by Anthropic after processing.

5. Data Sharing

We do not sell, rent, or share your data with third parties for marketing purposes. The only third-party processor is Anthropic (for AI analysis), operating under the terms described in Section 4.

6. Data Retention

• Uploaded documents: Deleted after analysis + 90 days
• Reports: Retained for the duration of your engagement
• Audit logs: Retained for a minimum of 1 year
• Anonymized benchmarks: Retained indefinitely (no client-identifiable data)
• You may request full deletion of your data within 30 days by contacting us

7. Benchmarking

Alpine uses aggregated, anonymized patterns from completed reviews to improve analytical frameworks. No client-identifiable data is included. You may opt out of benchmarking by contacting us.

8. Security

We implement enterprise-grade security measures including TLS 1.3 encryption in transit, AES-256 encryption at rest, bcrypt password hashing, JWT-based authentication, and comprehensive audit logging. See our Security Overview for details.

9. Your Rights

You have the right to:

• Access your personal data and uploaded documents
• Request correction of inaccurate data
• Request deletion of your data (within 30 days)
• Opt out of anonymized benchmarking
• Export your reports and analysis data

10. Contact

For privacy inquiries, data requests, or to exercise your rights, contact us at azhang@alpinedd.com.