Breadfruit Privacy Policy
This policy explains what information Breadfruit collects, how Eastmond Parker LLC ("we" or "us") uses it, and the choices you have. It covers breadfruit.eastmondparker.com, the emails Breadfruit sends to account holders, and the emails we send about Breadfruit to people at banks and credit unions who are not customers. Breadfruit is a business tool; we collect only what is needed to run your account and the Service. We do not sell or rent personal information, and we do not share it for advertising.
1. Information we collect
Account information. When you register we ask for your first and last name, your work email address and, optionally, your organization. You may add a mobile number on your Account page; it is optional and used only if we need to reach you about your account. If you start a trial from an email we sent you, the account is opened for the address that email went to. If you hold a seat in an Enterprise organization, the person who manages it invited you by email and can see your name, your email address, and whether you have accepted the invitation. You can change your details on your Account page.
Billing information. Payments are handled by Stripe. Card numbers and billing details are entered on Stripe's pages, under Stripe's own privacy policy, and never reach our servers. We keep the Stripe customer and subscription identifiers, your plan, billing interval, and a record of one-time purchases, including the email address the download link was sent to, so we can deliver what you bought.
Your work in the Service. The institutions you follow (Following), saved screens and when you last opened each, the last screen you opened (so the Screener can reopen it), custom peer groups, saved M&A models, dashboard layout, alert preferences, and theme, hint, tour and What's new settings are stored with your account so they are there when you return.
Breadfruit.AI. When you ask Breadfruit.AI a question, ask it to build a screen, or use its Help tab, we send your question, the earlier messages in that conversation, and the context needed to answer it to our AI model provider, Anthropic, which writes the reply. Depending on the page, that context can include the figures shown on the page, the institutions on a screen or in a comparison, the institutions you follow, and figures you entered in an M&A model. We do not send your name, email address, or payment details with it. We do not store the text of your questions or of the replies on our servers; the conversation is kept in your browser until you close the tab or start a new conversation. For each question we record the time, the feature used, and the amount of processing, to apply daily allowances and manage cost. Anthropic processes this information for us under its commercial terms, which do not allow it to use the information to train its models, and keeps it only for the limited period those terms allow. Please do not enter personal information about other people, or confidential supervisory information, in a question.
Technical and usage information. Our servers record standard request logs (IP address, browser type, pages requested, timestamps) for security, rate limiting, and troubleshooting. We record sign-in attempts, second-factor use, and other account security events, with the IP address, to protect accounts, and we count the institution pages each account opens in a day to apply plan limits and detect bulk copying. We do not use advertising trackers, advertising cookies, or third-party analytics.
Support and email to us. If you write to us, use the Contact form, or reply to one of our emails, we keep the correspondence and, for the Contact form, the page you wrote from. We may use AI tools, under business terms that do not allow the provider to train on your messages, to help sort our mail and draft replies; a person reads and sends every reply.
People we write to. We send occasional emails about Breadfruit to officers of banks and credit unions. For this we keep a business contact's name, job title, work email address and institution, which come from business contact lists we have obtained and from public sources such as the institution's own website and filings, together with the page where we found them. We record when we wrote, whether the message was delivered or answered, whether the trial page linked from it was used, whether a trial was requested or started, and any request to stop. Links in these emails carry a random code, never your name or address.
2. How we use information
To provide and secure the Service and your account; to process payments and send receipts and billing notices; to send transactional email such as confirmation links, welcome messages, password resets, sign-in codes, trial and plan notices, purchase links, and the Following alerts and weekly digest you choose; to answer support requests; to understand how the Service is used in aggregate so we can improve it; to tell people at banks and credit unions about Breadfruit by email; and to comply with law. Following alerts and the weekly digest are on when you follow an institution, and every one of those emails links to Account and settings, where you can change or stop them. Every email we send about Breadfruit to someone who is not a customer identifies us, gives our postal address, and has an unsubscribe link. We stop at once when you use the link, and within 10 business days when you ask us by reply, and we keep your address on a do-not-email list so we do not write again. Apart from those emails, we do not send marketing email.
3. Who we share information with
We share information only with service providers that help us run Breadfruit, each bound to use it only for that purpose: Stripe (payments and subscription billing), Resend (account and alert email), Google (our Breadfruit mailbox, from which we send emails to people at banks and credit unions and in which we receive your messages), Railway (application hosting and database, in the United States), Anthropic (the AI model behind Breadfruit.AI), and Cloudflare (a check on the registration form that tells people apart from automated sign-ups; it receives your IP address and browser details). We may also disclose information when required by law or legal process, to protect the rights, safety, or property of Eastmond Parker, our users, or others, or as part of a merger, acquisition, or sale of the business, in which case this policy continues to apply to the transferred information.
4. Cookies and local storage
Breadfruit uses one session cookie to keep you signed in and a security token to protect forms. Your browser also stores some choices locally so pages load the way you left them: your theme, hover hints, the columns you show on Following and the Screener, and chart options, and, for the current browser session only, your Breadfruit.AI conversation and whether its panel is open. None of these are used for advertising or cross-site tracking, and we do not allow other companies to track your activity across sites through Breadfruit. Because we do not track you across sites, Breadfruit does not respond differently to a browser's Do Not Track signal. Blocking cookies will prevent sign-in.
5. Retention
We keep account information for as long as your account is open. Request logs are kept by our hosting provider for a limited period, and account security events for a limited period, for security purposes. When you close your account we delete or anonymize your personal information within 30 days, except records we must keep for billing, tax, legal, or security reasons, which we keep only as long as required. We do not store the text of Breadfruit.AI questions; our AI provider keeps them only for the limited period its terms allow. If we have written to you and you are not a customer and you ask us to stop, we keep only your address on our do-not-email list so we can honor the request. Aggregated information that does not identify you may be kept.
6. Security
Passwords are stored only as one-way hashes. Traffic is encrypted in transit. Accounts lock after repeated failed sign-ins, two-factor authentication is available on every plan, and a password change signs out every other browser. The database is reachable only from within our hosting provider's private network. No system is perfectly secure; if we learn of a breach affecting your information we will notify you as the law requires.
7. Your choices and rights
You can update your name, mobile number, and organization, change your password, set up two-factor authentication, and choose your Following alerts on your Account page. To access, correct, export, or delete your personal information, or to close your account, email breadfruit@eastmondparker.com from the address on the account; we respond within 30 days. If we have written to you and you are not a customer, you can make the same requests by email, or use the unsubscribe link in any of our emails. We may need to confirm your identity before we act on a request. Where the law of your state or country gives you additional rights, such as the right to appeal our decision on a request, we will honor them, and we will not treat you differently for using them.
8. Children
Breadfruit is a business service and is not directed to anyone under 18. We do not knowingly collect information from children; if you believe a child has provided information to us, contact us and we will delete it.
9. Where information is processed
Breadfruit is operated from the United States, and its hosting and database are there. Our other providers process information mainly in the United States. If you use the Service from elsewhere, your information is transferred to and processed in the United States.
10. Changes to this policy
We may update this policy as the Service changes. Material changes will be announced by email or a notice in the Service before they take effect, and the date at the top shows the current version.
11. Contact
Eastmond Parker LLC, a Delaware limited liability company with offices in New York and Philadelphia. Postal address: 123 S Broad Street, Philadelphia, PA 19109. Email breadfruit@eastmondparker.com with any question about this policy or your information. Our Terms of Service govern your use of Breadfruit.