Who We Are
Debt Bomb Analyzer™ is operated by HUFF Real Estate Group, located in San Antonio, Texas. Bill Huff is the sole operator. When this Privacy Policy says "we," "us," or "our," it means HUFF Real Estate Group and the Debt Bomb Analyzer™ service. When it says "you," it means the individual or company who has engaged our services or visited this website.
Contact: [email protected] · 210-887-2312
Information We Collect
We collect only the information necessary to perform your portfolio risk diagnostic. This includes:
- Contact information — your name, email address, phone number, and company name, provided when you submit an engagement inquiry
- Entity and portfolio information — the legal names of your LLCs or borrowing entities, your lenders, and the general structure of your portfolio
- Loan documents — PDF files you provide including promissory notes, deeds of trust, personal guarantees, and other closing documents. These are Layer 1 data and are subject to the 30-day deletion schedule described below.
- Extracted findings — structured data extracted from your documents by our AI analysis system, including identified risk language, clause types, party names, dates, and dollar amounts. These are Layer 2 data and are retained permanently to support your After-Action Review and future Portfolio Q&A sessions.
- Website usage data — standard analytics data collected via Google Analytics including page views, session duration, and general geographic region. No personally identifiable information is included in analytics data.
How We Use Your Information
Your information is used exclusively to perform the Debt Bomb Analyzer™ engagement you hired us for. Specifically:
- Classifying and scanning your loan documents for risk language across 10 risk categories
- Identifying cross-entity connections including shared lenders, shared guarantors, and cross-default exposure
- Generating your diagnostic report, Attorney Summary Memorandum, and supporting matrices
- Conducting your After-Action Review session and answering Portfolio Q&A questions
- Communicating with you about your engagement status and report delivery
- Maintaining records of the engagement for our legitimate business purposes
We do not use your information for marketing, profiling, or any purpose unrelated to your engagement.
AI Processing
The Debt Bomb Analyzer™ uses the Anthropic Claude API to analyze your loan documents. Your document content is transmitted to Anthropic's API for processing. Anthropic does not retain API inputs for model training purposes under their standard API terms. We transmit only the document text necessary for each specific analysis step — no personally identifiable contact information is included in API calls.
All AI analysis is reviewed by Bill Huff before any report is delivered. The AI findings are a starting point for human expert review, not an autonomous output.
Data Retention and the 30-Day Deletion Schedule
We operate a strict three-layer data architecture:
If you wish to request deletion of Layer 2 or Layer 3 data, contact us at [email protected]. We will process your request within 30 days.
Information Sharing
We do not sell, rent, or trade your information. We do not share your information with third parties for marketing purposes. The only disclosures we make are:
- Service providers — Supabase (database and file storage), Anthropic (AI processing), Cloudflare (web infrastructure), and Resend (transactional email). Each is bound by their own privacy and data security terms.
- Legal requirements — If we are required by law, court order, or government authority to disclose information, we will do so and will notify you to the extent permitted by law.
- Business transfer — In the event of a sale or transfer of HUFF Real Estate Group's business assets, client data may transfer as part of that transaction. You will be notified if this occurs.
Security
Your documents and findings are stored in private (non-public) Supabase Storage buckets with Row Level Security enforced at the database level. All data is transmitted over HTTPS. Access to the DBA system is restricted to a single authenticated operator account. We do not store payment information — payments are processed externally via Stripe.
No security system is perfect. If you become aware of a security concern related to your engagement, contact us immediately at [email protected].
Your Rights
You have the right to:
- Request a copy of the information we hold about you
- Request correction of inaccurate information
- Request deletion of your Layer 2 and Layer 3 data
- Opt out of analytics tracking by using a browser extension that blocks Google Analytics
- Withdraw consent for any data processing where consent is the legal basis
To exercise any of these rights, email [email protected] with your request. We will respond within 30 days.
Cookies and Analytics
This website uses Google Analytics to understand general traffic patterns. Analytics tracking is deferred until after the page has fully loaded and does not affect your browsing experience. Google Analytics collects anonymized data including page views, session duration, and general geographic region. It does not collect your name, email address, or any information you enter into forms on this site.
We do not use advertising cookies, remarketing pixels, or third-party tracking beyond Google Analytics.
Changes to This Policy
We may update this Privacy Policy as our service evolves. If we make material changes, we will notify active clients by email before the changes take effect. The effective date at the top of this page reflects when the current version took effect. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.
Questions about this document?
Reach out directly — we respond within one business day.
[email protected]