Privacy Policy

Last updated: July 2026.

1. Who we are

Managing Analyst ("we", "us") provides credit-agreement compliance software — obligation and covenant tracking and adjusted-EBITDA analysis — for deal teams and portfolio-company finance teams. This policy explains what information we handle and how, for visitors to our website and users of the application.

2. Information we handle

Account & organization data (name, work email, firm, role) provided at sign-up or by an administrator; content you enter or upload (obligations and covenants, financial figures, and documents such as credit agreements, LP agreements, side letters, and general-ledger exports); usage and security logs (access times, actions taken, IP and device metadata); and support communications you send us.

3. How we use it

To provide and secure the service; to authenticate users and enforce organization and per-entity access; to operate the obligation-monitor and adjusted-EBITDA features you use; to communicate about your account and support requests; and to meet legal and audit obligations. We do not sell personal information, and we do not use your content to train models.

4. Uploaded documents and content

Files you upload are stored as source-of-record for your organization and treated strictly as data — never as instructions to the application or to any AI feature. Where AI features are used, document content is processed to propose obligations for your confirmation; a human confirms every result.

5. Service providers (subprocessors)

We rely on infrastructure and platform providers (for example, hosting, managed database, object storage, and authentication) to operate the service. A current list of subprocessors is available on request and referenced in our Data Processing Addendum.

6. Security

We apply access controls, tenant isolation, encryption in transit, and audit logging. We are transparent about maturity: certain launch-hardening measures (including a formal compliance posture and independent security testing) are being completed. See our FAQ for what is appropriate to run today.

7. Data retention & your choices

We retain account and deal data for as long as your organization uses the service and as required for legal/audit purposes, then delete or anonymize it. Subject to verification and applicable law, you may request access, correction, export, or deletion of personal data.

8. International transfers & children

Data may be processed in the jurisdictions where our providers operate, with appropriate safeguards. The service is for business use and not directed to children.

9. Changes & contact

We will post updates here with a revised date. Questions or requests: contact us.