What happens to your data

Acre is run by Above the Par LLC, which you know as AbuvThePar or ATP. It is the student platform for ATP Wholesale.

Questions about your data go to success@abuvthepar.com. A real person reads that inbox.

We keep only what the app needs to work for you.

• Your account. Email, display name, and a password hash. So you can log in.
• Your book. Which brands you are working, the stage each one is in, your notes, next steps, and history. This is the pipeline.
• Your contacts. People at brands you have found or added, with their email and phone if you saved them.
• Your outreach. Emails you drafted or sent through the app, calls you logged, and replies you recorded.
• Your tasks and profile. To-dos, and the voice profile you filled in so drafts sound like you.
• Your files. Anything you upload to a brand: purchase orders, invoices, catalogs, screenshots, statements.
• Usage. How many AI runs, enrichments and call preps you have used, and what they cost us. This is how the monthly caps work.

We do not sell any of this. We do not show ads. We do not share your data with other students.

The columns are the four kinds of readers there are. “Automated systems” means our own background jobs, which run with a master key so they can do things like finish an AI run after you close the tab.

How this is enforced: every table that holds your work has a rule in the database itself (row level security) that says a row can be read by its owner, an ATP owner or admin, or a coach assigned to you. Right now no coaches are assigned to anyone and there is no screen that assigns them. Writes are owner only. This is not a setting in the app that could be flipped by mistake; it is a rule the database checks on every query.

Only facts about brands. When anyone in Acre looks up a brand, the result is saved once and reused by everyone. That is what makes the tool affordable. The shared cache holds:

• the brand’s name, website, category and public phone or email from its site,
• research about the brand and its Amazon listings,
• Amazon product data (ASINs, prices, ranks, keywords),
• supplier records,
• signals such as a price change or a new seller.

None of that says who looked the brand up, whether it is in anyone’s pipeline, or what stage it is in. Your contacts are not in the shared cache; each student’s contact list is their own.

Anonymous stats. Some screens show what tends to work, like which opener gets replies or which category converts. Those numbers are totals across ATP students. They only appear when at least 3 different students and a minimum number of rows are behind them, and they never include a brand name, a brand id, or a student.

This is the part people ask about most, so here it is in detail.

• Files go from your browser straight to a private storage bucket, using your own login. They do not pass through our app server.
• Each file is stored under a folder named with your account id. The storage rules only let a login read, add or delete files in its own folder. That applies to ATP admins too: they cannot download your file bytes.
• ATP staff can see the list entry for a file (name, type, size, the note you wrote), because that list is part of your account rows.
• When you open a file, the app makes a link that works for 1 hour and then stops working.
• Files are encrypted while stored and while moving over the network (this is done by our storage provider, Supabase). They are not encrypted inside your browser before upload, so the storage provider and our master key could in principle read them. No part of the app does.
• No file is ever sent to an AI model or any outside tool. The AI features read brand facts and the text you type, never your uploads.
• Accepted types: PDF, PNG, JPG, CSV, Excel (.xlsx) and Word (.docx), up to 25 MB each.

Acre uses a few outside services. Here is what each one receives, and nothing more.

Each of these services has its own privacy policy. We send them the least we can. None of them is given your name, your notes or your files.

A small number of ATP accounts have the owner or admin role. That role is set in the database and mirrored to your profile by a trigger; a student cannot give it to themselves. With it, staff can:

• read your account rows (pipeline, contacts, notes, tasks, file list) to help with support, under the same database rules as everyone else;
• see the Jobs screen: for each AI run, the brand, the tool, its status and what it cost;
• see the Spend screen: cost totals per student;
• reset your walkthrough, create accounts, and send in app notices.

Staff cannot open your files, and cannot edit your rows. Our background jobs use a master key that can technically reach everything, which is normal for any app built on Supabase. We keep that key on the server only, and no code path uses it to read your files or send your data anywhere it is not listed on this page.

We know that students in the same cohort go after the same brands. That is exactly why Acre is built so that no student can read another student’s data: not their pipeline, not their notes, not who they are talking to, not their files. The only thing you share is the public facts about a brand, which anyone could find on its website or on Amazon. Which brands you are working, and how far along you are, stays with you.

• While your account is open, we keep your data so the app works.
• Download it any time. Account menu, then Privacy & data, then Download my data. You get one Excel file with every row you own, built in your browser. Your files are listed by name; the file contents stay in storage, where you can open each one from its brand.
• Delete your account yourself. Same menu, Delete my account, then type the confirm phrase. Nothing is removed for 7 days, and a banner shows the date. You can cancel during that week. After 7 days a scheduled job removes your rows, your files, and your login.
• What stays. The shared brand facts, because they were never yours alone. Our hosting provider may keep its own short term backups for disaster recovery; we do not restore a deleted account from them.

If anything about a deletion looks wrong, email success@abuvthepar.com.

If we change how any of this works, we will change this page and update the date at the bottom. For a change that matters, like a new outside tool that receives more than brand facts, we will also tell you inside the app.