Privacy Policy

Last updated: 2026

This is a starting template, not legal advice — have it reviewed by a qualified attorney before relying on it, particularly if you have users in jurisdictions with specific requirements (e.g. GDPR, CCPA).

1. Information We Collect

  • Account information: name, email, password (stored hashed, never in plain text), phone number
  • Payment information: processed and stored by Stripe, our payment processor — we never see or store your full card number
  • Client/lead data you enter: names, contact details, notes, and documents you upload about your own clients and leads
  • Connected email data: if you connect a Gmail or Outlook account, we access messages needed to sync correspondence and draft replies, using the minimum OAuth scopes required
  • Usage data: basic logs needed to operate and secure the Service (e.g. login timestamps, error logs)

2. How We Use Information

We use collected information to:

  • Provide and maintain the Service
  • Process payments and manage subscriptions
  • Send transactional email (password resets, verification, appointment reminders)
  • Detect and prevent abuse or security issues

We do not sell your data or your clients' data to third parties.

3. Third-Party Processors

We share data with the following third parties strictly as needed to provide the Service: Stripe (payments), Twilio (SMS reminders), DocuSign (e-signature), Anthropic (AI email drafting), Google/Microsoft (connected email accounts), and our infrastructure providers (Turso for database hosting, Google Cloud/Firebase for application hosting and file storage). Each has its own privacy policy governing how they handle data on our behalf.

4. Data Security

Passwords are hashed with scrypt and never stored in plain text. Sessions use secure, httpOnly cookies. Data is scoped per account — one agent's leads, appointments, and documents are never visible to another. No system is perfectly secure, but we take reasonable measures to protect your data.

5. Data Retention

We retain your data for as long as your account is active. If you request account deletion, we'll delete your data within a reasonable period, except where we're required to retain records (e.g. billing history) for legal or tax purposes.

6. Your Rights

You can access, correct, or request deletion of your data at any time by contacting us at [contact email]. Depending on your location, you may have additional rights under laws like GDPR or CCPA.

7. Cookies

We use a single essential session cookie to keep you logged in. We don't use third-party advertising or tracking cookies.

8. Children's Privacy

The Service is intended for licensed real estate professionals and is not directed at children under 18.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We'll update the date at the top of this page when we do.

10. Contact

Questions about this Privacy Policy? Contact us at [contact email]. See also our Terms of Service.