Privacy Policy
Version 2026-07-14
1. Who this covers
This policy covers two different groups of people whose data passes through the Service, and treats them separately below since they aren't the same thing:
- You, the account holder - the real estate agent or broker who signs up and uses the Service.
- Your contacts - the clients, referral partners, and other relationships you add to your own account. These individuals have not signed up for the Service or agreed to these terms themselves; their information is stored on your behalf, as your data, because you've chosen to manage those relationships here.
2. Information we collect about you
When you create and use an account, we store: your name, email address, and password (hashed, never stored in plain text); your company/brokerage name and phone number; a mailing address if you fill in your Profile; a Gmail app password, if you connect an email account, stored encrypted; a WhatsApp Business Platform access token, if you connect one, also stored encrypted; and a Stripe customer ID if you subscribe to a paid plan (Stripe itself holds your actual payment details - we don't store card numbers).
3. Information we store about your contacts
For each relationship you add, the Service can store: name, address, phone number, and email; birthday, spouse's name and birthday, anniversary, and children's names; occupation and employer; how they were referred to you and by whom; and a history of your calls, emails, WhatsApp messages, and notes with them.
This information is entered by you, for your own business record-keeping. We don't independently verify it, sell it, or use it for any purpose other than providing the Service back to you.
4. How this information is used
Your data and your contacts' data are used solely to provide the Service to you: displaying your dashboard and call lists, sending the emails/letters/WhatsApp messages you compose, and generating your own usage reports. We do not sell any of this data, and we do not use your contacts' information to market to them on our own behalf.
5. Third-party sub-processors
Depending on which features you use, your data passes through the following third parties, each acting under their own privacy terms:
- Google / Gmail - if you connect your Gmail account, outgoing email is sent through Google's SMTP servers using your own app password.
- Meta (WhatsApp Business Platform) - if you connect a WhatsApp Business account, messages are sent through Meta's Cloud API using your own access token.
- Stripe - handles billing and payment processing for paid plans.
6. Data retention
Your data and your contacts' data are retained for as long as your account is active. Deleting a relationship removes its record and activity history; closing your account removes your account data. [Placeholder - exact retention period after account closure to be confirmed.]
7. Security
Sensitive credentials (your Gmail app password, WhatsApp access token) are encrypted at rest. Access to your data is restricted to your own account - other tenants cannot see your relationships or activity.
8. Your rights
You can update or delete your contacts' information at any time from Manage Relationships. If you or someone whose information you've stored has a question about that data, you can reach us through Report a Problem. [Placeholder - specific regional rights (e.g. GDPR access/erasure requests) to be added once applicable jurisdictions are confirmed.]
9. Changes to this policY
We may update this policy from time to time. Material changes will be reflected by a new version date above.