Legal
Privacy Policy
Last updated: [Date]
This document is a template. Consult legal counsel before publishing.
1. Data Collection
[Company legal name] ("we", "us", "our") collects personal data necessary to provide our real estate CRM platform, including: name, email address, phone number, company information, property data, and payment details processed through Stripe.
2. How We Use Your Data
We use your data to:
- Provide and maintain our CRM platform services
- Process subscription payments and billing
- Facilitate property matching and inter-agency collaboration
- Send transactional notifications (email and in-app)
- Improve our services through aggregated analytics
3. Data Storage & Security
Your data is stored securely on servers located in the EU (AWS eu-west-1). All media files are stored in private S3 buckets with signed URL access. API communication is encrypted via TLS. Authentication tokens are stored as httpOnly cookies.
4. Data Sharing
We do not sell your personal data. Data is shared only with:
- Stripe — for payment processing
- AWS — for infrastructure and storage
- Other tenants — only when you initiate cross-agency conversations or deals
5. Your Rights (GDPR)
Under the General Data Protection Regulation, you have the right to:
- Access — download all your data via Settings > Data & Privacy
- Rectification — update your profile and company information
- Erasure — request account deletion by contacting support
- Portability — export your data in JSON format
- Restriction — request limited processing of your data
6. Cookies
We use essential cookies only: an httpOnly authentication cookie for session management. No tracking, analytics, or advertising cookies are used.
7. Contact
For privacy-related inquiries, contact us at: [privacy@the34.club]