Privacy Policy

1. Information We Collect

• Account information: Name, email address, and password when you register.
• Property & listing data: Property addresses, photos, agent notes, and listing details you submit when creating listings.
• Payment information: Billing details processed by Stripe. We never store your full card number — Stripe handles all payment data under their own PCI-compliant environment.
• Usage data: Pages visited, features used, session duration, and error logs collected to improve the Service.
• Device & browser information: IP address, browser type, operating system, and referrer URL collected automatically.

2. How We Use Your Information

• Provide the Service: Generate listing copy, enhance photos, and retrieve property data on your behalf.
• Personalize your experience: Remember your preferences, tone settings, and brand voice notes.
• Process payments: Manage subscriptions, billing cycles, and send receipts.
• Improve the Service: Analyze usage patterns to fix bugs and build new features. We do not train AI models on your listing content or agent notes.
• Communicate with you: Send transactional emails (receipts, account alerts) and, with your consent, product updates.

3. Third-Party Services

We share data with trusted third parties only as necessary to provide the Service:

• Supabase: Database and authentication. Your data is stored on Supabase infrastructure hosted on AWS (US East).
• Anthropic (Claude AI): Your property data and agent notes are sent to Anthropic's API to generate listing copy. Anthropic's usage policies apply. We do not share personally identifiable buyer or client information with Anthropic.
• Apify / Zillow: Property addresses are sent to Apify to retrieve publicly available Zillow listing data for auto-fill and market context.
• Stripe: Payment processing. Your billing information is governed by Stripe's Privacy Policy.
• Vercel: Application hosting and edge functions.

4. Data Storage & Security

Your data is stored on Supabase (AWS US East) and protected with:

• Encryption in transit: All data transmitted over TLS 1.2+.
• Encryption at rest: Database-level encryption via Supabase/AWS.
• Row-level security: Database policies ensure you can only access your own listings and data.
• Access controls: Minimal-privilege access; only the application can read your data.

5. Data Retention

We retain your data for as long as your account is active. If you close your account:

• Listing content: Deleted within 30 days of account closure upon request.
• Payment records: Retained for 7 years as required by financial regulations.
• Anonymized analytics: May be retained indefinitely in aggregated, non-identifiable form.

6. Cookies

We use essential cookies to maintain your authenticated session. We do not use third-party advertising cookies or cross-site tracking cookies. You can disable cookies in your browser settings, though this may affect Service functionality.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update inaccurate information via your account settings or by contacting us.
• Deletion: Request deletion of your account and personal data.
• Portability: Request an export of your listing data in a machine-readable format.
• Opt-out: Unsubscribe from marketing emails at any time via the unsubscribe link or by emailing us.

8. Children's Privacy

The Service is intended for real estate professionals and is not directed to individuals under 18. We do not knowingly collect personal information from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice at least 14 days before changes take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related questions, data access requests, or to exercise your rights, contact us at support@curbkit.app.