← Agentic Realtor home

Privacy Policy

Effective date: July 6, 2026 · Last updated: July 6, 2026

Introduction

Agentic Realtor (“we”, “us”, “the service”), available at agenticrealtor.app, is an AI follow-up assistant for real estate professionals. It connects to your Follow Up Boss CRM, analyzes the client notes you keep there, proposes follow-up actions, and drafts emails that you review and send from your own connected Gmail account. This policy explains what information we collect, how we use it, and the choices you have.

Information we collect

Account information

When you create an account we collect your email address, a password (stored as a hash by our authentication provider — we never see or store your plain-text password), and optionally your name and workspace/organization name.

CRM data (Follow Up Boss)

If you connect Follow Up Boss, we access your CRM through the official Follow Up Boss API using the API key you provide (stored encrypted). We read contact records, the notes you and your team write, and tasks/appointments, in order to analyze follow-up context for the clients you explicitly opt in. With your configuration, the service can also create or cancel reminder tasks and write activity notes on a client’s CRM timeline so your CRM reflects what the assistant did. We never contact your clients through the CRM.

Google / Gmail data

If you connect a Gmail account, we request only the following Google OAuth scopes:

• openid, email, profile — to identify which Google account you connected (your email address, name, and account identifier).
• https://www.googleapis.com/auth/gmail.send — to send an email from your Gmail address only when you explicitly approve and confirm that specific email.

We store the OAuth access and refresh tokens Google issues (encrypted at rest), the connected email address, and the account display name. We do not request or receive the contents of your mailbox.

How we use Google user data

Google user data is used for exactly two purposes: (1) showing you which Gmail account is connected, and (2) sending the individual emails you approve, from your own address, via the Gmail API. Sent emails appear in your Gmail Sent folder and replies go to your own inbox. The sign-off appended to outgoing emails is a simple “Best regards, <your name>” derived from your connected account’s display name or your profile — we do not access your Gmail signature settings.

The gmail.send permission allows an app to send email on your behalf. In Agentic Realtor, every send requires you to review the draft, approve it, click Send, and confirm. There is no background, scheduled, or automatic sending of any kind.

What we do not do

• We do not read your Gmail inbox.
• We do not read your Gmail message history.
• We do not access your Gmail settings or import your Gmail signature.
• We do not auto-send emails — every email requires your explicit, per-email approval.
• We do not sell Google user data.
• We do not use Google user data for advertising.
• We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine-learning models.

Note: an earlier version of the service requested an additional read-only Gmail settings permission to import your Gmail signature. That permission and the signature-import feature have been removed and are no longer requested.

Google API Limited Use disclosure

Agentic Realtor’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How data is stored and protected

Data is stored in a managed PostgreSQL database (Supabase) with row-level security isolating each workspace’s data. OAuth tokens and CRM API keys are encrypted with an application-level key before being written to the database. All data is transmitted over TLS. Application logs never include tokens, API keys, email bodies, or message content.

How data is shared

We do not sell your data. We share data only with the service providers required to operate the product:

• Supabase — database and authentication hosting.
• Vercel — application hosting.
• Google (Gmail API) — to deliver the emails you approve.
• Follow Up Boss — your own CRM, accessed with your API key.
• AI providers (OpenAI and/or Anthropic) — to analyze the CRM note text and generate drafts. Content sent to AI providers comes from your CRM notes and the context you configure — not from your Gmail account. Google user data is not shared with AI providers.

We may also disclose information if required by law, or as part of a merger or acquisition (in which case this policy would continue to apply to previously collected data).

Data retention

We retain your data while your account is active. Disconnecting Gmail deletes the stored Google OAuth tokens and connection record. Disconnecting Follow Up Boss stops CRM syncing. When your account is deleted, associated personal data — account details, CRM copies, AI-generated context, drafts, and connection records — is deleted from the production database; residual copies in encrypted backups expire on the backup provider’s rotation schedule.

Your controls and deletion

• Disconnect Gmail at any time in Settings → Email connection (this deletes stored tokens and revokes our access with Google on a best-effort basis).
• Revoke Agentic Realtor’s access directly at your Google Account permissions page.
• Opt individual clients out of AI analysis at any time.
• Request account and data deletion — see Data Deletion.

Contact

Questions about this policy or your data: momoalma2002@gmail.com

Changes to this policy

We may update this policy as the product evolves. Material changes will be reflected on this page with an updated “Last updated” date.