CRM

Privacy Policy

Effective date: October 19, 2026

This Privacy Policy explains how Michael Gebhard, PA ("we") handles personal information in connection with CRM (the "Service") — the software real estate professionals use to manage their leads. It covers information about our customers (agents and their teams). Information about the customers' own leads and clients is processed on the customers' behalf, as described in section 3.

1. Information We Collect About Our Customers

  • Account information: name, email, business and brokerage name, license details, phone, address and logo you provide.
  • Billing information: plan, subscription status and invoices. Card details are handled by Stripe; we never see or store full card numbers.
  • Usage and technical information: sign-ins, actions in the Service, device and browser information and logs, used to run, secure and improve the Service.
  • Connection keys: the keys for your own Twilio and ElevenLabs accounts and the access you grant to Google, Cal.com or Meta, stored encrypted and used only to provide the features you turn on.

2. How We Use It

  • to provide, secure and support the Service and your account;
  • to process payments and send service messages (for example billing notices and security alerts);
  • to improve the Service and fix problems;
  • to comply with legal obligations.

We do not sell or share personal information for cross-context behavioral advertising, and we do not use Customer Data to train third-party AI models. We may use de-identified or aggregated information only to operate and improve the Service.

3. Your Leads' and Clients' Information (Customer Data)

Contacts, messages, call records, pages and other data you put into the Service belong to you. For this data you are the business responsible for it (the "controller"), and we act as your service provider ("processor"): we process it only on your instructions to provide the Service, as set out in our Data Processing Agreement. Your leads should contact you about their data; we will help you respond.

4. Service Providers We Use

  • Supabase (database, file storage, authentication) and Vercel (hosting) — United States;
  • Resend (email delivery) and Stripe (payments);
  • Google or Cal.com (calendar connection) and Meta (lead ads), only when you connect them;
  • Your own Twilio (phone, SMS) and ElevenLabs (AI voice) accounts, only when you connect them.

They may use the information only to provide their services to us or to you.

5. Retention and Security

We keep account information while your account is active and for as long as needed for legal, tax and accounting purposes afterwards. Customer Data is deleted after account closure as described in the Data Processing Agreement. We use encryption in transit, encryption of stored data and connection keys at rest, access controls that separate every account's data, and two-factor authentication. The Service is not directed at children, and we do not knowingly collect personal information from children.

6. Your Rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information and to opt out of certain uses, for example under the California Consumer Privacy Act (CCPA/CPRA), the Florida Digital Bill of Rights or the privacy laws of Virginia, Colorado, Connecticut, Texas, Oregon, Montana and other states. Contact us to exercise these rights; we will respond within the time the law requires and will not discriminate against you for exercising them. How to delete data step by step: Data Deletion.

7. Changes

We may update this policy. We will notify you in the Service of material changes; the effective date above shows the current version.