Privacy Policy

Version 1.1 · Effective August 31, 2026

This Privacy Policy explains how BuyerFlo ("BuyerFlo," "we," "us," or "our") collects, uses, shares, stores, and protects information when consumers, real estate professionals, clients, transaction parties, and other users access or use the BuyerFlo platform, website, applications, integrations, communications, and related services (collectively, the "Service").

By using the Service, you acknowledge that BuyerFlo may process information as described in this Privacy Policy. If you use the Service on behalf of clients, a brokerage, a team, or another organization, you are responsible for ensuring that you have the authority, consent, and legal basis necessary to provide their information to BuyerFlo.

1. Information We Collect

• Account information: name, email address, phone number, brokerage or company name, role, license or certification information, login credentials, communication preferences, and billing-related account details.
• Transaction and document data: contracts, addenda, disclosures, deadlines, tasks, notes, status information, uploaded files, extracted dates, parties, contacts, and other real estate transaction information you submit to or generate through the Service.
• Gmail add-on data (only when you install and use the add-on): When you open a message in Gmail with the add-on, we receive data about that open message only. We do not scan your inbox, watch your mailbox in the background, or access messages you have not opened in the add-on. See Section 4.
• Connected email and communication data: when you authorize an email integration, BuyerFlo may access message content, message metadata, recipients, attachments, threads, and related communication information only as needed to provide authorized features such as follow-up detection, drafting, reminders, and sending communications you approve or authorize.
• Usage, device, and technical data: log data, device and browser information, IP address, operating system, pages viewed, features used, dates and times of access, diagnostics, performance data, and security events.
• Payment information: payment activity, subscription status, invoices, billing address, and transaction history. Payment card details are processed by our third-party payment processor, and BuyerFlo does not store full payment card numbers.
• Support and feedback information: support requests, survey responses, product feedback, recordings or transcripts where permitted, and communications with BuyerFlo.

2. How We Use Information

• Provide, operate, maintain, secure, and improve the Service.
• Read, extract, organize, summarize, and help manage transaction-related information.
• Detect follow-up gaps, draft communications, create reminders, generate workflow tasks, and support user-approved transaction coordination.
• Process payments, administer subscriptions, provide customer support, and communicate about your account.
• Monitor performance, troubleshoot issues, prevent fraud, enforce our Terms of Service, and protect the rights, safety, and security of BuyerFlo, users, and others.
• Comply with legal, regulatory, tax, accounting, and contractual obligations.

BuyerFlo does not sell personal information. BuyerFlo does not use Gmail data or transaction-party personal information for advertising purposes.

What we do not do

• We do not sell your personal data.
• We do not use Google user data (including Gmail content) to develop, improve, or train generalized / non-personalized AI or ML models — our own or any third party's.
• We do not use Google user data or Gmail content for advertising of any kind.
• We do not serve ads in the Service.

3. AI, Automation, and User Review

BuyerFlo may use automation, artificial intelligence, machine learning, rules-based workflows, and third-party technology providers to help extract information, identify dates, draft communications, summarize activity, and recommend next steps. Automated outputs may be incomplete, inaccurate, delayed, or inappropriate for a specific transaction. You are responsible for reviewing, confirming, approving, correcting, and independently verifying all dates, tasks, notices, communications, documents, calculations, and recommendations before relying on them or sending them to any person.

4. Gmail Add-on — How It Works

The BuyerFlo Gmail add-on reads only the message you currently have open in Gmail. It classifies that message to one of your deals when it can, drafts a reply for you to review, and can suggest closing a task the message satisfies. You send mail yourself in Gmail's native Compose window. The add-on does not send email.

Scopes we request

The add-on requests only these Google OAuth scopes:

We never receive your Google password. Access tokens (userOAuthToken and Gmail's per-message accessToken) are short-lived and are never stored.

What we store after add-on access

When you use the add-on on an open message, we may store:

• Message ID and thread ID
• From, To, and Subject
• A 200-character snippet of the message body (enforced at the database layer as varchar(200) on gmail_message_snippets)

We never store the full message body. We never store OAuth tokens. We do not re-fetch full Gmail message bodies later in the web app; we have no refresh token and do not request Restricted Gmail readonly access.

5. Google API Services User Data — Limited Use Disclosure

BuyerFlo's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We use Google user data only to provide or improve user-facing features that are prominent in the BuyerFlo Service (classify the open Gmail message, draft a reply for your review, suggest task close, start a deal from an attached contract you approve).
• We do not transfer Google user data to third parties except as necessary to provide or improve those user-facing features (see Anthropic in Section 6), to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users.
• We do not use Google user data for serving advertisements.
• We do not allow humans to read Google user data unless: (a) we have your affirmative consent for a specific support request, (b) it is necessary for security purposes such as investigating abuse, (c) it is necessary to comply with applicable law, or (d) the data is aggregated and used for internal operations in accordance with applicable privacy laws.
• We do not use Google user data (including Gmail content) to develop, improve, or train generalized / non-personalized AI or ML models.

You may revoke the add-on's access at any time at Google Account permissions. Revoking access stops further Gmail access; it does not automatically delete metadata and snippets we already stored. To delete stored data, email support@buyerflo.com.

6. AI / model providers

When you use BuyerFlo to classify emails, draft replies, or extract information from contracts, we send the relevant text to Anthropic, PBC ("Anthropic"), an AI service provider, to generate the response.

• Anthropic processes the text on our behalf as a subprocessor under their data processing terms.
• Anthropic does not use this data to train their models.
• The text is processed transiently and is not retained by Anthropic beyond the duration of the request.

7. How email is sent (web app vs Gmail add-on)

These are different paths. Do not treat them as one "connected inbox."

• Gmail add-on: BuyerFlo drafts a reply. You review it and click Send in Gmail Compose. The add-on does not send mail and does not send on your behalf.
• Web app outbound: When you send from the BuyerFlo web app, mail goes out through Resend from a BuyerFlo deal address (not your Gmail account). That is not Gmail send-on-behalf and is not a connected Gmail inbox.

8. How We Share Information

• Service providers: vendors that help us operate, host, secure, support, analyze, communicate, and process payments for the Service (hosting, e.g. Vercel; database and file storage, e.g. Supabase; payment processing; AI inference, Anthropic; web-app email delivery, Resend), subject to contractual restrictions on their use of information.
• Authorized integrations: third-party services you connect or authorize, such as email, document, e-signature, transaction-management, CRM, calendar, or communications tools.
• Legal, safety, and compliance purposes: when reasonably necessary to comply with legal obligations, enforce agreements, prevent fraud or abuse, protect rights and property, or respond to lawful requests.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to appropriate protections for previously collected information.
• At your direction: with clients, transaction parties, team members, brokerage personnel, or other recipients when you instruct or authorize BuyerFlo to send, share, or display information.

9. Data Retention and Deletion

We retain account, subscription, support, and transaction information for as long as reasonably necessary to provide the Service, maintain business records, comply with legal obligations, resolve disputes, enforce agreements, and protect the Service. After account termination, we may retain information for a limited period to allow export, backup recovery, fraud prevention, legal compliance, and legitimate business purposes. You may request deletion by contacting support@buyerflo.com, subject to legal, security, and operational limitations.

Deal data and Gmail snippets are retained for the life of the associated deal, and may be retained after close where real-estate record-keeping rules in your jurisdiction require it.

OAuth tokens are not retained. The add-on uses short-lived tokens for the current request only.

10. Data Security

We use reasonable technical, administrative, and organizational safeguards designed to protect information, including access controls, secure hosting, encryption in transit where appropriate, monitoring, and vendor security review. No system, network, or transmission method is completely secure, and BuyerFlo cannot guarantee absolute security.

11. Your Privacy Rights and Choices

Depending on your location, you may have rights to access, correct, delete, export, or restrict certain uses of your personal information, and to appeal certain decisions. BuyerFlo does not sell personal information. To exercise privacy rights, contact support@buyerflo.com. We may need to verify your identity before processing your request.

To revoke the BuyerFlo Gmail add-on's access to your Google account, visit https://myaccount.google.com/permissions.

12. Client and Third-Party Data

When you submit personal information about clients, transaction parties, vendors, agents, lenders, title companies, escrow officers, inspectors, appraisers, or other third parties, you are responsible for ensuring that you have the necessary authorization, consent, and lawful basis to provide that information to BuyerFlo and to direct BuyerFlo to process it. BuyerFlo will reasonably assist with verified requests where required by applicable law.

13. Children's Privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from children under 18. If we learn that we have collected such information, we will take reasonable steps to delete it.

14. International Users

BuyerFlo is based in the United States. If you access the Service from outside the United States, you understand that your information may be transferred to, stored in, and processed in the United States and other locations where BuyerFlo or its service providers operate.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email, in-app notice, or other reasonable means before or when they take effect, as required by applicable law.

16. Contact Us

Questions about this Privacy Policy may be sent to support@buyerflo.com or to BuyerFlo, 1858 Oklahoma Avenue NE, St. Petersburg, FL 33703.