Privacy Policy

Last Updated: August 16, 2026

This Privacy Policy explains how BuyerFlo ("BuyerFlo," "we," "us," "our") collects, uses, shares, and protects information when you use our platform, including the BuyerFlo web application at app.buyerflo.com and the BuyerFlo Gmail add-on (together, the "Service").

If you have questions, email support@buyerflo.com.

1. Information We Collect

Account information: name, email, phone, brokerage/company name, license or certification info, billing details.

Transaction data: contracts and documents you upload, extracted dates and tasks, client and transaction-party contact information, deal notes and status.

Gmail add-on data (only when you install and use the add-on): When you open a message in Gmail with the add-on, we receive data about that open message only. We do not scan your inbox, watch your mailbox in the background, or access messages you have not opened in the add-on. See Section 3.

Usage data: log data, device/browser information, feature usage, and performance data collected automatically.

Payment data: processed by our third-party payment processor; BuyerFlo does not store full card numbers.

2. How We Use Information

We use collected information to: provide and operate the Service (classify the Gmail message you have open, draft replies for your review, extract dates and tasks from contracts you upload, track deal work in the web app); process payments; provide customer support; operate, secure, and maintain the Service; communicate with you about your account and updates; and comply with legal obligations.

We do not sell your personal information or your clients' personal information.

What we do not do

• We do not sell your personal data.
• We do not use Google user data (including Gmail content) to develop, improve, or train generalized / non-personalized AI or ML models — our own or any third party's.
• We do not use Google user data or Gmail content for advertising of any kind.
• We do not serve ads in the Service.

3. Gmail Add-on — How It Works

The BuyerFlo Gmail add-on reads only the message you currently have open in Gmail. It classifies that message to one of your deals when it can, drafts a reply for you to review, and can suggest closing a task the message satisfies. You send mail yourself in Gmail's native Compose window. The add-on does not send email.

Scopes we request

The add-on requests only these Google OAuth scopes:

We never receive your Google password. Access tokens (userOAuthToken and Gmail's per-message accessToken) are short-lived and are never stored.

What we store after add-on access

When you use the add-on on an open message, we may store:

• Message ID and thread ID
• From, To, and Subject
• A 200-character snippet of the message body (enforced at the database layer as varchar(200) on gmail_message_snippets)

We never store the full message body. We never store OAuth tokens. We do not re-fetch full Gmail message bodies later in the web app; we have no refresh token and do not request Restricted Gmail readonly access.

4. Google API Services User Data — Limited Use Disclosure

BuyerFlo's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We use Google user data only to provide or improve user-facing features that are prominent in the BuyerFlo Service (classify the open Gmail message, draft a reply for your review, suggest task close, start a deal from an attached contract you approve).
• We do not transfer Google user data to third parties except as necessary to provide or improve those user-facing features (see Anthropic in Section 5), to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users.
• We do not use Google user data for serving advertisements.
• We do not allow humans to read Google user data unless: (a) we have your affirmative consent for a specific support request, (b) it is necessary for security purposes such as investigating abuse, (c) it is necessary to comply with applicable law, or (d) the data is aggregated and used for internal operations in accordance with applicable privacy laws.
• We do not use Google user data (including Gmail content) to develop, improve, or train generalized / non-personalized AI or ML models.

You may revoke the add-on's access at any time at Google Account permissions. Revoking access stops further Gmail access; it does not automatically delete metadata and snippets we already stored. To delete stored data, email support@buyerflo.com.

5. AI / model providers

When you use BuyerFlo to classify emails, draft replies, or extract information from contracts, we send the relevant text to Anthropic, PBC ("Anthropic"), an AI service provider, to generate the response.

• Anthropic processes the text on our behalf as a subprocessor under their data processing terms.
• Anthropic does not use this data to train their models.
• The text is processed transiently and is not retained by Anthropic beyond the duration of the request.

6. How email is sent (web app vs Gmail add-on)

These are different paths. Do not treat them as one "connected inbox."

• Gmail add-on: BuyerFlo drafts a reply. You review it and click Send in Gmail Compose. The add-on does not send mail and does not send on your behalf.
• Web app outbound: When you send from the BuyerFlo web app, mail goes out through Resend from a BuyerFlo deal address (not your Gmail account). That is not Gmail send-on-behalf and is not a connected Gmail inbox.

7. How We Share Information

We share information with:

• Service providers who help us operate the Service (hosting, e.g. Vercel; database and file storage, e.g. Supabase; payment processing; AI inference, Anthropic; web-app email delivery, Resend), under contracts limiting their use of your data to providing services to us.
• Third-party integrations you authorize (e.g., DocuSign, DotLoop, MLS platforms), governed by your relationship with those providers.
• Legal and safety purposes, where required by law, subpoena, or to protect the rights, property, or safety of BuyerFlo, our users, or others.
• Business transfers, in connection with a merger, acquisition, or sale of assets, subject to this policy continuing to apply to previously collected data.

8. Data Retention

We retain account and transaction data for as long as your account is active, and for 30 days after termination to allow for data export, after which it is deleted or anonymized except where retention is required by law or for legitimate business records (e.g., billing history).

Deal data and Gmail snippets are retained for the life of the associated deal, and may be retained after close where real-estate record-keeping rules in your jurisdiction require it.

OAuth tokens are not retained. The add-on uses short-lived tokens for the current request only.

You can request deletion of your data at any time (see Section 10).

9. Data Security

We use industry-standard technical and organizational measures — including encryption in transit, access controls, and secure hosting infrastructure — to protect your data. No system is 100% secure, and we cannot guarantee absolute security.

10. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. California residents have rights under the CCPA/CPRA, including the right to know what personal information is collected and to request deletion; BuyerFlo does not sell personal information. To exercise these rights, contact support@buyerflo.com.

To revoke the BuyerFlo Gmail add-on's access to your Google account, visit https://myaccount.google.com/permissions.

11. Client and Third-Party Data

Because BuyerFlo processes transaction data on behalf of real estate professionals, much of the personal information in our systems belongs to your clients and transaction counterparties, not to you. You are responsible for ensuring you have the appropriate legal basis, consent, or brokerage authorization to share this information with BuyerFlo, and for responding to any data subject requests from your clients regarding their information. BuyerFlo acts as a data processor/service provider with respect to this data and will assist you in fulfilling verified requests where legally required.

12. Children's Privacy

The Service is intended for licensed professionals and is not directed to individuals under 18. We do not knowingly collect information from children.

13. International Users

BuyerFlo is based in the United States and primarily serves U.S. real estate professionals. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-app notice before taking effect.

15. Contact Us

Questions about this Privacy Policy: support@buyerflo.com

1858 Oklahoma Avenue NE St. Petersburg, FL 33703