Privacy Policy

1. Two Categories of Individuals

A. Customers, the businesses (for example, real estate agencies) who subscribe to our Service.

B. End Leads, individuals who fill out a form on our Customer's own website (a homebuyer or seller, for example). We process this data on behalf of our Customer, not for our own independent purposes. Our Customer is the data controller for this data; we are the processor. See our Data Processing Agreement for the formal allocation of responsibilities.

2. Information We Process

Customers: contact and agency details, account configuration, support communications, billing information handled by Paddle, and integration credentials supplied through secure onboarding.

End Leads: name, email, phone, inquiry text, buyer/seller intent, budget, timeline, urgency, and qualification context. Enabled V6 workflows also process inbound/outbound SMS, drafts and revisions, consent/opt-out events, delivery status, and agent claim/contact activity. Optional enrichment is limited to the agreed account scope.

End Lead data is used to deliver Customer's workflow, not sold or used for our own marketing.

3. How We Use Information

Customer information supports account setup, billing, and support. On Customer's instructions, End Lead information supports analysis, enabled SMS qualification, alerts, CRM handoff, Response Guard, and weekly reporting. Manual Mode keeps automated outbound off; Approval Mode requires approval before sending.

4. Providers and Data Destinations

• Anthropic: AI analysis and message drafting using the context needed for the request.
• n8n: workflow execution and integration handling.
• Supabase: V6 lead, conversation, draft, consent, and operational records.
• Twilio: phone numbers, SMS content, and delivery/opt-out events when SMS is enabled.
• Slack/email providers: alerts and handoff context; the configured provider is identified at onboarding.
• Customer's CRM: Follow Up Boss, HubSpot, or Salesforce on Growth; Customer's settings govern destination records.
• Paddle: payments, subscriptions, recovery, and cancellation feedback under its privacy terms.
• Bitwarden Send: optional temporary credential handoff, not End Lead storage.

Optional enrichment and Enterprise hosting providers are identified before activation. We give the provider-change notice and objection opportunity stated in the DPA. Website demo/setup requests are submitted through Web3Forms; Google Fonts requests involve Google's servers.

5. Retention and Deletion

V6 stores operational data needed for the enabled workflow, including conversation and approval history. The retention schedule for lead records, drafts, logs, consent/opt-out records, and backups must be agreed and configured before activation. We do not claim that V6 is database-free or that all execution data is automatically deleted within seven days.

Customer may request return or deletion of retained End Lead data under the DPA. Legal or opt-out suppression requirements may require limited records to remain. Backup removal follows the applicable provider's lifecycle. Copies in Customer's CRM, Slack, or email follow Customer's settings. Integration credentials are deleted or disabled within 30 days after termination unless required by law.

6. Security

Safeguards include TLS in transit, encrypted n8n credential storage, restricted administrative access, and access controls for V6 records. Account access and retention settings are checked during onboarding. Raw credentials do not belong in demo or setup forms. No system can guarantee absolute security.

7. Rights of End Leads

Because End Leads did not sign up directly with us, requests from them regarding their data (access, deletion, correction) should generally be directed to our Customer, the data controller, who owns the underlying relationship. We will assist our Customer in fulfilling such requests. If an End Lead contacts us directly, we will forward the request to the relevant Customer and assist as required by applicable law.

8. Customer Requests

Contact info@bladeagentai.com for access, correction, or deletion of account data or retained End Lead data. Records already delivered to Customer's CRM, Slack, or email must also be managed in those destinations.

9. Browser Storage and Third Parties

The website stores your light/dark theme preference in local storage and your page-animation preference in session storage. These preferences are used for the website’s appearance and motion controls; they are not sent with demo or setup submissions. Your device’s reduced-motion setting is also respected. Setup progress is calculated on the page; the progress indicator does not store form values. Checkout/billing pages load Paddle and Retain, which may use cookies or similar technologies for payments, recovery, and engagement. We do not use advertising cookies. Google Fonts connects to Google. Setup uses no-store/no-referrer protections and does not load Paddle or collect raw credentials.

10. Do Not Track

We do not currently change our website behavior in response to browser "Do Not Track" signals. Third-party billing features are subject to the providers' privacy practices described above.

11. Links to Other Websites

Our website and communications may contain links to third party sites, such as a Customer's CRM provider or a scheduling tool. We do not control and are not responsible for the privacy practices of those sites. We encourage you to review the privacy policy of any site you visit.

12. Marketing Communications From Us

We may email our Customers (not End Leads) product updates or occasional relevant offers. Every such email includes a way to unsubscribe, and unsubscribing does not affect transactional emails needed to operate your account, such as billing or security notices.

13. International Processing

The current service is scoped for US and Canadian real estate teams. Hosting regions and providers are disclosed in the account scope; processing may occur outside a lead's country. Customer and Company must address applicable privacy and transfer requirements before enabling a new region. EU/UK processing requires an appropriate agreement and transfer assessment before activation.

14. Children's Privacy

The Service is intended for business use and is not directed at individuals under 18. We do not knowingly collect personal information from anyone under 18.

15. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify Customers and update the "Effective" date at the top of this page.

16. Contact

Questions about this Policy can be sent to info@bladeagentai.com.