SECURITY & DATA
Trust should be specific.
Your tenant relationships are your business. Here is our commitment to your data, what the product currently supports, and what we are verifying before inviting brokers into the pilot.
Your data is yours
Customer-provided tenant lists, contacts, property files, and deal information remain yours. We do not sell or resell that data, contribute it to a shared prospect pool, or use it to build prospect lists for other brokers.
This commitment covers the information you provide. Any future contact-enrichment data will also be subject to its provider’s licensing terms, which we will explain before use.
You decide what leaves your mailbox
Gmail and Google Workspace are the first planned mailbox options. The outreach flow is being designed around your approval of the exact recipient, sender, message, and attachments. Editing that content must require a fresh approval.
Mailbox connection, sending, reply tracking, and disconnect controls are not available in the current release. The launch-site walkthrough is an illustration, not a connected mailbox.
Workspace boundaries
The code uses workspace-scoped database access and row-level security policies. We still need to verify the deployed runtime database role and isolation across customer workspaces before the pilot.
Uploaded files use object storage with time-limited signed links. Storage permissions, privileged access, and all customer-data paths are part of that release verification. We do not claim a security certification or universal isolation guarantee.
Encryption and AI processing
We are verifying encryption in transit and at rest across the deployed database, file storage, and relevant service-provider paths. We will publish verified scope rather than make an unqualified encryption claim. This service is not described as end-to-end encrypted.
Delivering the application involves service providers, including hosting, authentication, database/storage, and AI inference. Provider and fallback routing, retention settings, and training restrictions are being reviewed. We do not currently claim that all processing has zero retention or that no third party can access data.
Export, deletion, and disconnect
Customer-data export and scoped deletion are planned alongside reusable tenant profiles. Mailbox disconnect is planned with the Gmail integration. These are not presented as available self-service features today.
Before the pilot, we will document retention, backup expiry, and any audit records that must remain. Deleting active data and expiry from backups are separate steps.
What happens when you apply
We collect your name, email, and brokerage, plus any optional context you choose to provide. Campaign attribution may be recorded with the application. The founding team uses this information to evaluate pilot fit and contact potential participants. An application is not a marketing-newsletter subscription.
Application details are stored in our database and made available through a founder-restricted review queue. Repeated applications using the same email do not replace the original submission. The form never requests tenant files, contact lists, mailbox credentials, or payment details.
Named launch-funnel events use fixed categories, not the contents of your application. Hosting and operational providers may process technical request information. Application retention and a public privacy contact must be finalized before public launch; please do not include confidential deal information in the optional answer.