Privacy policy

Your contacts, requests and properties are yours alone: they never appear in another member's lists, and the members of your groups cannot open, edit or download them. The former sharing of records with a group was retired on October 17, 2026. Connected Google accounts and OAuth tokens are never shared with other members.

To share a record with a group, you post a card in one of its conversations. A card is a fixed snapshot built from a limited list of fields, and only the members of that conversation can read it.

• By default a card hides the client's phone number and email address, and for a property the owner's contact and the exact address. They are included only if you turn on that option for the share. Without it, phone numbers and email addresses written in the card's text are replaced with “[hidden]”.
• Never in a card: your private notes, scores and call states, public links, other members' comments, and your own phone number or email address.
• For each share you choose whether your latest notes and a property's files are included, whether members may import the card, and whether a copy may be forwarded; forwarding is off by default.
• A member who imports a card gets a copy in their own CRM, marked “Shared by” your name “in” the group. The copy is theirs: later changes to your record do not reach it. A copy whose card did not allow forwarding can never be shared again: not in a group, not by a WhatsApp link, not on a public page.
• You, or the group's owner or admin, can withdraw a card at any time: its content is erased and members can no longer read or import it. A card is also withdrawn when its record is deleted, when you leave the group or when the group is archived. Copies already imported stay with their importers: BrokerAI cannot recall them, nor information a member has already downloaded.

Group members see each other's names; the group never gives them your phone number or email address. Membership changes and card activity (posted, imported, withdrawn, options changed) are logged.

BrokerAI includes a directory in which signed-in brokers can find each other by name or company and ask to connect. A connection is mutual: one broker sends a request, the other accepts or declines it, and either can remove it later.

• What other brokers see on your card: your name, professional title, company, profile photo, the areas you serve, your specialties, how long you have been in the trade, since when you use BrokerAI, the number of connections you have in common, and your activity as ranges only (no active property or request, 1–9, 10–49, 50+).
• What is never shown: the number of your contacts, the exact number of your properties or requests, and your contacts, requests and properties themselves.
• Your phone number and email address are not on this card, even for your connections: they are shown only on your business card (see below). Your description is shown to a broker who opens your profile.
• You appear in the broker search by default. The “Appear in broker search” switch in Settings turns this off at any time. It removes you from search results only: your connections can still find you, people who share a group or a conversation with you can still be suggested your profile, and matching is not affected.
• Private messages can be started only between connected brokers, or from a match. You can block a broker: you then no longer find, suggest or contact each other. You can also report a profile; reports are read only by the BrokerAI team.

Your account has two email addresses. Your sign-in email is used only to sign in and for messages about your account. Your contact email is the one shown on your business card; until you set another, it is your sign-in email.

• Your phone number and contact email reach other people only through your business card, at its own link. Anyone who has the link can open it. You can turn the link off or replace it in your profile; it then stops working for everyone who has it.
• The broker directory, your connections, your groups and matches never receive your phone number or email address directly.
• In a private conversation you can share your contact: the other broker then gets a link to your card that works for that conversation only, and stops as soon as either of you withdraws it or blocks the other. Your card link must be on to share it.
• Public property pages show only a button to your business card, never your phone number or email address themselves.

BrokerAI compares your open requests and available properties with those of other brokers to surface possible deals: with your connections and the records shared as cards in your groups (“My network”), and with every BrokerAI broker (“Market”). Your personal requests and properties take part in this matching by default; you can limit it to a selection or turn it off in the matching settings.

On the Market a match is anonymous: it tells which criteria are compatible, not who you are, and never your client's name, phone number, exact budget or address. Names are revealed only when the other broker accepts a conversation.

With your network (your connections, and the members of your groups for a record shared as a card) a match shows your name, professional title, company and profile photo by default, and how each criterion compares, gaps included: for example a price 6% above the budget, or one bedroom more than asked. It never shows the record itself: no title, price, address, description, file or client information. A broker of your network can message you about the match.

In both cases a record's details, files or client contact are shared only when its owner grants them in the conversation, one by one, and a grant can be withdrawn. The two brokers of a match share its status (contacted, visit, offer, deal or dismissed) with the name of who changed it when they are named to each other; nobody else sees it.

You can send one or several of your own available or reserved properties to anyone, for example on WhatsApp, as a public link. Anyone who has the link can open the page without an account; it is not listed in search engines and loads no third-party service. Contacts and requests are never published, and nothing is public until you create a link.

• What the page shows: the title, type, offer, delivery, specs, area, compound and developer, the description and amenities, your name, title and company, and a button to your business card.
• Chosen by you for each link: the price (with the price per m², rent and payment plan amounts), the exact address and landmarks, the payment breakdown (paid so far, over price), and the photos. No photo is selected until you tick it, and the photos you tick become public for that link only.
• Never shown: your private notes, the owner or any client contact, the status, the history, your documents and internal identifiers, and your phone number or email address (they are on your business card).
• You choose how long each link works: 7, 30 or 90 days, or no expiry. You can stop a link at any time from the property or from your shared links in your profile. A sold, rented, withdrawn or on-hold property shows only that it is no longer available.
• Each link counts its views and shows you the first and last view. To count a visitor once a day, BrokerAI keeps a shortened one-way code made from the visitor's IP address, browser and the day, never the IP address itself.
• So that a page opens again without a network, the visitor's browser keeps a copy of it and of its photos on their device. The copy expires with the link, after 30 days at most, and is erased when the device next finds the link stopped or expired.
• A page may invite other brokers to join BrokerAI, naming your first name unless you turn this off in your shared links settings. The join form asks for a name, an email address, an optional phone number, a city and a message, is protected by Cloudflare Turnstile, records the link it came from, and is read only by the BrokerAI team.

BrokerAI handles the information you provide when you create and use an account, including:

• Account and profile information, such as your sign-in email address and contact email address, first and last name, phone number, professional title, description, profile photo and banner.
• CRM content you enter or import, including contact names, phone numbers, email addresses, countries, notes, photos, cases, budgets, tasks, comments and feedback, as well as the cards you share in your groups and the copies you import from them.
• Files, images, spreadsheet details and voice recordings you intentionally submit to an import or AI-assisted feature.
• Technical and pilot-usage information needed to operate and test the service, such as session data, pages opened, controls used, form submissions, record changes, display preferences, push-notification subscriptions and diagnostic logs. Pilot telemetry records action labels and changed field names, but not passwords, phone numbers, comments or the values typed into forms.

We use this information only to provide, secure and improve BrokerAI: to authenticate you, maintain your CRM workspace, import contacts, create meetings, deliver reminders, power the features you request, understand pilot usage, prepare restricted daily activity reports for the operator, prevent abuse and troubleshoot the service.

BrokerAI does not sell personal information and does not use it to serve advertising.

When you choose a file with Google Picker, BrokerAI requests access only to the specific Google Sheet you select. We use that temporary access for the import you initiated, to read the selected spreadsheet and prepare a contact preview. BrokerAI cannot browse or read your other Drive files.

• The Google Sheets access token is used during the one-time import and is not persisted in BrokerAI's database.
• The prepared preview is private to your account and access to it expires after 30 minutes. Contact records are created only from the rows you confirm.
• To identify columns, BrokerAI may send column headings and non-content structural descriptions to OpenAI. These requests use store: false; spreadsheet row values are not sent for this column-mapping step.

When you choose Google Meet for a contact action, BrokerAI requests permission to create and manage events. It reads the connected Google account email, creates a 30-minute event in the primary calendar and asks Google Calendar to attach a Meet link. BrokerAI does not list or browse your other calendar events.

To keep the connection available, BrokerAI stores the connected account email, granted scope, expiry information and OAuth access or refresh tokens in Supabase. Tokens are encrypted before database storage and are used only to perform meeting actions you request. You can revoke access at any time from your Google Account permissions.

BrokerAI's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Read Google's policy.

Some optional features use OpenAI to interpret information you submit, such as mapping import columns, extracting contacts from an image, transcribing a voice recording or structuring a case request. BrokerAI sends these API requests with store: false. Only use these features with information you are authorized to process.

The in-app assistant sends OpenAI your question and a minimal extract of your workspace: at most 10 contacts, only those the conversation names (or the one open on screen), as a name and a status, without phone numbers, e-mail addresses or notes, with the requests, properties, tasks and comments linked to them. The chat assistant sends the messages of the conversation you ask it about. Nothing is posted or changed without your confirmation.

BrokerAI relies on Supabase for authentication, database and file storage; Vercel for hosting, runtime delivery and operational logs; Resend for restricted operator activity emails; OpenAI for the optional AI-assisted processing described above; and Google only when you initiate a Google integration. These providers process information under their own security and privacy commitments, potentially in countries other than your own.

When the security check is enabled on the sign-in, account creation, password reset and “Join BrokerAI” pages, Cloudflare Turnstile receives technical signals from your browser (such as your IP address and browser characteristics) to tell people from automated abuse; it never receives your password or the contents of your account.

We may also disclose information when required by law, or when reasonably necessary to protect users, the service or the public.

CRM and profile information is retained while your account uses the service, or until it is deleted or no longer needed for the purposes described here. Google Sheets authorization tokens are not retained. Google meeting credentials remain encrypted while the connection is active. Contacts, requests and properties you delete stay in Recently deleted for 30 days, where you can restore them, and are then erased. A withdrawn card's content is erased at once; imported copies belong to their importers. Public links follow the expiry you chose, and offline copies on a visitor's device last 30 days at most. Operational records may be kept for a limited period for security, reliability and legal obligations.

We use access controls, account-scoped database rules and encryption for stored integration tokens. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

You can review and update profile and CRM information in BrokerAI, choose whether to enable notifications, decline an optional integration, and revoke Google access from your Google Account. You can turn off or replace your business card link, stop your public links, and withdraw the cards you shared. “Export my data” downloads your contacts, requests, properties, tasks and settings, the messages you wrote and your activity, the cards you shared and the records you imported, without other users' records, phone numbers or email addresses, and you can delete your account from your profile. To request access, correction or deletion of information associated with your BrokerAI account, contact us from the email address linked to that account.

We may update this policy as BrokerAI changes. The date shown above identifies the latest version. Material changes will be communicated through the service when appropriate.

Questions or privacy requests: contact@re-brokerai.com