Privacy Policy

Effective August 22, 2026. Last updated August 22, 2026.

1. Who we are

EstateFlow ("EstateFlow", "we") provides a web workspace for real-estate agents to manage listings, leads, viewings and deals. For the data you enter about your own clients, you are the data controller and we act as your processor. For your own account data (your email, your plan, your usage), we are the controller. Privacy questions: privacy@estateflow.app.

2. What we collect

• Account data: your email address and hashed authentication credentials.
• Business records you create: listings (title, address, city, price, beds, baths, area, status), leads (name, email, phone, source, budget), viewings (time, notes, links to a listing and a lead), and deals (stage, value).
• Plan state: whether your workspace is on Free or Pro.
• Product telemetry: coarse events such as "listing_created" or "login_succeeded", used to keep the service working and to fix faults.
• Essential cookies: a session cookie so you stay signed in, and a cookie recording your consent choice.

We do not collect special-category data, we do not run advertising trackers, and we never sell or share personal information for cross-context behavioural advertising.

3. Why we process it, and on what basis

• To provide the service (accounts, storing your records, quotas) — performance of a contract, GDPR Art. 6(1)(b).
• To keep the service secure and reliable (fault diagnosis, abuse prevention) — legitimate interests, Art. 6(1)(f).
• Non-essential analytics or cookies, where used — your consent, Art. 6(1)(a); you can withdraw it at any time.
• To meet legal obligations (records, responding to lawful requests) — Art. 6(1)(c).

4. Lead data and your own obligations

When you record a lead, you are processing someone else's personal data. You are responsible for having a lawful basis for that, for telling those people how their data is used, and for honouring their rights. We process it only on your instructions, to run the features you use.

5. Infrastructure and sub-processors

The application runs on Vercel (hosting/CDN) and stores data in AuraOS managed services (authentication, database, telemetry) operated by Lumorb. Both act as our sub-processors under written terms. No third-party API keys are exposed to your browser; the browser only receives a publishable application key. Where data leaves the EEA/UK, transfers rely on the EU Standard Contractual Clauses and the UK Addendum.

6. Retention

• Account and business records: for as long as your workspace exists.
• After you delete your data: business records are removed immediately; residual backup copies age out within 30 days.
• Consent records: kept at least 6 months as proof of your choice.
• Security and telemetry logs: up to 12 months.

7. Your rights

Depending on where you live you may have the right to access, correct, delete, port, restrict or object to processing, to withdraw consent, and not to be discriminated against for exercising a privacy right. Two of these are built into the product: Account → Export everythinggives you a full machine-readable copy, and Account → Delete my data erases your records. For anything else, email privacy@estateflow.app; we respond within 30 days (GDPR/UK GDPR) or 45 days (CCPA/CPRA, extendable once by 45 days). EU/UK users may also lodge a complaint with their supervisory authority. California residents may use an authorised agent.

8. Cookies

We set a session cookie (essential — the app cannot keep you signed in without it) and a consent cookie recording your choice. In the EU, UK, Brazil, Singapore and China we ask for opt-in consent before any non-essential cookie; in the US we offer an opt-out. Clearing the consent cookie in your browser makes the banner appear again so you can change your choice.

9. Security

Traffic is encrypted with TLS. Credentials are never stored in plain text. Session tokens are held in HTTP-only cookies. Every API route authorises the caller and scopes reads and writes to the signed-in agent, so one agent cannot reach another agent's records. No system is perfectly secure; if a breach affects your data we notify you and the relevant authority within 72 hours as required.

10. Children

EstateFlow is a professional tool and is not directed to anyone under 16. We do not knowingly collect data from children; if you believe we have, contact us and we will delete it.

11. Automated decision-making

The weighted pipeline figure is arithmetic on values you entered, not a profiling decision. We do not make automated decisions that produce legal or similarly significant effects about you.

12. Changes

If we change this policy materially we will update the date above and notify signed-in users before the change takes effect. Continued use after the effective date means you accept the updated policy.

See also Terms of Service and Refund Policy.