privacy policy

This policy applies to real estate agents who use Needo ("you") and to the people whose information you enter into the Service (your clients and contacts). Because agents enter personal information about third parties, this policy addresses both.

• Your account data — your email address, from signing in with Google or with a sign-in link we email you, and your name and profile details such as your brokerage.
• Client and contact information you enter — names, emails, phone numbers, addresses, notes, life events, and transaction details about the third parties you manage in Needo.
• AI conversation content — the messages you exchange with the AI assistant and the context used to generate responses.
• Usage data — how you interact with the Service, used to operate and improve it.
• Billing information — handled by our payment processor, Stripe. Needo does not store your full card number.

• to provide, maintain, and improve the Service;
• to power AI features such as briefs, drafts, and insights;
• to process payments and manage your subscription;
• to provide support and respond to your requests;
• to keep the Service secure and to comply with the law.

To power AI features, your conversation content and relevant CRM context are sent to Anthropic, the third-party AI model provider that processes it on our behalf. That includes responses you ask for, and work Needo does in the background, such as preparing your brief and keeping contact summaries and relationship assessments up to date. We share only what each feature needs. Under Anthropic's commercial terms, this data is not used to train their models, and they generally delete it within 30 days of processing it, except where they must retain it longer for safety or legal reasons.

To keep the Service safe and reliable and to help you when you need support, Needo's operators have two forms of access you should know about:

• Quality and safety review — Needo's operators may review conversations with the AI assistant, including the actions the assistant took on your behalf, to maintain quality and keep the service safe.
• Support access to your account — to help with support, Needo's operators may access your account on your behalf. Every such access is logged.

We share personal information only with the service providers (subprocessors) who help us run the Service, and only as needed to provide it:

• Supabase — database, authentication, and file storage;
• Vercel — application hosting;
• Anthropic — AI model provider (see section 4);
• Stripe — payments;
• Google — sign-in, if you sign in with your Google account;
• Resend — email delivery;
• Sentry — crash reporting and diagnostics. When the app breaks, it receives your account identifier, the page you were on, and the technical detail of the fault.

We also share information where you direct us to — most importantly, when an agent invites a client to their portal, that client sees the transaction details and agent contact information the portal is for. We may also disclose information if required by law. We do not sell your personal information.

We keep your information for as long as your account is active and as needed to provide the Service. When you request deletion, we remove your data within a reasonable period, except where we must retain it to meet legal, security, or billing obligations.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing (including rights under the CCPA and GDPR). You will not be discriminated against for exercising these rights.

If you use Needo as an agent, you can do two of these yourself from Settings. Export your data downloads one file holding your account, contacts, deals, conversations with Needo and the documents on your deals; documents a client uploaded privately, which are hidden from you, are not included. Delete your account schedules the deletion of your account 30 days out: your account stays open until then and you can cancel from Settings, and once it is due our support team confirms with you and then deletes your account and your data as section 7 describes.

For any other request, or if you cannot use Settings, email gborh1@gmail.com with the subject "Needo Privacy Request." Emailed requests are handled manually. We aim to respond within 30 days and may need to verify your identity first.

As the agent, you are the primary steward of the client and contact data you enter. If one of your clients wants to access or delete the information you hold about them, they can reach us through the same path above, and we will work with you to honor the request.

We protect your information with encryption in transit, access controls, and audit logging of sign-ins, of changes to your account's role, plan and AI allowance, and of every time an operator accesses your account on your behalf. No system is perfectly secure, but we work to safeguard your data and to limit who can access it.

Needo is a professional tool and is not directed at children. We do not knowingly collect personal information from anyone under 18.

We may update this policy from time to time. When we do, we will revise the "last updated" date above and, for material changes, take reasonable steps to notify you.

Questions or requests? Reach us at gborh1@gmail.com. This policy is provided by Needo LLC, a California limited liability company.