privacy policy

This policy applies to real estate agents who use Needo ("you") and to the people whose information you enter into the Service (your clients and contacts). Because agents enter personal information about third parties, this policy addresses both.

• Your account data — your name and email address, collected when you sign in with Google, plus profile details such as your brokerage.
• Client and contact information you enter — names, emails, phone numbers, addresses, notes, life events, and transaction details about the third parties you manage in Needo.
• AI conversation content — the messages you exchange with the AI assistant and the context used to generate responses.
• Usage data — how you interact with the Service, used to operate and improve it.
• Billing information — handled by our payment processor, Stripe. Needo does not store your full card number.

• to provide, maintain, and improve the Service;
• to power AI features such as briefs, drafts, and insights;
• to process payments and manage your subscription;
• to provide support and respond to your requests;
• to keep the Service secure and to comply with the law.

To generate responses, your conversation content and relevant CRM context are sent to Anthropic, the third-party AI model provider that processes it on our behalf. We share only what is needed to produce the feature you requested. Under Anthropic's commercial terms, this data is not used to train their models, and they generally delete it within 30 days of processing it, except where they must retain it longer for safety or legal reasons.

To keep the Service safe and reliable and to help you when you need support, Needo's operators have two forms of access you should know about:

• Quality and safety review — Needo's operators may review conversations with the AI assistant, including the actions the assistant took on your behalf, to maintain quality and keep the service safe.
• Support access to your account — to help with support, Needo's operators may access your account on your behalf. Every such access is logged.

We share personal information only with the service providers (subprocessors) who help us run the Service, and only as needed to provide it:

• Supabase — database, authentication, and file storage;
• Vercel — application hosting;
• Anthropic — AI model provider (see section 4);
• Stripe — payments;
• Google — sign-in, and, if you connect a Google calendar, calendar sync. Synced events carry contact names, touchpoint notes, and dates such as birthdays and home anniversaries;
• Apple — calendar sync, if you connect an iCloud calendar;
• Resend — email delivery;
• Sentry — crash reporting and diagnostics. When the app breaks, it receives your account identifier, the page you were on, and the technical detail of the fault.

We also share information where you direct us to — most importantly, when an agent invites a client to their portal, that client sees the transaction details and agent contact information the portal is for. We may also disclose information if required by law. We do not sell your personal information.

We keep your information for as long as your account is active and as needed to provide the Service. When you request deletion, we remove your data within a reasonable period, except where we must retain it to meet legal, security, or billing obligations.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing (including rights under the CCPA and GDPR). You will not be discriminated against for exercising these rights.

Request handling is currently manual. To request an export or deletion of your data, email gborh1@gmail.com with the subject "Needo Privacy Request." We aim to respond within 30 days and may need to verify your identity first.

As the agent, you are the primary steward of the client and contact data you enter. If one of your clients wants to access or delete the information you hold about them, they can reach us through the same path above, and we will work with you to honor the request.

We protect your information with encryption in transit, access controls, and audit logging of authentication events and of operator access to your account. No system is perfectly secure, but we work to safeguard your data and to limit who can access it.

Needo is a professional tool and is not directed at children. We do not knowingly collect personal information from anyone under 18.

We may update this policy from time to time. When we do, we will revise the "last updated" date above and, for material changes, take reasonable steps to notify you.

Questions or requests? Reach us at gborh1@gmail.com. This policy is provided by Needo LLC, a California limited liability company.