Privacy Policy

Who we are

BuyerLoop ("BuyerLoop", "we", "us") provides an AI-powered lead qualification and follow-up platform for real estate agencies, available at https://buyerloop.app. This policy explains what information we collect, how we use it, and the choices you have. It applies to agency users who create BuyerLoop accounts and to property buyers who interact with a BuyerLoop chat widget on an agency's website.

Information we collect

From agencies (our customers): account details you provide when signing up — agency name, website URL, email address, and password (stored in hashed form by our authentication provider). If you sign in with Google, we receive your name, email address, and profile picture from your Google account.

Billing information: if you purchase a subscription, payment is handled by our merchant of record, Paddle.com Market Ltd. Paddle collects your payment details directly — BuyerLoop never sees or stores your card number. We receive only subscription status information (such as whether your plan is active) and the billing identifiers needed to manage your subscription.

From buyers (via the chat widget): information a buyer chooses to share during a conversation, such as their name, email address, phone number, budget, preferred location, property type, timeline, and financing status. This information is collected on behalf of the agency whose website hosts the widget, and is only visible to that agency.

Automatically: basic technical data needed to operate the service, such as timestamps of messages and follow-up activity. We do not use advertising trackers.

Google user data

If an agency connects its Google Calendar to BuyerLoop, we request access to the Google Calendar Events scope (calendar.events). We use this access for one purpose only: creating and managing property viewing appointments that the agency or its buyers book through BuyerLoop, including inviting the buyer to the event.

We do not read, analyze, or store the contents of your existing calendar events. We store only the OAuth tokens needed to keep the connection working, encrypted at rest in our database, and the identifiers of events BuyerLoop itself creates. You can disconnect Google Calendar at any time from your Settings page or by revoking BuyerLoop's access at myaccount.google.com/permissions, which immediately invalidates our access.

BuyerLoop's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, do not use it for advertising, and do not transfer it to third parties except as necessary to provide the calendar booking feature or as required by law. Google user data is never used to train AI or machine-learning models.

How we use information

We use the information we collect to operate BuyerLoop: to qualify and score leads for the agency, generate AI follow-up messages, send follow-up emails to buyers on the agency's behalf, book property viewings, and show agencies analytics about their own leads. Buyer conversations are processed by AI models (Google Gemini) to generate responses and qualification summaries; this processing happens per-conversation to provide the service.

How information is shared

We do not sell personal information. We share data only with the service providers needed to run BuyerLoop: Google Firebase (authentication and database), Google Cloud / Gemini (AI processing), Resend (email delivery), Paddle (payment processing, as merchant of record), and Vercel (hosting). Each provider processes data only to provide their service to us. Buyer data collected through an agency's widget belongs to that agency and is visible only to that agency. We may disclose information if required by law.

Data retention and deletion

We keep account and lead data for as long as the agency's account is active. Agencies can delete individual leads from their dashboard at any time. To delete your account and all associated data — or, if you are a buyer, to request removal of your information from an agency's BuyerLoop records — email us at hello@buyerloop.app and we will complete the deletion within 30 days. Disconnecting Google Calendar deletes our stored tokens for that connection.

Security

All traffic to BuyerLoop is encrypted with HTTPS/TLS. Data is stored in Google Firebase with access controls that restrict each agency to its own records. OAuth tokens and API credentials are stored server-side and are never exposed to browsers. No method of transmission or storage is 100% secure, but we work to protect your information with industry-standard measures.

Children's privacy

BuyerLoop is a business tool and is not directed at children under 16. We do not knowingly collect information from children.

Changes to this policy

If we make material changes to this policy, we will update the effective date above and notify agency account holders by email. Continued use of BuyerLoop after changes take effect constitutes acceptance of the updated policy.

Contact

Questions about this policy or your data: hello@buyerloop.app