Privacy Notice

Coordy CRM ("Coordy," "we," "our," or "us") is committed to protecting the privacy of individuals who use our platform. This Privacy Notice explains how we collect, use, disclose, and safeguard your information when you access or use our Services. By using the Services, you agree to the practices described in this Notice. If you do not agree, please discontinue use of the Services.

We collect information you provide directly, information generated through your use of the Services, and information received from third parties:

• Name, email address, phone number, and login credentials
• Brokerage or company name, role, and license information (if applicable)
• Profile settings and preferences

• Client and lead information you enter, including names, contact details, and notes
• Transaction records, documents, checklists, and associated metadata
• Task history, calendar events, and communication logs

• IP address, browser type, operating system, and device identifiers
• Pages visited, features used, session duration, and clickstream data
• Error logs, performance data, and diagnostic information

• OAuth tokens and connection metadata when you authorize integrations (e.g., Google)
• Data synchronized from connected services (e.g., calendar events, email metadata)
• MLS/IDX listing data accessed through approved provider integrations

We use the information we collect to:

• Provide, operate, and maintain the Services
• Authenticate users and manage account access and permissions
• Process transactions, route workflows, and coordinate document handling
• Deliver notifications, reminders, and platform communications
• Support integrations with third-party services you authorize
• Analyze usage patterns to improve product features and user experience
• Detect, investigate, and prevent fraud, abuse, or security incidents
• Comply with legal obligations and respond to lawful requests
• Enforce our Terms & Conditions and other applicable policies

We do not sell your personal information to third parties. We do not use your client or transaction data to train general-purpose AI or machine learning models for commercial distribution.

To the extent applicable under data protection laws (including GDPR), we rely on the following legal bases to process your personal information:

• Contract performance — processing necessary to deliver the Services you have subscribed to
• Legitimate interests — security, fraud prevention, platform improvement, and abuse detection
• Legal obligation — compliance with applicable laws, regulations, and lawful authority requests
• Consent — where you have provided explicit consent, such as for optional integrations or marketing communications

We do not sell or rent your personal information. We may share information in the following circumstances:

Brokerages, admins, and team leaders may have access to activity and operational data associated with agents and users under their account, as described in our Terms & Conditions.

We share data with vetted third-party vendors who assist us in operating the platform, including cloud infrastructure providers, database services, payment processors, and communications providers. These vendors are contractually obligated to handle data only as directed by us.

We may disclose information where required by law, subpoena, court order, or regulatory authority, or where we believe in good faith that disclosure is necessary to protect the safety, rights, or property of Coordy, our users, or the public.

In the event of a merger, acquisition, asset sale, or restructuring, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

The Services may include integrations with third-party platforms including but not limited to Google (Docs, Drive, Calendar, Gmail), Twilio, MLS/IDX data providers, and payment processors. When you connect a third-party service:

• You authorize us to access and store relevant tokens and data from that service as needed to provide the integration
• That third party's own privacy policy governs their handling of your data on their platform
• You may revoke integrations at any time from your account settings; revocation stops new data collection but does not retroactively delete previously synchronized data unless you submit a deletion request

Coordy is not responsible for the privacy practices of third-party services. We encourage you to review their privacy policies before authorizing any integration.

We use cookies and similar tracking technologies to operate the Services, maintain authentication sessions, remember preferences, and analyze platform usage. Categories of cookies we use include:

• Strictly necessary — session authentication, security tokens, and core platform functionality
• Functional — user preferences, UI state, and personalization settings
• Analytics — aggregated usage statistics and feature adoption metrics (no cross-site tracking)

You may configure your browser to refuse cookies; however, doing so may limit your ability to use certain features of the Services. We do not currently respond to browser Do Not Track signals.

We retain your information for as long as your account is active or as needed to provide the Services. Following account cancellation or termination, we retain data for a reasonable period to allow for dispute resolution, compliance with legal obligations, and platform integrity purposes. After that period, data is deleted or anonymized in accordance with our internal retention schedule.

Transaction documents, signing records, and compliance-related data may be subject to longer retention periods where required by applicable law or at the request of a brokerage administrator with appropriate authority.

We implement commercially reasonable technical and organizational security measures to protect your information, including:

• Encryption of sensitive data in transit (TLS) and at rest
• Encrypted storage of third-party integration tokens (AES-256)
• Role-based access controls and permission scoping
• Regular security reviews and infrastructure monitoring

No security system is impenetrable. We cannot guarantee the absolute security of your information. In the event of a data breach that affects your rights, we will notify you as required by applicable law.

Depending on your jurisdiction, you may have rights with respect to your personal information, including the right to:

• Access a copy of the personal data we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal data (subject to legal retention obligations)
• Object to or restrict certain processing activities
• Receive your data in a portable, machine-readable format
• Withdraw consent where processing is based on consent
• Lodge a complaint with a data protection authority (for EEA/UK users)

To exercise any of these rights, contact us at YourcoordyCRM@gmail.com. We will respond within the timeframe required by applicable law (typically 30 days). Identity verification may be required before we fulfill a request.

Where the Services include access to MLS or IDX listing data, that data is sourced from MLS boards, data providers, or approved vendor feeds. Such data is subject to the terms, restrictions, and privacy obligations of those respective sources. Users accessing MLS/IDX data through Coordy are responsible for complying with their MLS membership terms and applicable data use restrictions.

Coordy does not independently distribute, re-sell, or republish MLS/IDX data outside of permitted display contexts as authorized by the applicable data source.

The Services are intended for adults aged 18 and older operating in a professional real estate context. We do not knowingly collect personal information from children under 13 (or under 16 where required by applicable law). If we learn that we have collected personal information from a minor, we will take steps to delete that information promptly. If you believe a minor has submitted information through the Services, please contact us at YourcoordyCRM@gmail.com.

Coordy is operated from the United States. If you access the Services from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. Data protection laws in those countries may differ from those in your jurisdiction.

By using the Services, you consent to the transfer of your information to the United States and other countries as described in this Notice. Where required by applicable law, we implement appropriate safeguards (such as standard contractual clauses) for international transfers.

We may update this Privacy Notice from time to time. When we make material changes, we will update the Effective Date at the top of this page and, where appropriate, notify you via in-platform notice or email. Your continued use of the Services after any update constitutes your acceptance of the revised Notice.

For privacy-related questions, requests, or concerns, please contact us: