This policy covers two groups of people whose data this platform stores: the account holder (the wholesaler, investor, or agent who signs up and uses the Service — "you," if you're reading this as a User), and the buyers, sellers, and listing agents whose names, contact information, and — for buyers — signatures get entered by a User in the course of generating and sending an offer. That second group never creates an account here or separately agrees to this policy; Section 7 addresses that directly.
From the account holder: email address, hashed password (never stored in plain text), and billing information (handled by Stripe — see Section 4).
Entered by the account holder about buyers, sellers, and offers: buyer names, emails, and phone numbers; property addresses and offer terms; buyer signatures (image data) and the resulting signed contract PDFs; listing agent and brokerage contact information; an activity log of actions taken on each buyer/offer (e.g. profile updates, sends, signature events); and email open/delivery tracking for offers sent through the Service.
If you connect an optional third-party integration (Section 4), your API key for that provider is stored encrypted (AES-256-GCM) and is never displayed back to you or anyone else in plain text after you save it.
Data is used to generate offer documents, route them to buyers for e-signature and to listing agents by email, track signature and delivery status, power follow-up reminders, and — where a User connects one — check listing status or import lead data on that User's behalf. It is not used for advertising, and it is not used to train any AI model.
We do not sell personal data to third parties.
Data is retained for as long as the account is active. When an account is deleted, the platform sweeps and permanently deletes every store tied to that account: activity and audit logs, buyer access records and profiles, buyer signing sessions, all draft and finalized offer PDFs and submission documents, offer metadata, signature images, listing-status check history, usage events, saved account state, blocked-agent lists, and any email-tracking records tied to that account. Saved contract/submission-form templates are deleted automatically as part of removing the account record itself. Deletion is immediate and is not a soft-delete or grace-period process.
Passwords are hashed (scrypt, with a unique random salt per account) and are never stored or logged in plain text. Third-party API keys (Section 2) are encrypted at rest. Each account's data is isolated by account ID at the storage layer — one account's functions cannot read or write another account's buyers, offers, or settings. Sessions use time-limited tokens rather than persistent unencrypted credentials in the browser.
If you're a buyer, seller, or listing agent whose information was entered into this platform by a User (not by you directly), the User who entered your information is the party you engaged with directly, and is responsible for having a legitimate basis to enter your data and contact you. You can request access to, correction of, or deletion of your data by contacting the User directly, or by using the contact method in Section 8, which will be routed to the responsible account.
Requests to access, correct, or delete personal data — whether from an account holder or from a buyer/seller/agent whose data was entered by one — can be sent to support@offerproflow.com.