Introduction
RE-Efficient ("RE-Efficient," "we," "us," or "our") provides an AI-powered customer relationship management platform designed for real estate professionals. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use our service at re-efficient.com (the "Service").
By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.
Who We Are
RE-Efficient is operated by Ryan Ponce, a sole proprietorship based in San Diego, California, United States.
Contact: ryan@re-efficient.com
Information We Collect
Information You Provide Directly
- Account information: name, email address, phone number, professional title, brokerage name, license number, and timezone, provided when you register or update your profile.
- Contact records: information about your real estate clients and leads that you create or import, including their names, email addresses, phone numbers, property interests, transaction details, and notes you record.
- Email content: drafts and sent messages you compose or that our AI features compose on your behalf for your review and approval before sending.
- Calendar events: appointments, showings, and meetings you create through the Service.
- Brand and marketing materials: logos, signatures, brand voice preferences, and templates you upload or configure.
Information from Connected Google Services
When you connect your Google account through OAuth, we access only the data necessary to provide the features you have authorized:
- Gmail (
gmail.send): We send emails from your Gmail account on your behalf, only when you or your AI assistant explicitly approves a message for sending. We do not read your inbox, search your messages, or access mail you receive. Sent message metadata (recipient, subject, send timestamp, Gmail message ID) is stored to provide delivery confirmation and history within RE-Efficient. - Google Calendar (
calendar): We read free/busy information from your calendars to determine availability for booking appointments, and we create calendar events when you or a client books a meeting through the Service. We do not delete or modify events that RE-Efficient did not create. - Profile (
userinfo.email,userinfo.profile): We use your Google account email and name to create and identify your RE-Efficient account during sign-in.
Note on signatures: RE-Efficient does not access your Gmail signature directly. You paste your signature once into RE-Efficient's Settings page and we store it locally; the signature is appended to outgoing emails sent through RE-Efficient.
Information Collected Automatically
- Usage data: pages visited within the dashboard, feature interactions, and API request logs (for debugging and rate-limiting purposes).
- Device and connection data: IP address, browser type, operating system, and approximate region (derived from IP).
How We Use Information
We use the information we collect to:
- Provide and operate the Service, including sending emails on your behalf, scheduling appointments, and managing your contacts and transactions
- Authenticate you and protect your account
- Respond to your support requests
- Improve the Service through aggregated, de-identified usage analytics
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations
We do not use your data to:
- Sell or rent it to third parties for any purpose
- Serve advertisements
- Train artificial intelligence models for other customers or for general-purpose use
- Profile you for purposes outside of providing the Service
Limited Use of Google User Data
RE-Efficient's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We use Google user data only to provide and improve the user-facing features of RE-Efficient that are prominent in the application's user interface.
- We do not transfer Google user data to others, except as necessary to provide the Service (for example, sending an email through Gmail to its intended recipient at your direction), to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to you.
- We do not use Google user data to serve advertisements.
- We do not allow humans to read Google user data unless we have your affirmative agreement for specific messages, doing so is necessary for security purposes such as investigating abuse, to comply with applicable law, or for our internal operations and even then only when the data has been aggregated and anonymized.
How We Share Information
We share information only in these limited circumstances:
- With your express direction. When you approve an email to be sent, the message is delivered to the recipient you specified through your connected email provider.
- Service providers. We share data with vendors who help us operate the Service: Supabase (hosted PostgreSQL database), Railway (application hosting), Vercel (dashboard and marketing site hosting), Resend (transactional email delivery), and Google (your own connected Google account). These providers are contractually obligated to protect your data and use it only to provide their services to us.
- Legal compliance. We may disclose information if required by law, subpoena, or other legal process, or to protect the rights, property, or safety of RE-Efficient, our users, or others.
- Business transfers. If RE-Efficient is acquired by or merged with another company, we will provide notice before your data is transferred and becomes subject to a different privacy policy.
We do not sell, rent, or trade your personal information.
Data Retention
We retain your personal information for as long as your account is active and as needed to provide the Service. You may request deletion of your account and associated data at any time by emailing ryan@re-efficient.com. We will delete your data within 30 days of receiving a verified deletion request, except where we are required to retain it for legal or regulatory reasons (for example, financial records).
Email metadata (sender, recipient, subject, timestamp) for messages sent through the Service is retained for 18 months for delivery confirmation and history, then automatically purged.
Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal information:
- Access the data we hold about you
- Correct inaccurate or incomplete data
- Delete your account and associated data
- Export your data in a portable format
- Restrict or object to certain processing
- Withdraw consent for OAuth-connected services at any time, by disconnecting them in your RE-Efficient Settings or directly in your Google Account permissions
To exercise any of these rights, email ryan@re-efficient.com. We will respond within 30 days.
California Residents (CCPA/CPRA): You have the rights described above and additionally the right to know what categories of personal information we have collected about you in the past 12 months and the categories of third parties with whom we shared it. We do not sell personal information as defined by California law.
Security
We use industry-standard security measures to protect your data, including:
- Encryption in transit (TLS) for all data sent between your device and our servers
- Encryption at rest for our database
- OAuth tokens stored encrypted; never displayed to other users or staff
- Row-level security policies isolating each tenant's data
- Authentication via Supabase Auth with secure password hashing
- Limited staff access on a need-to-know basis
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you in accordance with applicable law.
California Residents (CCPA & CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) give you additional rights regarding your personal information.
Categories of personal information we collect. Identifiers (name, email, phone), professional information (DRE number, brokerage, license), commercial information (transactions you create in the Service), internet activity (log data, IP addresses, device information), geolocation (approximate, derived from IP), and inferences drawn from any of the above (e.g., engagement scores from your activity).
Sources. Directly from you, from your authorized third-party connections (Google, Microsoft) when you grant access, and from automated activity in the Service.
Purposes. Operating the Service, providing you with the Tools you have asked your AI to invoke, complying with our legal obligations, and improving the Service. Specific purposes are described under "How We Use Information" above.
We do NOT sell your personal information. We do not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration. We do not share your personal information for cross-context behavioral advertising.
Your CCPA / CPRA rights include:
- Right to know what personal information we collect, use, disclose, and (if applicable) sell — broken down by category and purpose
- Right to delete personal information we hold about you, subject to legal exceptions
- Right to correct inaccurate personal information
- Right to opt out of any sale or sharing of personal information (not applicable to us — we do not sell or share for cross-context advertising)
- Right to limit the use of sensitive personal information (we use sensitive information only as needed to provide the Service to you)
- Right to non-discrimination — we will not deny you service, charge you differently, or provide a lower-quality experience because you exercised any of these rights
To exercise any of these rights, email ryan@re-efficient.com with the subject line "California Privacy Request" and the name and email associated with your account. We will respond within 45 days as required by law. We may need to verify your identity before completing the request.
Retention. See "Data Retention" above for the timeframes by category. We do not retain your personal information for longer than is reasonably necessary for the purposes for which it was collected.
Children
The Service is intended for use by real estate professionals aged 18 and older. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us at ryan@re-efficient.com and we will delete it.
International Users
RE-Efficient is operated from the United States. If you access the Service from outside the United States, you understand and consent to the transfer and processing of your data in the United States, which may have different data protection laws than your country of residence.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. For material changes, we will notify you by email or through a prominent notice in the Service before the change takes effect.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, contact us at:
Email: ryan@re-efficient.com
Mail: RE-Efficient, 8889 Rio San Diego Dr., Ste 200, San Diego, CA 92108