Privacy Policy

1. Overview

This Privacy Policy explains what information Agent Hub ("we," "us," or "our") collects, how we use it, and your rights regarding that information. By using Agent Hub, you agree to the practices described here.

2. Information We Collect

Account Information

• Name — your name as entered in Settings, used to personalize the app and AI features.
• Email address — used to create and authenticate your account.
• Password — stored as a secure bcrypt hash by Supabase; we never store or transmit plaintext passwords.

Business Data You Enter

• Lead information — names, phone numbers, email addresses, property details, notes, and status for prospects and clients you add.
• Deals and commission data — sale prices, net commission, close dates, and other transaction details you log.
• Calendar events — appointments, showings, and other events you create.
• Reminders and tasks — follow-up reminders linked to leads.
• Goals — annual and monthly production targets you set.
• Vendor contacts — names, companies, and contact details for your preferred vendors.
• Resources — scripts, templates, and notes you save.

Usage and Technical Data

• Log data — pages visited within the app, features used, and error logs. This is used solely to diagnose problems and improve the Service.
• Device and browser information — browser type, operating system, and screen size, collected automatically to optimize the user experience.
• Notification preferences — whether you have enabled push notifications, stored locally on your device.

3. How We Use Your Information

We do not:

• Sell, rent, or trade your personal data to any third party — ever.
• Use your data for advertising or marketing purposes unrelated to Agent Hub.
• Share your client or lead data with other Agent Hub users.
• Use your data to train AI models without your explicit consent.

4. Data Storage & Security

Your data is stored securely using Supabase, a database platform hosted on Amazon Web Services infrastructure in the United States. Data is encrypted at rest and in transit using industry-standard TLS encryption.

Supabase enforces Row-Level Security (RLS) policies so that your data is accessible only to your authenticated account — no other Agent Hub user can read your data.

We implement reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Your data is stored in the US and is subject to US law. If you are located outside the US, please be aware that your information is transferred to and processed in the US.

5. Payment Data

All subscription payments are processed by Stripe, a PCI-DSS Level 1 certified payment processor.

We never see, store, or have access to your credit card number, CVV, or full payment card details. This information goes directly to Stripe's servers and is never transmitted through Agent Hub's systems.

We store only the following Stripe-related identifiers to manage your subscription:

• Your Stripe Customer ID (a non-sensitive token like cus_xyz...)
• Your Stripe Subscription ID
• Subscription status (active, trialing, canceled)
• Trial end date

Stripe's privacy policy is available at stripe.com/privacy.

6. AI Features & Third-Party AI

Agent Hub uses Google Gemini to power the Morning Briefing and YTD Earnings analysis features. When you use these features, relevant data (your name, upcoming calendar events, lead summary counts, and deal totals) is sent to Google's Gemini API to generate a response.

This data is sent only when you explicitly trigger an AI feature. It is used solely to generate your response and is not used to train Google's models under the Gemini API terms. Please review Google's Privacy Policy for more information.

7. Cookies & Local Storage

Agent Hub uses browser localStorage to store your app preferences (dark mode setting, last viewed page, notification preference) and a local cache of your data for offline use. This data never leaves your device and is not shared with us.

We do not use third-party tracking cookies or advertising pixels. Supabase and Stripe may set session cookies as part of their authentication and payment flows.

8. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription, your data is retained for 30 days to allow for reactivation. After that period, your data is permanently deleted from our systems.

You may request immediate deletion of your account and all associated data at any time by contacting us (see Section 10 below).

Anonymized, aggregated usage statistics (e.g., "X users used the calendar this month") may be retained indefinitely, as they contain no personally identifiable information.

9. Your Rights

Depending on your location, you may have rights including:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate data.
• Deletion — request deletion of your account and all associated data.
• Portability — request your data in a machine-readable format.
• Objection — object to certain types of processing.

To exercise any of these rights, email us at the address in Section 10. We will respond within 30 days.

10. Contact & Data Deletion Requests

To request deletion of your data, a copy of your data, or to ask any privacy-related questions, please contact us:

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and by updating the "Last updated" date at the top of this page. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.