This Data Policy provides additional detail about how BrokerMule ("we", "us", or "our") handles, stores, and protects personal data processed through the Service. This policy works alongside our Privacy Policy, which describes what information we collect and why.

1. Data we process

The Service processes the following categories of personal data:

Realtor data: name, email, phone number, company name, billing details, and account preferences.
Buyer data: first name, phone number, email, zip code, search criteria (price range, beds, baths, property type, radius), and engagement activity (saved listings, tour requests, comments).
Listing data: property details (address, price, photos, beds, baths, square footage, listing URL) retrieved from third-party data providers.
Usage data: IP address, device information, browser type, access timestamps, and interaction logs.

2. Roles and responsibilities

When a realtor uses the Service to manage buyer profiles and send listing alerts, BrokerMule acts as a data processor on behalf of the realtor (the data controller). The realtor determines what buyer data is entered, which search criteria are configured, and when messages are sent. BrokerMule processes this data only to provide the Service as instructed by the realtor and in accordance with these policies.

For data we collect directly from realtors (such as account and billing information), BrokerMule acts as a data controller.

3. Sub-processors

We use the following third-party sub-processors to deliver the Service:

Twilio — SMS message delivery and phone number management (US-based).
HasData / Zillow — Property listing data retrieval (US-based).
Stripe — Payment processing and subscription billing (US-based).
Cloud hosting provider — Application hosting, database, and file storage (US-based).
Transaction email provider — Delivery of account and support emails (US-based).

All sub-processors are bound by data processing agreements that require them to protect personal data in accordance with applicable laws. We do not transfer personal data outside the United States for processing.

4. Data storage and security

Personal data is stored in encrypted databases hosted in the United States. Data is encrypted in transit using TLS and at rest using industry-standard encryption. Access to production data is restricted to authorized personnel using role-based access controls, multi-factor authentication, and audit logging.

We conduct regular security reviews and maintain incident response procedures. In the event of a data breach affecting personal data, we will notify affected users and relevant authorities as required by applicable law.

5. Data retention

We retain personal data only as long as necessary to provide the Service and comply with legal obligations:

Buyer profiles and engagement records: Retained while the buyer is active in a realtor's account. Deleted when the realtor removes the buyer or closes their account.
SMS delivery logs: Retained for up to 90 days for troubleshooting and carrier compliance, then automatically deleted.
Account and billing data: Retained for the life of the account and up to 30 days after closure, except where longer retention is required for tax or legal purposes.
Cached listing data: Retained only as long as needed to display listings in the portal and dashboard, then refreshed or purged.

6. Data subject rights

Individuals may exercise the following rights with respect to their personal data:

Access: Request a copy of the personal data we hold about you.
Correction: Request that inaccurate or incomplete data be corrected.
Deletion: Request that your personal data be deleted, subject to legal retention requirements.
Opt-out: Opt out of SMS messages (see our SMS Policy) and certain data processing activities.
Data portability: Receive your personal data in a structured, machine-readable format.

Realtors can manage buyer data directly through the Service. To submit a request regarding your own personal data, contact support@brokermule.com. We will respond within 30 days.

7. Compliance with laws

We process personal data in compliance with applicable US privacy laws, including the California Consumer Privacy Act (CCPA), and industry regulations such as the TCPA for SMS messaging. Realtors using the Service are responsible for compliance with their local real estate and telemarketing regulations.

8. Cookies and tracking

Our website uses cookies and similar technologies for authentication, session management, and analytics. You can control cookies through your browser settings. We do not use cookies for targeted advertising.

9. Changes to this policy

We may update this Data Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

10. Contact us

If you have questions about our data practices or wish to submit a data-related request, contact us at support@brokermule.com.