Privacy Policy

ExactCircle, Inc. (“ExactCircle”, “we”, “us”) provides software that helps US real estate agents track Buyer Representation Agreements. This policy describes what information we collect, how we use it, and the choices available to you. Questions can be sent to privacy@exactcircle.com.

1. Information we collect

We collect the following categories of information:

• Account information. Name, email address, and (when you enter it) company name.
• Agreement content. Uploaded PDFs and metadata you enter: client name, client email, client phone, start date, end date, notes, and status.
• Activity logs. Records of your actions within the product (create, edit, delete, reminder sent) with timestamps.
• Device and usage information. IP address, browser, and basic page-view analytics to understand product usage.

2. How we use information

• To provide and operate the product.
• To send transactional email: reminders, receipts, security notices.
• To prevent fraud and secure accounts.
• To improve the product in aggregate. Your agreements and their content are never used to train AI models.

3. How we share information

We share data only with the service providers required to run ExactCircle: Vercel (hosting), Supabase (database and file storage), and Resend (email delivery). A current subprocessor list is available on request. We do not sell personal information and do not share it with advertisers.

4. Data retention

We retain agreement content and activity logs for as long as your account is active. If you cancel, we keep data for 30 days (so you can reactivate) and then permanently delete it unless a longer retention period is legally required.

5. Your rights

You can export or delete your data at any time through the product or by emailing privacy@exactcircle.com. If you reside in California (CCPA/CPRA) or the EU/UK (GDPR), you have additional rights including access, correction, portability, and objection to processing. We respond to verified requests within 30 days.

6. Security

We use TLS 1.2+ in transit, AES-256 encryption at rest, short-lived signed URLs for file access, and Postgres Row Level Security to isolate customer data. See our Security page for details.

7. Children

ExactCircle is not directed to children under 16 and we do not knowingly collect information from children. If you believe we have, contact us and we will delete it.

8. International transfers

ExactCircle is operated from the United States. If you access the product from outside the US, your information will be transferred to, stored, and processed in the US.

9. Changes to this policy

We may update this policy as the product evolves. Material changes will be notified by email to account owners at least 14 days before taking effect.

10. Contact

ExactCircle, Inc. — privacy@exactcircle.com.