Privacy Policy

VultStack provides software to real estate brokerages and their agents. Our direct customers are brokerages and the agents they invite. This policy describes how we handle information for those account holders, the contacts they manage in the CRM, and visitors to our website.

• Account information. Name, email address, phone number, brokerage name, role, and login credentials when you or your brokerage create an account.
• Billing information. Subscription plan, seat count, and payment status. Card payments are processed by our payment provider (Stripe); we do not store full card numbers.
• CRM content you provide. Contacts, leads, deals, tasks, notes, documents, commissions, and other records you enter into the Service.
• Data from connected accounts. When you choose to connect a third-party account (such as Google/YouTube, Meta/Facebook/Instagram, or LinkedIn), we receive access tokens and the data needed to provide the features you enable. See “Connected third-party accounts” below.
• Usage and device data. Log data, IP address, browser type, and basic analytics used to operate and secure the Service.

Connecting an external account is always optional and initiated by you. We request only the permissions needed for the features you turn on, and you can disconnect at any time from within the Service or from the third party’s own security settings.

• Meta (Facebook & Instagram). With your permission we access your Pages and connected Instagram business accounts to publish posts you create and to read basic page/post engagement metrics. We do not access your personal news feed, private messages, or friends.
• LinkedIn. With your permission we access your profile and the organization pages you manage in order to publish posts on your behalf.
• YouTube / Google. With your permission we access your YouTube channel to upload and manage videos you choose to publish through the Service.

We use this access solely to provide the social-publishing and scheduling features you request. We do not sell this data, use it for advertising, or use it to train AI models.

VultStack’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google user data to provide and improve the features you have explicitly enabled, and we do not transfer or use it for serving advertisements or for any purpose unrelated to those features.

• Provide, maintain, and improve the Service.
• Authenticate users and secure accounts.
• Process subscriptions and billing.
• Publish and schedule content to the accounts you connect, at your direction.
• Send service-related communications (e.g., account, billing, and security notices).
• Detect, prevent, and respond to fraud, abuse, and security incidents.
• Comply with legal obligations.

We do not sell your personal information. We share information only as follows:

• Service providers (subprocessors) who help us run the Service — including Stripe (payments), Supabase (database & authentication), Vercel (hosting), and Resend (transactional email). They may process data only on our behalf and under contract.
• Connected platforms you choose to link, to deliver the content and actions you request.
• Legal & safety — when required by law or to protect the rights, property, or safety of our users or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

We retain information for as long as your account is active or as needed to provide the Service and meet legal obligations. You can disconnect any third-party account at any time, which revokes our stored access tokens for it. To request deletion of your account and associated data, see our Data Deletion Instructions or email [email protected].

We protect data with encryption in transit, encrypted storage of third-party access tokens, access controls, and tenant isolation so that each brokerage’s data is kept separate. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard safeguards.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at [email protected]. Brokerage account owners can also manage much of their data directly in the Service.

The Service is intended for business use by real estate professionals and is not directed to children under 16. We do not knowingly collect personal information from children.

We may update this policy from time to time. Material changes will be posted on this page with an updated “Last updated” date.

Commercial Real Estate Brokerage, LLC · 8000 Fair Oaks Pkwy, Suite 102, Fair Oaks Ranch, TX 78015
Email: [email protected]