Privacy Policy

1. Who we are and who this policy covers

Cressum LLC ("Cressum", "we", "us") provides software that manages real estate transaction workflows for real estate professionals. The service is offered to businesses and licensed professionals, including agents, brokerages, and transaction coordinators.

This policy covers information about people who visit our website, join our waitlist, or hold or use an account in the application. It also covers information about other people that our users bring into the service, such as the parties to a real estate transaction. Where a user uploads information about other people, the user is responsible for having the right to do so.

2. Information we collect

We collect the following categories of information.

• Account details you provide: your name, email address, password (stored only in hashed form), professional role, and, if you choose to add them, your phone number and brokerage name.
• Waitlist details you provide: your name, email address, and stated interest in the service.
• Workspace content you upload or create: transaction documents such as contracts, addenda, notices, and receipts; messages you exchange with the assistant; notes; the emails and signature requests you send through the service; and email sent to the service or brought in from an inbox you connect.
• Information about other people contained in that content: names, contact details, property addresses, and transaction terms for buyers, sellers, agents, inspectors, lenders, and title or escrow contacts.
• Connected-account details: if you connect a Google account, we receive the account email address and profile name together with an authorization that lets the service send email and create tasks on your behalf and, if you turn it on, read your inbox. We do not read your calendar.
• Payment details: when billing is available, card information is collected and stored by our payment processor, not by Cressum. We keep the processor's customer reference, your subscription status, and your billing history.
• Usage and log data collected automatically: actions taken in the product, timestamps, IP address, browser and device type, and technical error reports.
• Website analytics data collected automatically on our public marketing pages through cookies and similar technologies. These tools are not used on logged-in application pages.

3. How we use information

We use the information we collect to:

• Provide, operate, secure, and maintain the service, including authenticating you and your workspace members.
• Process workspace content with AI models in order to deliver the product's features, such as reading documents, tracking deadlines, and drafting content for your review.
• Send emails and signature requests that you initiate, on your behalf and at your direction.
• Provide customer support and troubleshoot problems, which may involve authorized Cressum personnel accessing account and workspace data.
• Send account and transactional communications, such as email verification, password resets, workspace invitations, and billing receipts.
• Understand how the website and product are used so that we can improve them.
• Comply with legal obligations, enforce our terms, and protect the rights, safety, and property of Cressum, our users, and others.

We do not sell personal information, and we do not use it for third-party targeted advertising.

4. How we share information

We share information with service providers that process it on our behalf and under our instructions, in the following categories.

AI model providers do not use this information to train their models, and may keep it for a limited time to monitor for abuse.

We may also disclose information when required by law or legal process, to protect the rights, safety, or property of Cressum, our users, or others, or in connection with a merger, acquisition, financing, or sale of all or part of our business, in which case the information will remain subject to this policy or a successor policy that gives you notice of any material change.

Within your workspace, information you add is visible to the other members of that workspace according to their roles.

5. Google account connections

You can connect a Google account to send email and create tasks from Cressum and, if you turn it on, to let the assistant read your inbox. The connection requests only the permissions needed for those actions. We store the authorization token in encrypted form and use it only to perform the actions you initiate or turn on. When inbox reading is on, the assistant reads your email to find what concerns your workspace's transactions, and that email is kept in the workspace. You can turn inbox reading off, or disconnect the account, at any time from Connectors in the application or from your Google account's permissions page.

Cressum's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use information received from Google APIs to develop, improve, or train generalized AI or machine learning models.

6. Cookies and website analytics

Our public website uses Google Analytics and Microsoft Clarity. These tools set cookies and collect usage data, such as pages visited and interactions on the page, to help us understand how the website is used. Google's privacy policy is available at policies.google.com/privacy, and Microsoft's is available at privacy.microsoft.com. These tools are not used on logged-in application pages.

The application uses cookies that are necessary to keep you signed in and to keep the service secure. You can control cookies through your browser settings; disabling necessary cookies will prevent you from signing in.

Our website does not respond to browser Do Not Track signals.

7. Data retention

We keep personal information for as long as needed to provide the service to your account, and afterward for as long as needed to meet legal, accounting, security, or dispute-resolution obligations. When information is no longer needed for those purposes, we delete it or render it anonymous.

8. Security

We use organizational and technical safeguards designed to protect personal information, including encryption of data in transit, encrypted storage of connected-account tokens, access controls that limit who can reach production systems, and workspace-level separation of customer data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a security incident affects your personal information, we will notify you as the law requires. If you believe your account has been compromised, contact us at the address below.

9. Children's privacy

The service is intended for business use by adults and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Your choices

You have the following choices about your information.

• Review and update your account details from your profile in the application.
• Turn inbox reading off, or disconnect a connected Google account, from Connectors in the application.
• Request deletion of your account, or a copy of the information associated with it, by emailing the address below. We will respond within a reasonable time and may need to verify your identity first.
• Transactional emails, such as verification, password reset, and invitations, are part of operating the service and cannot be opted out of while you hold an account.

11. Where information is processed

Cressum operates in the United States, and information is stored and processed there. If you use the service from outside the United States, your information will be transferred to and processed in the United States.

12. Changes to this policy

We may update this policy from time to time. Updates are posted on this page with a new effective date. If a change materially affects how we use personal information, we will notify account holders by email before the change takes effect.

13. Contact

Questions or requests about this policy can be sent to support@cressum.com.