Privacy Policy

Evergreen Keys is used by two kinds of people: agents (real-estate professionals who subscribe to the service) and their clients (the buyers and sellers an agent invites to a portal). This policy applies to both.

Account information: name, email, and password (stored securely, never in plain text) when you create an account.

Agent profile & branding: the brokerage name, logo, contact details, and brand color an agent chooses to display to their clients.

Transaction & relationship data: the client, property, milestone, document, contact, task, and personal-date information an agent enters or a client shares through their portal (for example, birthdays or an anniversary used for relationship reminders).

Connected services: if an agent chooses to connect a third-party service, we store the credentials needed to keep that connection working. See below.

We use information only to operate the service: to display each client's portal, keep transactions organized, send notifications an agent enables, power AI features, surface relationship reminders, and maintain and secure the platform. We do not sell your information, and we do not use client data to advertise to you.

Each agent's clients and data are isolated to the people permitted to see them — the owning agent and the client(s) on that file. One agent cannot see another agent's clients, and one client cannot see another client's file.

We rely on trusted providers to run the service, and share only what each needs:

Supabase (database, authentication, and file storage); Vercel (hosting); Anthropic (the AI assistant and contract reader — the relevant text or documents are sent to Anthropic to generate a response and are not used to train their models); Resend (sending email notifications). If an agent connects them: dotloop (transaction documents), Follow Up Boss (CRM), and Google Calendar (appointments and adding events). Each connection is authorized by the agent and can be disconnected at any time in Settings.

When an agent connects Google Calendar, we request only calendar-event access. We use it solely to show the agent their appointments in their daily brief and to add events they ask us to add (such as contract dates). Evergreen Keys' use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer or use this data for advertising, and we do not allow humans to read it except as needed for security or with the agent's consent. Disconnecting Google Calendar in Settings revokes our access.

We keep information for as long as an account is active. An agent can delete a client (which removes that client's data), and you can request deletion of your account and associated data by contacting us.

Connections are encrypted in transit, secrets are stored server-side and never exposed to browsers, and access to data is enforced per user. No system is perfectly secure, but we take reasonable measures to protect your information.

Questions or requests? Email austin@nestlewoodrealty.com.