Privacy Policy

1. Who we are

Agent Lead Tracker is a real-estate CRM operated by Agent Lead Tracker, San Diego, California, USA. For privacy questions, email support@agentleadtracker.com.

2. Information you provide

When you sign up for ALT we collect your name, email address, and password (stored as a salted hash — we never see your plaintext password). When you use the product you may add information about your real-estate contacts, leads, properties, appointments, and messages. That data belongs to you; we store it on your behalf so the product works.

3. Information from Google

If you connect your Google Calendar from Settings → Calendar Sync, we ask Google for permission using OAuth 2.0. The specific access we request is:

• https://www.googleapis.com/auth/calendar.events — read and write events on the calendars you own. We use this only to (a) push appointments you create in ALT into your Google Calendar, and (b) update or delete those same events when you change them in ALT.

We store the resulting OAuth access token and refresh token in our database, scoped to your ALT account, so the calendar sync can keep working in the background. Tokens are deleted immediately when you disconnect the integration or delete your ALT account.

We do not read events from your calendar that ALT didn’t create, and we do not list, search, or browse calendars other than your primary calendar.

For a step-by-step walkthrough of the consent flow, the exact scope, and how to disconnect, see our Google Calendar integration help page.

4. Limited Use of Google user data

Agent Lead Tracker’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In plain English: we only use Google Calendar data to provide the calendar-sync feature you turned on. We don’t sell it, transfer it to third parties for advertising, use it to train AI/ML models, or let humans read it except (a) with your explicit consent, (b) for security investigations, or (c) when required by law.

5. How we use your information

• To run the product (showing you your contacts, sending the SMS messages you ask us to send, syncing your calendar, etc.).
• To generate AI-assisted suggestions inside ALT (e.g. drafting a follow-up message or analyzing a lead). Prompts are sent to model providers listed in §6 and are not used for advertising.
• To email you transactional product messages (account verification, password resets, billing receipts, security alerts).
• To detect and prevent abuse, fraud, and security incidents.

We do not sell your personal information, and we do not run advertising inside ALT.

6. Service providers we share data with

To run ALT we rely on a small number of vetted processors. They only see what they need:

• Google — calendar sync (only when you connect it).
• Twilio — sending and receiving SMS on your behalf.
• Resend — sending transactional email (verification, invites, receipts).
• Stripe — subscription billing.
• OpenRouter, Anthropic, OpenAI, Google AI — running AI features (drafting messages, analyzing leads). Prompts may include the contact context required to produce a useful answer.
• Cloudflare — DNS and edge security.

7. How long we keep data

We keep your account data while your account is active. If you cancel and request deletion, we erase your contacts, messages, calendar tokens, and personal information from our production database within 30 days, and from backups within 90 days. Aggregate, non-identifying analytics may be retained beyond that.

8. Your choices and rights

• Disconnect Google Calendar at any time from Settings → Calendar Sync → Disconnect. We immediately delete the stored tokens.
• Revoke access on Google’s side at myaccount.google.com/permissions. Google will invalidate our token within minutes.
• Delete your account by emailing support@agentleadtracker.com from the address on file. We’ll confirm and delete within 30 days.
• Access or export your data by emailing the same address.
• If you are in the EU/UK, California, or any other jurisdiction with applicable data-protection law, you have the rights granted by that law (access, correction, portability, erasure, objection). Email us to exercise them.

9. Security

We use TLS for all traffic in and out of the application, encrypt OAuth refresh tokens at rest with AES-256-GCM, scope every database query to the requesting user’s ID, and review our codebase for the OWASP top 10. No system is perfectly secure; if you discover a vulnerability, please report it to support@agentleadtracker.com and we will respond promptly.

10. Children

ALT is a business tool for licensed real-estate professionals. It is not directed to children under 13, and we do not knowingly collect data from them.

11. Changes to this policy

We may update this policy as the product evolves. If a change is material — for example, a new category of data collected or a new processor — we will email you at the address on file before it takes effect.

12. Contact

Questions, requests, or complaints: support@agentleadtracker.com.