Privacy Policy

This Policy explains how Real Estate OS collects, uses, and shares information when you use LoftyMCP ("the Service"), a connector that links your Lofty CRM to AI assistants such as Claude.

1 Information we collect

• Information you provide. If you complete a connection form, your name, email address, phone number, and marketing preferences.
• Connection data. When you authorize Lofty access, we store the access credentials (tokens) needed to call Lofty on your behalf, along with your Lofty user identifier and email.
• CRM data processed on your behalf. When you — or an AI assistant acting on your instruction — use the Service, we transmit data between Lofty and the AI assistant. This may include personal information about your contacts, leads, and clients stored in your Lofty account. We process this only to carry out your requests.
• Technical data. Limited logs necessary to operate and secure the Service.

2 How we use information

• To provide, operate, and secure the Service and maintain your connection.
• If you opted in, to send you product updates and marketing by email, SMS, or phone. You can opt out at any time (reply STOP to texts, or contact us below). Opting into marketing is not required to use the Service.
• To comply with applicable law.

3 Service providers

We use the following providers to run the Service; data passes through them as needed. We do not sell your personal information.

Provider	Purpose
Anthropic (Claude)	The AI assistant you connect. Your prompts and the CRM data needed to fulfill them are processed by Anthropic under its terms.
Lofty	The CRM you connect, accessed using the permissions you grant.
Cloudflare	Hosting and secure storage of connection tokens.
Supabase	Database storage of your account and connection records.
Slack	Internal notifications to us when a new connection is made.

4 Your contacts' data

The personal information of your contacts and clients belongs to you as its controller. We act only as a processor, handling that information solely to perform the actions you direct through the Service. You are responsible for having the right to provide that data to the Service and for meeting your own privacy obligations to those individuals.

5 Storage and security

We store connection tokens and account records using Cloudflare and Supabase, with access restricted to the Service. We take reasonable measures to protect information, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6 Data retention

We retain connection and account data for as long as your connection is active and as needed to provide the Service or comply with law. CRM data passing through the Service is transmitted to fulfill your requests and is not retained by us beyond what is necessary to complete them.

7 Your choices and rights

• Revoke access at any time from your Lofty account settings; this immediately stops the Service's access to your account.
• Access or deletion. Request a copy of, or deletion of, the information we hold about you by contacting us below.
• Marketing opt-out as described in section 2.

8 Cookies

We use a small cookie during the connection process to manage your session. We do not use advertising or cross-site tracking cookies.

9 Children

The Service is not directed to anyone under 18, and we do not knowingly collect information from children.

10 Changes to this Policy

We may update this Policy from time to time. The "Last updated" date above reflects the most recent version.

11 Contact

Questions or requests: support@realestateos.com.