Privacy Policy

Infifu ("we," "us," or "our") operates a real estate CRM and marketing platform accessible at this website. This policy explains what personal data we collect, how we use it, and your rights regarding that data.

Account data: When you register, we collect your name, email address, password (hashed — never stored in plain text), brokerage, phone number, and license number.

Lead and contact data: As you use the CRM, you store information about your real estate leads and contacts including names, emails, phone numbers, addresses, and transaction details. This data belongs to you.

Usage data: We log activity within your account (logins, messages sent, lead updates) to power your activity feed and analytics.

Communications: Emails and SMS messages sent through the platform are stored so you can view your message history.

• To operate and provide the CRM platform to you
• To send transactional emails (verification, password reset, notifications)
• To generate AI-assisted message drafts via the Anthropic API (no data is retained by Anthropic for training)
• To improve platform reliability and performance

We do not sell your data or your leads' data to any third party, ever.

We share data with these processors solely to operate the platform:

• Neon / PostgreSQL — encrypted database hosting
• Resend — transactional email delivery
• Twilio — SMS delivery
• Anthropic — AI message drafting (zero-retention API)
• Vercel — hosting and edge infrastructure

We retain your account data for as long as your account is active. Lead and contact data you enter is retained until you delete it or close your account. You can delete individual records at any time from within the platform.

All data is transmitted over HTTPS. Passwords are hashed with bcrypt. Sessions use signed JWT tokens stored in httpOnly cookies. We apply rate limiting to authentication endpoints to prevent brute-force attacks.

You have the right to access, correct, export, or delete your personal data at any time. To request account deletion or a data export, contact us at the email below.

We use a single httpOnly session cookie for authentication. We do not use tracking cookies, advertising pixels, or analytics cookies.

This platform is not intended for anyone under 18. We do not knowingly collect data from minors.

We may update this policy and will notify you by email or an in-app notice. Continued use after changes constitutes acceptance.

Questions? Email us at privacy@infifu.com