Privacy Policy

How Facreo Systems LLC handles personal information in Facreo.

Effective 7 September 2026

Two kinds of people, two different roles

This policy covers two groups, and the difference matters because our obligations differ.

• Customers — the brokerages, property managers and agents who license Facreo. For their account data we are the controller: we decide what to collect and why.
• Contacts — the buyers, sellers, owners and tenants whose records a customer stores in Facreo. For that data we are a processor: it belongs to the customer, we hold it on their instructions, and we do not decide what goes into it.

If you are a contact and want your information corrected or removed, the fastest route is the brokerage you dealt with — they can act immediately. You can also write to support@facreosystems.com and we will pass the request to them and help them carry it out.

What we collect

From customers

• Name, work email address, phone number and role within the workspace.
• A password hash, or a Google account identifier if you sign in with Google.
• Business details required for regulated messaging: legal entity name, EIN, business address and an authorised representative.
• Billing contact details and a payment method, held by Stripe — we never receive or store full card numbers.
• Sign-in and administrative activity, so a workspace owner can see who changed what.

From contacts, on a customer’s behalf

• Identity and contact details: name, phone numbers, email addresses, mailing address.
• Relationship records the customer creates: notes, tags, appointments, tasks, deal stages and assigned agent.
• Communications sent or received through Facreo: emails, text messages, call metadata and their timestamps.
• Property interest — searches, saved listings and enquiries, where the customer’s website or lead sources send them to us.

Automatically

• A session cookie, which is strictly necessary to keep you signed in.
• Server and error logs, including IP address, browser and the page that failed.

Facreo carries no advertising trackers and no third-party analytics. We do not sell personal information, and we do not share it for cross-context behavioural advertising.

Why we use it

• To run the product — showing a customer their own records, sending the messages they send, syncing the mailboxes and calendars they connect.
• To keep accounts secure — authentication, rate limiting, and the audit trail of administrative changes.
• To bill — subscriptions and usage, through Stripe.
• To support — answering questions, and diagnosing faults from error reports.
• To meet messaging regulations — carriers require registration details and consent evidence before a business may send texts.

We do not use customer or contact data to train machine-learning models, and we do not use one customer’s data to serve another.

Who else processes it

Facreo is built on other companies’ infrastructure. These are our subprocessors, and each receives only what its function requires.

Error reports are configured to exclude personal data, and session replay is switched off, so a crash report carries the fault and not the record that was on screen. Where a customer connects their own mailbox or calendar, that provider is their choice and their relationship; we act on the credentials they supply.

How it is protected

• Encrypted in transit with TLS, and encrypted at rest by our database host.
• Third-party credentials a customer supplies — mailbox app passwords, calendar tokens, API keys — are encrypted with a key held outside the database.
• Passwords are stored only as salted hashes and are never recoverable.
• Every workspace is isolated. Queries are scoped to a single workspace, and administrative endpoints require both a session and a role.
• Access to production is limited to staff who need it.

No system is perfectly secure. If a breach affects your information we will notify affected customers without undue delay, and regulators where the law requires it.

How long we keep it

Customer and contact records are kept for as long as the workspace is active, because the product’s value is the history it holds. When a customer closes their account we delete their workspace data within 90 days, except where we must keep records longer — billing and tax records, and messaging consent evidence, which carriers require us to retain. A customer may export their data at any time before closing, and may ask us to delete sooner.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and not to be discriminated against for exercising those rights. California residents have these rights under the CCPA as amended; we do not sell or share personal information as those terms are defined there.

Write to support@facreosystems.com. We respond within 45 days. If you are a contact rather than a customer, see the note at the top — we will route your request to the brokerage that holds your record.

Children

Facreo is a business tool, not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child’s information has reached us, tell us and we will remove it.

Where data is held

Facreo is operated from the United States and all data is stored there. If you use the product from outside the United States, you are sending your information to the United States.

Text messages

Messaging has its own disclosures, including consent and opt-out. See the Messaging Terms.

Changes

We will post any change here and move the effective date. If a change materially affects how we handle personal information, we will tell customers by email before it takes effect.

Contact

Facreo Systems LLC
support@facreosystems.com