Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

When you create an account or use the Service, you may provide:

• Name and email address
• Account credentials
• Organization or company information
• Property listing details, lease terms, and related communications
• Any other information you choose to submit through the Service

1.2 Information from Third-Party Integrations

If you choose to connect a third-party account (such as Google or Microsoft), we receive data from that provider in accordance with the permissions you grant. For Google specifically, we request the following OAuth scopes:

• calendar.events — allows us to create, read, and update calendar events so that property tours scheduled through Comersify automatically appear on your Google Calendar.
• userinfo.email — allows us to verify the email address associated with your Google account to match it with your Comersify account.

We do not access contacts, files, or any other Google data beyond the scopes listed above.

1.3 Automatically Collected Information

When you use the Service, we may automatically collect:

• Device and browser information (type, operating system, language)
• IP address and approximate location
• Usage data such as pages viewed, features used, and timestamps
• Cookies and similar tracking technologies

2. How We Use Your Information

We use collected information for the following purposes:

• Provide the Service — create and manage accounts, facilitate property tours, manage leases, and enable communication between landlords and tenants.
• Calendar integration — sync scheduled property tours to your connected calendar so you receive timely reminders and can manage availability.
• Improve the Service — analyze usage patterns to fix bugs, develop new features, and enhance the user experience.
• Communicate with you — send transactional emails (tour confirmations, lease updates), respond to support requests, and provide important service announcements.
• Security and compliance — detect fraud, enforce our Terms of Service, and comply with legal obligations.

3. Data Sharing and Disclosure

We do not sell your personal data. We may share information in the following circumstances:

• Service providers — we share data with trusted third-party vendors who assist in operating our Service (e.g., cloud hosting, email delivery, analytics). These providers are contractually obligated to use your data only to perform services on our behalf.
• Other users — certain information (such as your name and organization) may be visible to other users as part of normal platform functionality (e.g., a landlord viewing a tour request from a prospective tenant).
• Legal obligations — we may disclose information if required by law, regulation, legal process, or government request.
• Safety and rights — we may share information to protect the rights, property, or safety of Comersify, our users, or the public.
• Business transfers — if Comersify is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

4. Google User Data & Limited Use Disclosure

Comersify's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data to provide and improve user-facing features that are visible and apparent to the user (scheduling and managing property tours via your calendar).
• We do not transfer Google user data to third parties unless doing so is (a) necessary to provide or improve user-facing features, (b) required for security purposes, (c) necessary to comply with applicable law, or (d) part of a merger, acquisition, or asset sale with notice to users.
• We do not use Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
• We do not allow humans to read Google user data unless we have your explicit consent, it is necessary for security purposes, it is required by law, or the data is aggregated and anonymized for internal operations.

4.1 Token Storage and Handling

OAuth tokens obtained through the Google authorization flow are encrypted at rest and stored securely in our database. Tokens are only used to perform calendar operations on your behalf and are never exposed to other users or third parties.

4.2 Disconnecting Your Google Account

You can disconnect your Google account at any time from the Integrations page in your Comersify settings. When you disconnect, we immediately revoke the OAuth token and delete all stored Google credentials. Events previously synced to your Google Calendar will remain on your calendar, but Comersify will no longer have access to your Google data. You can also revoke access directly from your Google Account permissions page.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service to you. We may also retain certain information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

If you request deletion of your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., maintaining records of completed lease transactions as required by applicable regulations).

6. Data Security

We implement industry-standard technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security assessments. However, no method of electronic transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee its absolute security.

7. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request that we correct inaccurate or incomplete data.
• Deletion — request that we delete your personal data, subject to certain legal exceptions.
• Portability — request a machine-readable copy of your data.
• Opt-out — unsubscribe from marketing communications at any time using the link in our emails.

To exercise any of these rights, please contact us at support@comersify.com. We will respond to your request within 30 days.

8. Children's Privacy

The Service is not directed to children under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal data from a child under 18, we will take steps to delete that information promptly. If you believe that a child has provided us with personal information, please contact us at support@comersify.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on this page and updating the "Last Updated" date. Where required by law, we will also provide additional notice (such as an email notification). Your continued use of the Service after the effective date of the revised policy constitutes your acceptance of the changes.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Comersify, Inc.
Email: support@comersify.com