Privacy Policy

1.1. Chippi Inc. operates a B2B SaaS real estate CRM that serves realtors and brokerages. Our features include intake forms, AI lead scoring, deal pipelines, tour scheduling, voice AI assistant, MCP server integration, and brokerage team management.

1.2. With respect to Subscriber Data (including Applicant data), Chippi acts as a Data Processor. We process data on behalf of our Subscribers (realtors and brokerages), who are the Data Controllers.

1.3. For data we collect directly about Subscribers for account and billing purposes, Chippi acts as the Data Controller.

2.1. Realtors and brokerages who use the Service are the Data Controllers of the data they collect through intake forms, deal pipelines, and other Service features. They are responsible for how they use their own data.

2.2. Subscribers are responsible for obtaining all necessary consents from Applicants and complying with applicable data protection laws.

2.3. Applicants who submit data through intake forms agree to both Chippi's Privacy Policy and the applicable Subscriber's (realtor/brokerage) privacy policy.

2.4. For details on how we process data on behalf of Subscribers, please refer to our Data Processing Agreement.

3.1. Account Information. When you create an account, we collect your name, email address, phone number, brokerage or company name, and login credentials (managed via Clerk).

3.2. Billing Information. Payment details including credit card information, billing address, and transaction history are collected and processed by Stripe. Chippi does not store full payment card numbers.

3.3. Usage Information. We collect data about how you interact with the Service, including pages visited, features used, session duration, device and browser information, IP address, and referral sources.

3.4. Team Information. If you manage a brokerage team, we collect information about team members you invite, including their names and email addresses.

4.1. When Applicants submit information through a Subscriber's intake forms, we collect that data on behalf of the Subscriber (Data Controller). This may include:

• Name, email address, and phone number.
• Housing preferences and requirements.
• Employment and income information (if requested by the Subscriber).
• Any other information the Subscriber's intake form requests.

4.2. Applicant data is processed solely for the purpose of providing the Service to the Subscriber. The Subscriber determines what data is collected through their intake forms.

4.3. Applicants with questions about how their data is used should contact the Subscriber (realtor/brokerage) who collected their information.

5.1. Provide the Service. Operate and maintain the platform, including intake forms, deal pipelines, tour scheduling, brokerage team management, and MCP server integration.

5.2. AI Scoring. Process Applicant data through AI lead scoring features to provide Subscribers with advisory insights. AI scoring is performed solely to deliver the Service, not for any other purpose.

5.3. Notifications. Send transactional notifications such as new lead alerts, tour reminders, deal updates, and account-related communications via email (Resend) and SMS (Telnyx).

5.4. Analytics. Analyze aggregate usage patterns to improve the performance, reliability, and features of the Service.

5.5. Billing. Process subscription payments and manage billing through Stripe.

5.6. Security. Detect, prevent, and address fraud, abuse, and security issues.

5.7. Legal Compliance. Comply with applicable laws, regulations, and legal processes.

6.1. AI features (including lead scoring and voice AI assistant) process data solely to provide scoring results and advisory outputs to Subscribers.

6.2. We do not use Subscriber Data or Applicant data to train artificial intelligence models.

6.3. AI-generated scores and recommendations are advisory only and do not constitute automated legal decision-making. Subscribers retain full responsibility for all decisions made using AI outputs.

6.4. AI processing is performed through our integration with OpenAI. Data sent to OpenAI is subject to our data processing agreements with them and is not used by OpenAI for model training.

7.1. We use the following third-party service providers to operate the Service:

• Supabase — database hosting and data storage infrastructure.
• Clerk — user authentication, session management, and identity services.
• Stripe — payment processing, subscription billing, and financial transaction management.
• OpenAI — AI-powered lead scoring, voice AI assistant, and analytical features.
• Resend — transactional email delivery (lead alerts, account notifications).
• Telnyx — SMS delivery and voice communications.

7.2. Each third-party provider processes data in accordance with their own privacy policies and our data processing agreements with them.

7.3. We select providers that maintain appropriate security and privacy standards. However, we are not responsible for the independent practices of third-party services.

8.1. We do not sell your personal data. We never have and never will sell data to third parties.

8.2. We share data only with the third-party service providers listed in Section 7, and only to the extent necessary to operate the Service.

8.3. We may disclose information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

8.4. In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity, subject to the same privacy protections described in this policy.

9.1. Active Subscriber Data. We retain Subscriber account and billing data for the duration of the active subscription.

9.2. Lead and Applicant Data. Applicant data is retained for up to 24 months from the date of collection, or until the Subscriber deletes it, whichever comes first.

9.3. Post-Cancellation. Following subscription cancellation or account termination, we retain all Subscriber Data for 30 days to allow for data export. After this period, data is permanently and irreversibly deleted.

9.4. Legal Obligations. We may retain certain data beyond the periods stated above if required by law or to resolve disputes.

10.1. We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Secure authentication through Clerk with support for multi-factor authentication.
• Role-based access controls for brokerage team management.
• Regular security assessments and monitoring.
• Secure infrastructure provided by our hosting partners.

10.2. While we take reasonable precautions to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

11.1. Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access. Request a copy of the personal data we hold about you.
• Correction. Request correction of inaccurate or incomplete data.
• Deletion. Request deletion of your personal data, subject to legal retention requirements.
• Portability. Request your data in a structured, commonly used, machine-readable format.
• Opt-Out. Opt out of non-essential communications at any time.

11.2. For Subscribers: You can exercise these rights by contacting us at help@usechippi.com or through your account settings.

11.3. For Applicants: Because Subscribers are the Data Controllers of Applicant data, Applicants should first contact the realtor or brokerage that collected their information. If you are unable to reach the Subscriber, you may contact us at help@usechippi.com and we will assist in forwarding your request.

11.4. We will respond to data rights requests within 30 days.

12.1. The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18.

12.2. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly.

12.3. If you believe a child under 18 has provided us with personal data, please contact us at help@usechippi.com.

13.1. Your data may be processed and stored in the United States or other countries where our service providers operate.

13.2. If you are located outside the United States, your data may be transferred to, stored, and processed in the United States. By using the Service, you consent to such transfers.

13.3. We take appropriate measures to ensure that international data transfers comply with applicable data protection laws, including the use of standard contractual clauses where required.

14.1. We use cookies and similar technologies to operate and improve the Service. For detailed information, please refer to our Cookie Policy.

14.2. Essential cookies are required for authentication and core functionality. You may manage non-essential cookies through your browser settings.

14A.1. Subscribers (realtors and brokerages) may configure third-party tracking pixels on their public-facing intake forms and tour booking pages. These tracking technologies may include pixels and scripts from platforms such as Meta/Facebook, Google Analytics, Google Ads, TikTok, Twitter/X, LinkedIn, and Snapchat.

14A.2. These technologies may collect information such as IP addresses, browser type, device information, pages visited, and actions taken (such as form submissions). This data is sent directly from the Applicant's browser to the respective third-party platform.

14A.3. Chippi acts as a Data Processor with respect to Subscriber-configured tracking pixels. The Subscriber (Data Controller) is responsible for disclosing the use of these technologies in their own privacy policy and obtaining any required consents.

14A.4. Applicants may opt out of third-party tracking by adjusting their browser settings, using browser extensions that block tracking scripts, or visiting the Digital Advertising Alliance's opt-out page.

15.1. We may update this Privacy Policy from time to time. We will notify Subscribers of material changes by email or through the Service at least 30 days before the changes take effect.

15.2. The "Last updated" date at the top of this policy indicates when the most recent revisions were made.

15.3. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised policy.

If you have questions about this Privacy Policy or our data practices, please contact us:

Chippi Inc.
Email: help@usechippi.com
Website: usechippi.com