Advernyx Privacy Policy
Draft for review — effective [DATE]
Advernyx ("Advernyx," "we," "us") is a CRM for US residential real-estate professionals. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.
The short version: we collect what we need to run the Service, we never sell personal information, your CRM data belongs to you, and you can export or delete it.
1. Scope — Two Kinds of Data
This policy covers two different things, and the difference matters:
- Your information — data about you, our customer: your account details, billing information, and how you use the app. For this data, Advernyx decides how and why it's processed.
- Customer Data — the contacts, leads, deals, messages, and notes you put into your CRM. This is data about your clients. You own it. We process it only on your behalf and on your instructions, as a service provider, to run the Service for you. Your clients' relationship is with you; if one of your contacts asks us about their data, we'll refer them to you and help you respond.
This policy applies to advernyx.com and the Advernyx application. It does not apply to third-party sites or services we link to.
2. Information We Collect
Account information. Name, email address, phone number, brokerage/team name, and password credentials (handled by our authentication provider — we don't store your password). When paid billing launches, payment card details are collected and stored by our payment processor (Stripe), not by us.
Customer Data you import or create. Contact records, lead details, deal information, messages sent and received through the Service, notes, tasks, and files. This can include personal information about your clients (names, emails, phone numbers, property interests). You control what goes in.
Usage and device data. How you use the app — pages viewed, features used, buttons clicked — plus device/browser type, IP address, and approximate location derived from IP. We collect this through product analytics (PostHog) and error tracking (Sentry) to understand what's working and fix what's broken.
Cookies and similar technologies. We use cookies that are necessary for the Service to work (like keeping you signed in) and analytics cookies to understand product usage. We do not use third-party advertising cookies.
Communications with us. If you email support or talk to us, we keep the correspondence.
3. How We Use Information
We use your information to:
- Provide, maintain, and secure the Service — including hosting your Customer Data, sending the messages you approve, and syncing your account.
- Power AI features. When you use AI drafting or suggestions, relevant Customer Data (for example, a contact's message history) is sent to our AI provider, Anthropic, through its commercial API to generate the draft or suggestion. Under Anthropic's commercial API terms as of this policy's effective date, Anthropic does not use API inputs or outputs to train its models by default. We do not use your Customer Data to train third-party foundation models, and we will not change that without telling you first.
- Improve the product — analyzing usage patterns (in aggregate wherever possible) to decide what to build and fix.
- Communicate with you — service notices, security alerts, billing messages, and (with the ability to opt out) product news.
- Comply with law and enforce our Terms — including preventing fraud, abuse, and spam.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
4. How We Share Information — Subprocessors
We share information only with service providers ("subprocessors") that help us run Advernyx, under contracts that limit their use of the data to providing their service to us:
| Subprocessor | What it does | What it touches |
|---|---|---|
| Vercel | Hosts the application | Account info, Customer Data in transit |
| Supabase (PostgreSQL) | Hosts the database | Account info, Customer Data |
| Clerk | Sign-in and account management | Account info, credentials |
| Resend | Sends and receives email on your behalf | Message content, recipient addresses |
| Telnyx | Sends and receives SMS on your behalf (as SMS features launch) | Message content, phone numbers |
| Anthropic | AI drafting and suggestions (commercial API) | Customer Data relevant to the draft/suggestion |
| PostHog | Product analytics | Usage data, account identifiers |
| Sentry | Error tracking | Usage/device data, error context |
| Stripe | Payment processing (when billing launches) | Billing info, payment cards |
We update this table when subprocessors change. Material changes get notice by email or in-app.
Beyond subprocessors, we may disclose information: (a) when the law requires it (for example, a valid subpoena — we'll notify you when legally allowed); (b) to protect the rights, safety, or security of Advernyx, our users, or the public; or (c) in connection with a merger, acquisition, or sale of assets, in which case this policy continues to apply to your data until you're told otherwise.
Recipients of your messages receive them from you — you're the sender; we're the tool.
5. Data Retention and Deletion
- We keep your information for as long as your account is active and as needed to provide the Service.
- Soft deletes. When you delete a record in the app, it's first soft-deleted (recoverable for a limited window in case of mistakes), then permanently removed.
- Account deletion. When you close your account (or ask us at support@advernyx.com), we delete or de-identify your account information and Customer Data within a reasonable period — subject to routine backup rotation and anything we're legally required to keep (for example, billing records for tax purposes).
- Export first. You can export your Customer Data anytime before deleting. We'd rather you leave with your data than feel locked in.
6. Security
We take reasonable technical and organizational measures to protect your information, including:
- Encryption in transit (TLS) and encryption at rest for stored data.
- Access controls: tenant isolation in our database so each customer's data is scoped to their organization, role-based access within accounts, and limited internal access on a need-to-know basis.
- Vendor selection: the providers above are established platforms with their own security programs.
No system is 100% secure, and we won't pretend ours is. If we learn of a breach affecting your personal information, we'll notify you as required by applicable law.
7. Your Rights and Choices
You can do most of this directly in the app; for anything else, email support@advernyx.com.
- Access and export your data anytime.
- Correct inaccurate account information.
- Delete your data or your whole account.
- Opt out of product-news emails via the unsubscribe link (service and billing notices still come through while you have an account).
US state privacy rights. Depending on where you live (for example, California under the CCPA/CPRA, or states with similar laws such as Virginia, Colorado, Connecticut, Utah, and Texas), you may have the right to: know what personal information we collect and why; access it; correct it; delete it; obtain a portable copy; opt out of "sales," "sharing," or targeted advertising (we don't do any of those); and not be discriminated against for exercising these rights. To exercise any right, email support@advernyx.com; we'll verify your identity and respond within the timeframe the applicable law requires. You may use an authorized agent where the law allows. If we deny a request, applicable state law may give you the right to appeal — reply to our response and we'll take a second look.
A note for your clients. If you're in someone's CRM because you're a client of a real-estate agent who uses Advernyx, that agent controls your record. Contact them directly, or email us and we'll route your request to them and assist as their service provider.
8. Children
Advernyx is a business tool for adults. It is not directed to anyone under 18, and we don't knowingly collect personal information from children. If you believe a child has provided us information, email support@advernyx.com and we'll delete it.
9. Do Not Track
Some browsers send "Do Not Track" signals. There's no common standard for responding to them, so like most services we don't respond to DNT signals at this time. Where state law requires us to honor opt-out preference signals (such as the Global Privacy Control) for sales/sharing of personal information, note that we don't sell or share personal information in the first place.
10. Where Data Is Processed
Advernyx is a US company serving US customers, and our providers process data primarily in the United States.
11. Changes to This Policy
We'll update this policy as the product and the law evolve. Material changes get at least 30 days' notice by email or in-app before they take effect, and we'll update the effective date at the top. Continuing to use the Service after that date means the updated policy applies.
12. Contact Us
Privacy questions or requests: support@advernyx.com
Advernyx [Company legal name and mailing address to be added]