Privacy Policy

We handle three buckets of information:

• Agent account data— your name, license number, brokerage affiliation, contact details, billing info, and any team members you invite. Collected when you sign up.
• Real estate operating data— MLS / IDX feeds you connect, listings you publish, comparables Alma pulls, contracts and disclosures you draft, calendar events, and the contact records (buyers, sellers, past clients, leads) you keep in your workspace. You own all of it; we hold and process it on your behalf.
• Conversation and usage data— calls, texts, WhatsApp messages, web chats handled by Alma; pages viewed in your dashboard; device and browser metadata; IP address; error logs.

When a buyer or seller calls, texts, or chats with Alma on your site, that conversation belongs to you, the agent. We process it on your behalf as your data processor and only use it to do the job you asked Alma to do.

• Run Action Agent and the Alma assistant on your behalf.
• Sign you in, enforce roles, and protect your workspace.
• Generate AI output (CMAs, listing copy, draft offers, follow-ups) using model providers like Anthropic, OpenAI, Google, and Deepgram — strictly inside your workspace.
• Send you transactional messages (receipts, system alerts, support replies).
• Send you product news only if you’ve opted in.
• Comply with legal obligations (tax records, fraud prevention, lawful requests, real estate regulatory requirements).
• Detect and prevent abuse, security incidents, and fraud.

We do not sell personal information. We do not use your buyer leads, seller contracts, or any other workspace data to train public AI models. Period.

Buyer and seller information you handle through Action Agent is subject to your fiduciary duties as a licensed real estate professional and to the privacy laws of the jurisdictions you operate in. We help you meet those obligations: encrypted storage, scoped access, audit logs, and easy export and deletion. But the agent-client relationship is yours, not ours. Use the platform accordingly.

We share information only with sub-processors necessary to run Action Agent, under contractual data-protection obligations. The current list:

• Vercel — hosting, edge network, deployment of your site and dashboard.
• Neon — managed PostgreSQL database where your workspace lives.
• Cloudflare — DNS, CDN, R2 object storage for listing photos and documents.
• Anthropic, OpenAI, Google — AI model inference for Alma’s reasoning, drafting, and language tasks.
• Deepgram — voice transcription and synthesis for the phone and WhatsApp voice channels.
• Twilio, Evolution API — SMS, voice, and WhatsApp connectivity.
• Stripe — payment processing for your Action Agent subscription.
• Your MLS / IDX provider — whichever feed you connect (we don’t pick the MLS for you).
• E-signature, calendar, and CRM providers you opt into — only the ones you explicitly connect.

We may share information to comply with a lawful request, enforce our Terms, protect users, or investigate fraud or abuse.

We hold your account and operating data for as long as your workspace is active. If you cancel, you have 30 days to export everything; after that we permanently delete it — except where law requires us to keep records (tax, real estate transaction records, audit). Conversation transcripts and usage logs are retained for up to 12 months unless you set a shorter window.

Depending on where you and your clients live (GDPR, CCPA, LGPD, and similar laws), you may have the right to:

• Access the personal data we hold about you.
• Request correction or deletion.
• Export your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent at any time (where consent is the basis).
• File a complaint with your data-protection authority.

To exercise any of these rights, email info@actionagent.ai. We respond within 30 days. If a request is for data about a buyer or seller you represent, we’ll route it through you, since you’re the data controller.

Data is encrypted in transit (TLS) and at rest. MLS credentials, e-signature tokens, and any other API keys are encrypted at the database layer. Every workspace is scoped to its account — no agent can read another agent’s leads or contracts. Administrative actions are logged. No system is perfect: if you suspect a breach, report it to info@actionagent.ai.

Calls, voicemails, and WhatsApp / SMS messages handled by Alma may be recorded or transcribed for the purpose of running your business and improving service to your contacts. You are responsible for posting any consent disclaimers your jurisdiction requires (two-party-consent states, regulated jurisdictions). Alma can play a disclosure at the start of each call — turn it on in your workspace.

Action Agent uses a small number of first-party cookies for authentication, CSRF protection, and basic analytics. We don’t use third-party advertising cookies. Your public-facing agent site may use additional cookies you configure (analytics, retargeting), and those are governed by your own cookie disclosure.

Action Agent is operated from the United States. Your data may be processed in the US and in the regions where our sub-processors operate. Where required by law we apply standard contractual clauses and equivalent safeguards.

Action Agent is built for licensed real estate professionals. It’s not intended for use by anyone under 18. We don’t knowingly collect data from minors.

We may update this policy when the platform or the law changes. Material updates are emailed and posted in your dashboard. Continued use after the effective date means you accept the change.

Questions, requests, or concerns? info@actionagent.ai · +1 (954) 906-9919 · Miami, FL, USA.