Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

Account Information:

• Name
• Email address
• State/location
• Brokerage name (optional)
• Annual transaction volume (optional)
• Role (Agent, Broker, or TC)

Transaction Documents:

• Real estate contracts
• Amendments and addenda
• Disclosures
• Inspection reports
• Title documents
• Any other documents you forward to tc@keyflo.ai

Email Communications:

• Emails forwarded to tc@keyflo.ai
• Email threads where tc@keyflo.ai is CC'd
• Email metadata (sender, recipients, timestamps, subject lines)

Transaction Data Extracted by AI:

• Property addresses
• Purchase prices and financial terms
• Closing dates and other deadlines
• Party names (buyers, sellers, agents, etc.)
• Contact information contained in documents
• Any other data fields extracted from your documents

1.2 Information Collected Automatically

Usage Data:

• Features you use
• Transactions processed
• Documents uploaded
• Actions taken within the platform

Device and Access Information:

• IP address
• Browser type
• Device type
• Access timestamps
• Referring URLs

Email Delivery Data:

• Email open rates (for notifications)
• Delivery status
• Bounce information

1.3 Information from Third Parties

We may receive information about you from:

• Third-party platforms you connect (e.g., when you provide a SkySlope transaction email)
• Other transaction parties who CC KeyFlo on emails
• Publicly available sources

1.4 Information Collected on the keyflo.ai Website

When you join our waitlist or book a call on keyflo.ai, we collect:

• Name and email address
• Phone number (optional). Agreeing to receive text messages is a separate, optional checkbox.
• State, brokerage, and the transaction-management system you use
• How you reached us: UTM campaign parameters and ad click identifiers (gclid, gbraid, wbraid, fbclid), Meta's _fbp and _fbc cookies, and your Google Analytics client ID
• The page address (URL) where you submitted the form

When our marketing systems send conversion information to advertising platforms from our servers (see Section 3.6), your IP address and browser user agent are included.

2. How We Use Your Information

We use your information to:

Provide Our Services:

• Process and parse your transaction documents
• Extract deadlines, dates, and data using AI
• Generate critical dates letters and summaries
• Send deadline reminders and notifications
• Track document status
• Forward documents to third-party platforms you specify
• Provide calendar sync functionality

Manage Your Account:

• Create and maintain your account
• Process payments and billing
• Communicate with you about your account
• Provide customer support

Improve Our Services:

• Analyze usage patterns to improve features
• Debug and fix technical issues
• Develop new features
• Train and improve our AI models (see Section 5)

Communicate With You:

• Send transaction notifications and reminders
• Send service announcements
• Respond to your inquiries
• Send marketing communications (with your consent)

Legal and Safety:

• Comply with legal obligations
• Enforce our Terms of Service
• Protect against fraud and abuse
• Respond to legal requests

3. How We Share Your Information

We do not sell your personal information or transaction data for money. California law may treat some advertising cookies and pixels on our website as a "sale" or "sharing" of personal information; see Section 3.7 for what that means and how to opt out.

Mobile Information Privacy: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We share your information only in the following circumstances:

3.1 At Your Direction

• Third-Party Platforms: When you provide a SkySlope, dotloop, or other platform's transaction email address, we forward documents to that address as you direct.
• Transaction Parties: When you use calendar sync or share critical dates letters, recipients receive transaction information.
• Email Threads: When you CC KeyFlo on emails, we process information visible to all thread participants.

3.2 Service Providers

We use third-party service providers to operate KeyFlo, including:

• Cloud hosting providers
• Email delivery services
• Payment processors
• Analytics providers
• Advertising and ad-measurement partners (see Section 3.6)
• Scheduling tools
• Customer support tools

These providers access your information only to perform services for us and are obligated to protect it.

3.3 Legal Requirements

We may disclose your information if required to:

• Comply with applicable law, regulation, or legal process
• Respond to lawful requests from public authorities
• Protect our rights, privacy, safety, or property
• Enforce our Terms of Service

3.4 Business Transfers

If KeyFlo is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

3.5 Aggregated/Anonymized Data

We may share aggregated or anonymized data that cannot reasonably be used to identify you.

3.6 Cookies, Pixels, and Tracking Technologies on keyflo.ai

What we don't do: we don't sell your personal information for money, we never send your phone number or text messages to advertisers, and we never share your clients' information or transaction details with advertisers.

We use Google Analytics, Google Ads, the Meta Pixel, and Microsoft Clarity — all loaded through Google Tag Manager — to measure site visits and how our ads perform. We also use Cal.com to run our booking scheduler.

For ad measurement, when you submit a form the email address you entered is hashed (irreversibly scrambled) in your browser by Google's tag before it is sent. When you arrive from an ad, we save the ad click identifier in a first-party cookie, kf_click, for 90 days (with a copy in your browser's session storage), so we can connect a form you submit later to that ad. Our servers may separately send Meta a lead's hashed email address, IP address, browser type and Meta cookie identifiers, and send Google the hashed email address and ad click identifier — never your phone number — for calls booked on our website.

Each vendor's own privacy policy describes how it handles the information it receives and how long its cookies last.

3.7 "Sale" or "Sharing" for Advertising, and How to Opt Out

We do not sell your personal information for money. Some of the ad cookies described in Section 3.6 may count as a "sale" or "sharing" of personal information under California law, even though no money changes hands.

You can opt out at any time using the "Your Privacy Choices" link in the footer of every page, or by turning on your browser's Global Privacy Control (GPC) signal, which we honor automatically. When you opt out, we do not load Google Analytics, Google Ads, the Meta Pixel, or Microsoft Clarity for that browser, and our servers send nothing about you to advertising platforms. (Cal.com still loads so you can book a call.) Opting out does not affect any information about your KeyFlo account or transactions. We store your choice in a cookie, kf_privacy_optout, for 1 year.

4. Data Retention

4.1 Transaction Documents

Oklahoma Transactions: We retain transaction documents for five (5) years in accordance with Oklahoma Real Estate Commission requirements, unless:

• You request earlier deletion (subject to legal requirements), OR
• Law requires longer retention

Other States: We retain documents according to applicable state requirements, or for five (5) years if no specific requirement exists.

4.2 Account Information

We retain your account information for as long as your account is active. After account termination:

• Account data is retained for 90 days (to allow reactivation)
• Transaction documents continue to be retained per Section 4.1
• Billing records are retained as required for tax/legal purposes

4.3 Deletion Requests

You may request deletion of your data by emailing support@keyflo.ai. We will delete data not subject to legal retention requirements within 30 days.

4.4 Website Form and Cookie Data

Information you submit through our waitlist and booking forms (Section 1.4) may be deleted on request as described in Section 4.3. The kf_click cookie that holds ad click identifiers (Section 3.6) is kept for 90 days; the copy in session storage is cleared when you close the browser tab. Your advertising opt-out choice (the kf_privacy_optout cookie) is kept for 1 year, or until you change it or clear your cookies. Cookies set by Google, Meta, Microsoft, and Cal.com are kept for the periods set by those vendors. We also keep campaign and click details in first-party cookies (keyflo_attr, keyflo_gclid, 90 days) and in your browser's local storage until you clear it. None of these are stored while you are opted out.

5. AI Training and Your Data

6. Data Security

We implement industry-standard security measures to protect your information:

Technical Safeguards:

• Encryption in transit (TLS/SSL)
• Encryption at rest
• Secure cloud infrastructure
• Access controls and authentication
• Regular security assessments

Operational Safeguards:

• Limited employee access on a need-to-know basis
• Employee training on data protection
• Incident response procedures
• Vendor security requirements

No system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials.

7. Your Rights and Choices

7.1 Access and Portability

You may request a copy of your data by emailing support@keyflo.ai. We will provide your data in a commonly used format within 30 days.

7.2 Correction

You may update your account information through your account settings or by contacting us.

7.3 Deletion

You may request deletion of your data, subject to legal retention requirements (see Section 4).

7.4 Marketing Communications

You may opt out of marketing emails by:

• Clicking "unsubscribe" in any marketing email
• Emailing support@keyflo.ai

Note: You cannot opt out of transactional emails (deadline reminders, account notifications) while using the service.

7.5 Do Not Track

We do not currently respond to "Do Not Track" browser signals. We do honor the Global Privacy Control (GPC) signal as an opt-out of sale/sharing (see Section 3.7).

7.6 KeyFlo Text Messages

We like texting because it's the fastest, easiest way to stay in touch while you're out in the field. When you text us or share your phone number with us, here is how we handle your information and respect your privacy.

How We Collect Your Number and What We Send:

You opt in to receive KeyFlo Text Messages in one of two ways: by texting us directly at +14053699694, or by providing your mobile number when you sign up for KeyFlo or book a walkthrough next to our text consent checkbox. When you connect with us by text, we collect your phone number and message history solely so a teammate can reply to your questions and send you helpful transaction information.

These messages include:

• A confirmation text with your meeting time after signup
• A reminder before a scheduled walkthrough
• A quick follow-up to reschedule if a meeting is missed
• Direct replies to support questions
• Answers to billing and account questions
• Transaction status updates on your deals

We never send promotional blasts or marketing texts.

Your Privacy & Non-Sharing Guarantee:

Your mobile information will not be sold or shared with third parties or affiliates for promotional or marketing purposes. Text messaging originator opt-in data and consent are strictly excluded from any third-party sharing described elsewhere in this Privacy Policy. This information will never be shared with any third parties.

Program Terms & Disclosures:

• Msg & data rates may apply.
• Message frequency varies.
• Reply STOP to opt out. Reply HELP for help.
• Consent is not a condition of purchase.
• Opt-Out (STOP): You can stop receiving text messages at any time. Just reply STOP, END, CANCEL, UNSUBSCRIBE, or QUIT to any message. We will send you a single confirmation text to verify that you have been unsubscribed, and you will receive no further messages. If you ever want to rejoin, reply START, YES, or UNSTOP.
• Help & Customer Care (HELP): If you ever need help or have questions about the text program, reply HELP or INFO to any text, email us at support@keyflo.ai, or visit keyflo.ai/contact.
• Carrier Liability: Wireless carriers are not liable for delayed or undelivered messages.
• Terms of Service: Our text messaging terms are incorporated into our Terms of Service.

8. Third-Party Links and Services

KeyFlo may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third parties. We encourage you to review their privacy policies.

When you direct us to forward documents to third-party platforms (e.g., SkySlope), those platforms' privacy policies govern their handling of your data.

9. Children's Privacy

KeyFlo is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it promptly.

10. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about the categories and specific pieces of personal information we have collected
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt Out of Sale or Sharing (“Do Not Sell or Share My Personal Information”): We do not sell personal information for money, but some advertising cookies and pixels on keyflo.ai may count as a “sale” or “sharing” for cross-context behavioral advertising (see Sections 3.6 and 3.7). Opt out at Your Privacy Choices, or turn on Global Privacy Control in your browser, which we honor automatically.
• Right to Limit Use of Sensitive Personal Information: You may ask us to limit our use and disclosure of any sensitive personal information to what is needed to provide our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights (other than the website opt-out above), email support@keyflo.ai with "California Privacy Request" in the subject line.

11. Data Breach Notification

12. Automated Decision-Making

KeyFlo uses automated systems (including AI) to:

• Parse and extract data from contracts
• Calculate transaction timelines and deadlines
• Generate deadline reminders
• Classify and organize documents
• Flag low-confidence extractions for review

Your Rights:

• You may request human review of any automated extraction or calculation
• You may correct any data that was incorrectly extracted
• Low-confidence extractions are automatically flagged for your verification

To request human review of automated decisions, email support@keyflo.ai.

13. International Users

KeyFlo is operated in the United States. If you access KeyFlo from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country.

By using KeyFlo, you consent to this transfer and processing.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Sending an email notification for significant changes

Your continued use of KeyFlo after changes constitutes acceptance of the updated policy.