Privacy Policy

Agent Account Information

• Name, email address, phone number, brokerage name
• Profile information (tagline, branding preferences)
• Authentication credentials (managed by Supabase Auth)

Property and Seller Information

• Property address, city, state, ZIP code
• Seller name and phone number
• Property details (bedrooms, bathrooms, square footage, condition)
• Questionnaire answers (work availability, goals, scope of work)

Usage Data

• Pages visited, features used, and interactions with the Service
• Task status updates and scheduling actions
• Browser type, device information, and IP address (collected automatically)

• Service delivery: Generate listing plans, budget estimates, and task schedules
• Communication: Facilitate agent-seller collaboration via shared plan links
• Improvement: Analyze aggregate usage to improve plan quality and user experience
• Support: Respond to inquiries and troubleshoot issues
• Security: Detect and prevent unauthorized access or abuse

To generate listing plans and budget estimates, we send questionnaire answers and property details to third-party AI providers via OpenRouter. This data is used solely for generating your plan and is not used to train AI models. Specifically:

• Property condition details and seller availability are sent for plan generation
• Location data (city, state, ZIP) is sent for budget estimation with local pricing
• We do not send seller names, phone numbers, or agent account details to AI providers
• AI-generated content (plans, descriptions, estimates) is stored in our database

We share data with the following service providers, solely to operate the Service:

• Supabase: Database hosting and user authentication
• OpenRouter: AI model access for plan and budget generation
• Twilio: SMS text message delivery (if opted in)
• Vercel: Application hosting and deployment

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may disclose information if required by law or to protect our rights.

If you opt in to SMS notifications, we use your phone number to send transactional text messages via Twilio. These include task reminders, client activity alerts, and account notifications. We do not send marketing or promotional messages via SMS.

• Data used: Your phone number from your agent profile
• Provider: Twilio (message delivery)
• Message types: Transactional only — reminders, client responses, account updates
• Frequency: Varies based on listing activity; messages are transactional only
• Opt out: Reply STOP to any message, or disable SMS in your profile settings
• Help: Reply HELP or email support@hypandra.com

For full details, see our SMS Consent & Opt-In page.

• Data is stored in Supabase-hosted databases in the United States
• Active listing data is retained for the duration of the listing plan
• Archived listings are retained for up to 12 months, then deleted
• Agent accounts and associated data are retained until account deletion is requested
• Aggregate, anonymized data may be retained indefinitely for Service improvement

Listing plans are shared with sellers via unique token-based URLs. Anyone with the link can view the plan, task details, budget estimates, and progress. These links:

• Do not require the seller to create an account
• Are generated by the agent and shared at their discretion
• Can be deactivated by the agent by archiving or deleting the listing
• Should be treated as confidential by both agents and sellers

The Service uses:

• Authentication cookies: To maintain agent login sessions (essential)
• Local storage: To cache questionnaire answers and plan data for the standalone flow (non-agent workflow)
• Admin session cookies: For admin dashboard authentication

We do not use marketing or advertising cookies. We do not use third-party analytics tracking.

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Ask us to correct inaccurate or incomplete information
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to the processing of your personal data in certain circumstances

To exercise these rights, contact us at support@hypandra.com. We will respond within 30 days.

Your Agent Plan is not intended for use by children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to remove it. If you believe a child has provided us with personal data, please contact us at support@hypandra.com.

We implement reasonable technical and organizational measures to protect your data, including:

• HTTPS encryption for all data in transit
• Token-based authentication with signed sessions
• Row-level security policies in our database
• Rate limiting on API endpoints
• Origin verification on sensitive operations

No system is completely secure. We cannot guarantee the absolute security of your data.

We may update this Privacy Policy at any time. Changes take effect immediately upon publication. We will indicate the effective date at the top of this page. Continued use of the Service constitutes acceptance of the revised policy.

• Organization: Hypandra Inc.
• Email: support@hypandra.com
• Website: hypandra.com