1. Scope and definitions
This Privacy Policy explains how MREAReferrals Inc. ("MREAReferrals," "we," "us," or "our") collects, uses, discloses, retains, and protects information when you use our website, referral workspace, forms, communications, integrations, and related services (collectively, the "Services").
"Personal Data" means information that identifies, relates to, describes, or can reasonably be linked with an individual or household. "Service Provider" means a person or company that processes information for us to operate or support the Services. "You" means the individual using the Services and, where applicable, the organization on whose behalf that individual acts.
By using the Services, you acknowledge the practices described here. Additional notices presented at collection, checkout terms, and signed agreements may provide more specific information.
2. Information you provide
Depending on how you use the Services, you may provide:
- Account and profile information: name, email address, phone number, password credentials handled by our authentication provider, brokerage, license, market, biography, website, team details, and notification preferences.
- Pricing and availability requests: contact details, target ZIP code, billing-model interest, opportunity type, selected plan, consent record, and related request status.
- Referral, lead, and property information: buyer or seller details, contact information, property address and attributes, preferences, budget, timing, qualification responses, source, notes, communications, assignment, status, contracts, closings, and referral attribution.
- Campaign and billing information: selected services, markets, budgets, billing interval, upfront-fee and referral-fee terms, payment status, processor customer and transaction identifiers, invoices, disputes, and closing-related records. We do not receive full payment-card numbers from the payment processor.
- Content and support information: messages, uploaded files or images, exports, integration settings, support requests, feedback, and other information you choose to submit.
- Consent and communication records: the disclosure shown, choices made, timestamp, source, delivery events, unsubscribe requests, and account or marketing communication history.
3. Information collected automatically
When you use the Services, we and enabled Service Providers may automatically collect IP address, approximate location derived from IP, browser type and version, device type, operating system, language, page URLs, referring page, date and time, interaction and navigation events, session duration, error and diagnostic data, unique or pseudonymous identifiers, cookies, and local or session-storage values.
Referral parameters, campaign identifiers, query-string values, user-agent information, and similar technical context may be recorded to attribute requests, maintain sessions, prevent abuse, troubleshoot problems, and understand service performance. We may create a truncated one-way hash from an IP address rather than storing the raw address for a particular anti-abuse workflow.
4. Sources of information
We collect information directly from you; automatically from your browser, device, and use of the Services; from authorized account users, teams, brokerages, referral partners, buyers, sellers, and other people who submit or share a lead; and from Service Providers or integrations used to operate advertising, communications, payments, maps, property data, support, analytics, and user-directed workflows.
If you provide information about another person, you represent that you are authorized to do so and have provided any notice or obtained any consent required by law.
5. How we use information
We may use Personal Data to:
- Provide, personalize, maintain, secure, and troubleshoot the Services and your account.
- Respond to pricing and availability requests and communicate about requested products or services.
- Create, route, qualify, deliver, and manage referrals and leads; support follow-up; and maintain status and attribution records.
- Configure and operate advertising campaigns, market coverage, notifications, exports, and integrations.
- Process checkout, subscriptions, upfront fees, invoices, referral-fee obligations, refunds, credits, and billing disputes.
- Send account, security, service, lead-alert, and optional marketing communications according to your choices.
- Measure performance, analyze usage, improve products and campaigns, and develop new features.
- Detect spam, fraud, abuse, security incidents, policy violations, and technical failures.
- Enforce agreements, establish or defend legal claims, comply with law, and protect users, consumers, the public, and our rights.
- Evaluate or complete a financing, merger, acquisition, reorganization, or sale of assets.
6. Automated tools and artificial intelligence
We may use automated tools to assist with lead-quality review, classification, routing, summarization, fraud prevention, and service operations. For certain lead workflows, submitted information may be sent to an artificial-intelligence Service Provider to evaluate whether the submission appears complete and genuine.
Automated outputs can be inaccurate and are used as operational assistance rather than professional, legal, lending, or real estate advice. Contact us if you believe an automated classification materially affected your use of the Services and should be reviewed.
7. Cookies, local storage, and analytics choices
Essential browser storage supports authentication, security, workspace state, privacy choices, and bounded pricing access. Optional analytics and support scripts load only after you select "Accept optional tools" and only when those tools are configured. You may choose "Essential only" in the privacy prompt and can clear browser storage through your browser controls.
Disabling essential cookies or storage may prevent sign-in, saved preferences, pricing access, or other functions from working correctly. Third-party tools that you accept may set their own cookies or identifiers under their privacy policies.
8. How information is disclosed
We disclose information only as reasonably necessary for the purposes described in this Policy, at your direction, or as permitted by law. Depending on enabled features, recipients may include:
- Cloud and account infrastructure: Firebase and Google Cloud for hosting, authentication, databases, storage, logging, functions, and operational backup.
- Payments: Stripe for payment processing, subscriptions, stored payment methods, invoices, fraud controls, and disputes.
- Communications: SendGrid, ClickSend, and customer-support providers for email, text messages, delivery events, and support.
- Analytics and customer tools: Google Tag Manager, HubSpot, and configured support tools when optional tools are accepted.
- Location and property tools: IPStack, Mapbox, Google Maps or Places, CertiAPI, and other property-data providers when a feature requires location or property context.
- Advertising and lead operations: Meta, Google, and related campaign providers when advertising services are enabled.
- Automated assistance: OpenAI or another configured provider for eligible lead-quality and operational processing.
- User-directed integrations: Zapier, webhooks, exports, CRM providers, and destinations you or an authorized account user configure.
- Authorized participants: account owners, authorized team members, referral participants, service personnel, and consumers as needed to perform an authorized workflow.
Service Providers may use information only under their agreements and applicable law. A provider's independent services and websites are also governed by its own privacy terms.
9. Skate operational mirror
Operational Firestore and Firebase Authentication data is mirrored from the MREAReferrals Firebase project into the separately controlled Skate Google Cloud project for backup, support, security, reconciliation, and consolidated platform operations. The mirror preserves source document paths beneath a platform-specific boundary so authorized administrators can distinguish this platform's data.
Access is restricted to authorized operational personnel and service identities. Deletion and retention may require processing in both the source system and mirrored or backup systems, and residual backup copies may remain for a limited period where reasonably necessary for security, recovery, dispute resolution, or law.
10. Mobile information and messaging
If you provide a mobile number and opt in, we may send recurring automated messages in the categories you select, including account, service, lead-alert, and optional marketing messages. Marketing consent is not a condition of purchase. Message frequency varies. Message and data rates may apply.
Reply STOP to cancel text messages. After STOP, you may receive a one-time confirmation and no further messages in that program unless you opt in again. Reply HELP for help or contact support@mreareferrals.com. Carriers are not liable for delayed or undelivered messages.
Mobile opt-in information and consent will not be sold or shared with third parties or affiliates for their own marketing or promotional purposes. It may be disclosed to messaging, telecommunications, and support providers only as necessary to operate the selected program or comply with law.
11. Retention
We retain Personal Data for as long as reasonably necessary to provide the Services, maintain referral and transaction records, administer billing, honor consent and opt-out choices, secure and recover systems, resolve disputes, enforce agreements, and comply with legal, tax, accounting, professional, and regulatory obligations.
Retention periods vary by record type and context. Usage and diagnostic data may be retained for a shorter period unless needed for security, product integrity, or legal compliance. Information may remain longer in protected backups or mirrors until ordinary deletion cycles complete.
12. Processing locations and transfers
We and our Service Providers may process and store information in the United States and other locations where they operate. Those locations may have privacy laws different from your jurisdiction. Where required, we use contractual, organizational, or other lawful safeguards for cross-border processing.
13. Security
We use administrative, technical, and organizational safeguards designed to protect Personal Data, including access controls, authentication, encrypted transport, provider-managed encryption at rest, logging, environment separation, and restricted administrative access. We review and update safeguards based on the nature of the Services and information involved.
No Internet transmission, electronic storage, or security measure is completely secure. You are responsible for protecting your credentials and devices and for notifying us promptly of suspected account compromise.
14. Your choices and privacy rights
You may update profile and notification settings in your workspace, disconnect user-directed integrations, choose essential-only browser storage, decline optional marketing consent, unsubscribe from marketing email using its available mechanism, and stop text messages as described above.
Depending on where you live, you may have rights to request access, correction, deletion, or a portable copy of Personal Data; learn about categories collected, used, or disclosed; limit or object to certain processing; withdraw consent; appeal a denied request; or use an authorized agent. We will not unlawfully discriminate against you for exercising an applicable privacy right.
To submit a request, email support@mreareferrals.com. We may verify your identity and authority before acting and may retain information where an exception or legal obligation applies.
15. Deletion and account closure
You may ask us to delete Personal Data or close an account. Some information can be updated through the workspace. We may retain records needed for active referrals, earned or disputed fees, fraud prevention, security, opt-out suppression, tax or accounting, legal claims, backup integrity, or another lawful purpose.
Deleting information from an active interface does not necessarily remove it immediately from logs, mirrors, backups, processor records, or destinations to which you previously directed an export. We will process verified requests consistent with applicable law and operational deletion cycles.
16. Children's privacy
The Services are intended for adults and are not directed to anyone under 18. We do not knowingly create accounts for or collect Personal Data directly from children. If you believe a child provided Personal Data to us, contact us so we can investigate and take appropriate action.
17. Legal disclosures and business transfers
We may preserve or disclose information when reasonably necessary to comply with law, court process, or a valid government request; enforce agreements; investigate wrongdoing; protect the rights, property, security, or safety of users, consumers, the public, or our business; or establish, exercise, or defend legal claims.
Information may be reviewed or transferred as part of a financing, merger, acquisition, reorganization, bankruptcy, dissolution, or sale of assets. A successor's use remains subject to this Policy unless you receive notice of a different policy where required.
18. External links
The Services may link to websites or services we do not operate. We do not control their content or privacy practices. Review the privacy policy of each external service before providing information.
19. Changes to this Policy
We may update this Privacy Policy as the Services, vendors, or legal requirements change. We will post the revised Policy and update its effective date. We may provide additional notice through the Site, account, or email when a change is material or law requires it.
20. Contact us
Questions, concerns, or privacy requests may be sent to support@mreareferrals.com, by telephone at (765) 553-6902, or through our contact page.