Privacy Policy

Placeholder — review and replace before launch with legally-approved copy. This text is a starting structure, not legal advice.

Last updated: 2026-05-06

1. Who we are

The Busy Agent Suite (the “Service”) provides workflow software for real estate transaction professionals. The Transaction Ops module helps users review packets of transaction documents and surface gaps before broker review. References below to “we” or “us” mean the operator of the Service. Your contracted operator is identified in your subscription agreement.

2. What data we collect

Account data — your name, email, organization, and authentication identifiers (delegated to Supabase Auth).
Transaction data — the property addresses, parties, dates, financial terms, and other structured fields you record or extract.
Uploaded documents — the PDFs you upload for analysis, retained in encrypted object storage scoped to your organization.
Audit events — appended-only records of who took which actions on findings, documents, and transactions.
Operational telemetry — service logs, request ids, and error tracking. We do not log document contents or signed URLs.

3. How we use it

To deliver the Service you signed up for.
To process your uploaded documents through automated extraction (LiteLLM-mediated AI providers) and our deterministic rules engine.
To produce broker-review reports that you choose to export.
To investigate incidents and operate the Service.

4. AI-assisted extraction is decision support, not advice

Document text is sent to large-language-model providers via our LiteLLM gateway for the purpose of structured field extraction. The gateway sits within our infrastructure and the requests do not include your account credentials. Extraction outputs are written to your organization’s tenant in our database; we do not allow other tenants to access your extractions.

AI-generated findings and broker-review reports are decision support, not legal advice. Transaction Ops does not guarantee compliance and does not replace broker, legal, or regulatory review. See our Terms of Service for the full disclaimer.

5. Sharing

We do not sell or share your data with third parties for advertising. We use the following sub-processors to operate the Service:

Supabase — authentication and identity.
IDrive e2 — encrypted object storage for your uploaded files.
OpenAI / Anthropic (or equivalent) — structured-extraction model providers, accessed via LiteLLM.
n8n — workflow orchestration (self-hosted within our infrastructure).

6. Retention

Default retention windows are documented in our Security overview; per-organization overrides are available on request and described in docs/DATA_RETENTION.md:

Original PDFs — 365 days by default; tenants on stricter compliance contracts can shorten the window.
Extracted page text and field blobs — 90 days by default.
Findings, deadlines, and audit events — retained for the lesser of 7 years and your contracted retention window. The findings produced from your uploads are the lasting record of the analysis.
Service logs — retained no longer than 30 days.
n8n execution history — pruned at 14 days; success payloads are not retained.

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your data. The Service exposes:

A data export endpoint that returns the structured contents of your organization’s transactions, findings, deadlines, and document metadata in JSON.
A soft-delete endpoint on transactions. Account-level deletion is performed by the operator on request — contact us via the email in your subscription agreement.

8. Security

See our Security overview for the operational controls we apply.

9. Changes

We will update this policy as the Service evolves. Material changes will be communicated to your account email at least 30 days in advance.

10. Contact

Questions or requests under this policy: contact the email address listed in your subscription agreement, or your account administrator.