Privacy Policy

1.1. Chippi Inc. operates a B2B SaaS agentic OS for real estate agents and brokerages. The platform combines an autonomous AI agent with intake forms, AI lead scoring, deal pipelines, tour scheduling, voice AI, MCP server integration, and brokerage team management.

1.2. With respect to Subscriber Data (including Applicant data), Chippi acts as a Data Processor. We process data on behalf of our Subscribers (real estate agents and brokerages), who are the Data Controllers.

1.3. For data we collect directly about Subscribers for account and billing purposes, Chippi acts as the Data Controller.

2.1. Real estate agents and brokerages who use the Service are the Data Controllers of the data they collect through intake forms, deal pipelines, and other Service features. They are responsible for how they use their own data.

2.2. Subscribers are responsible for obtaining all necessary consents from Applicants and complying with applicable data protection laws.

2.3. Applicants who submit data through intake forms agree to both Chippi's Privacy Policy and the applicable Subscriber's (real estate agent/brokerage) privacy policy.

2.4. For details on how we process data on behalf of Subscribers, please refer to our Data Processing Agreement.

3.1. Account Information. When you create an account, we collect your name, email address, phone number, brokerage or company name, and login credentials (managed via Clerk).

3.2. Billing Information. Payment details including credit card information, billing address, and transaction history are collected and processed by Stripe. Chippi does not store full payment card numbers.

3.3. Usage Information. We collect data about how you interact with the Service, including pages visited, features used, session duration, device and browser information, IP address, and referral sources.

3.4. Team Information. If you manage a brokerage team, we collect information about team members you invite, including their names and email addresses.

4.1. When Applicants submit information through a Subscriber's intake forms, we collect that data on behalf of the Subscriber (Data Controller). This may include:

• Name, email address, and phone number.
• Housing preferences and requirements.
• Employment and income information (if requested by the Subscriber).
• Any other information the Subscriber's intake form requests.

4.2. Applicant data is processed solely for the purpose of providing the Service to the Subscriber. The Subscriber determines what data is collected through their intake forms.

4.3. Applicants with questions about how their data is used should contact the Subscriber (real estate agent/brokerage) who collected their information.

5.1. Provide the Service. Operate and maintain the platform, including intake forms, deal pipelines, tour scheduling, brokerage team management, and MCP server integration.

5.2. AI Scoring. Process Applicant data through AI lead scoring features to provide Subscribers with advisory insights. AI scoring is performed solely to deliver the Service, not for any other purpose.

5.3. Notifications. Send transactional notifications such as new lead alerts, tour reminders, deal updates, and account-related communications via email (Resend) and SMS (Telnyx).

5.4. Analytics. Analyze aggregate usage patterns to improve the performance, reliability, and features of the Service.

5.5. Billing. Process subscription payments and manage billing through Stripe.

5.6. Security. Detect, prevent, and address fraud, abuse, and security issues.

5.7. Legal Compliance. Comply with applicable laws, regulations, and legal processes.

6.1. AI features (including lead scoring and voice AI assistant) process data solely to provide scoring results and advisory outputs to Subscribers.

6.2. We do not use Subscriber Data or Applicant data to train artificial intelligence models.

6.3. AI-generated scores and recommendations are advisory only and do not constitute automated legal decision-making. Subscribers retain full responsibility for all decisions made using AI outputs.

6.4. AI processing is performed through our integration with OpenAI. Data sent to OpenAI is subject to our data processing agreements with them and is not used by OpenAI for model training.

7.1. We use the following third-party service providers to operate the Service:

• Supabase — database hosting and data storage infrastructure.
• Clerk — user authentication, session management, and identity services.
• Stripe — payment processing, subscription billing, and financial transaction management.
• OpenAI — AI-powered lead scoring, voice AI assistant, and analytical features.
• Resend — transactional email delivery (lead alerts, account notifications).
• Telnyx — SMS delivery and voice communications.
• Vercel — application hosting and performance monitoring.
• Sentry — error monitoring and diagnostics.
• Amplitude — product analytics and session replay to understand and improve in-product usage.
• Mailchimp — email marketing. We sync Subscriber account contact details (name and email) to maintain our marketing and lifecycle email lists.

7.2. Analytics and advertising partners. On our public marketing website and within the Service, we also use the following analytics and advertising technologies to measure traffic, signups, and purchases and to run and measure our own marketing campaigns: Google (Google Analytics and Google Ads), Meta Platforms (Meta/Facebook Pixel), Microsoft (Clarity analytics and Microsoft Advertising), LinkedIn (Insight Tag), TikTok, Pinterest, and Reddit. Section 14B describes what these collect and how to opt out.

7.3. Each third-party provider processes data in accordance with their own privacy policies and our data processing agreements with them.

7.4. We select providers that maintain appropriate security and privacy standards. However, we are not responsible for the independent practices of third-party services.

8.1. We do not sell your personal data. We never have and never will sell data to third parties.

8.2. We share data only with the third-party service providers listed in Section 7, and only to the extent necessary to operate the Service.

8.3. We may disclose information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

8.4. In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity, subject to the same privacy protections described in this policy.

9.1. Active Subscriber Data. We retain Subscriber account and billing data for the duration of the active subscription.

9.2. Lead and Applicant Data. Applicant data is retained for up to 24 months from the date of collection, or until the Subscriber deletes it, whichever comes first.

9.3. Post-Cancellation. Following subscription cancellation or account termination, we retain all Subscriber Data for 30 days to allow for data export. After this period, data is permanently and irreversibly deleted.

9.4. Legal Obligations. We may retain certain data beyond the periods stated above if required by law or to resolve disputes.

10.1. We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Secure authentication through Clerk with support for multi-factor authentication.
• Role-based access controls for brokerage team management.
• Regular security assessments and monitoring.
• Secure infrastructure provided by our hosting partners.

10.2. While we take reasonable precautions to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

11.1. Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access. Request a copy of the personal data we hold about you.
• Correction. Request correction of inaccurate or incomplete data.
• Deletion. Request deletion of your personal data, subject to legal retention requirements.
• Portability. Request your data in a structured, commonly used, machine-readable format.
• Opt-Out. Opt out of non-essential communications at any time.

11.2. For Subscribers: You can exercise these rights by contacting us at help@usechippi.com or through your account settings.

11.3. For Applicants: Because Subscribers are the Data Controllers of Applicant data, Applicants should first contact the real estate agent or brokerage that collected their information. If you are unable to reach the Subscriber, you may contact us at help@usechippi.com and we will assist in forwarding your request.

11.4. We will respond to data rights requests within 30 days.

12.1. The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18.

12.2. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly.

12.3. If you believe a child under 18 has provided us with personal data, please contact us at help@usechippi.com.

13.1. Your data may be processed and stored in the United States or other countries where our service providers operate.

13.2. If you are located outside the United States, your data may be transferred to, stored, and processed in the United States. By using the Service, you consent to such transfers.

13.3. We take appropriate measures to ensure that international data transfers comply with applicable data protection laws, including the use of standard contractual clauses where required.

14.1. We use cookies and similar technologies to operate and improve the Service. For detailed information, please refer to our Cookie Policy.

14.2. Essential cookies are required for authentication and core functionality. You may manage non-essential cookies through your browser settings.

14A.1. Subscribers (real estate agents and brokerages) may configure third-party tracking pixels on their public-facing intake forms and tour booking pages. These tracking technologies may include pixels and scripts from platforms such as Meta/Facebook, Google Analytics, Google Ads, TikTok, Twitter/X, LinkedIn, and Snapchat.

14A.2. These technologies may collect information such as IP addresses, browser type, device information, pages visited, and actions taken (such as form submissions). This data is sent directly from the Applicant's browser to the respective third-party platform.

14A.3. Chippi acts as a Data Processor with respect to Subscriber-configured tracking pixels. The Subscriber (Data Controller) is responsible for disclosing the use of these technologies in their own privacy policy and obtaining any required consents.

14A.4. Applicants may opt out of third-party tracking by adjusting their browser settings, using browser extensions that block tracking scripts, or visiting the Digital Advertising Alliance's opt-out page.

14B.1. This section is distinct from Section 14A. It describes the analytics and advertising technologies Chippi itself uses on our public marketing website (usechippi.com) and within the Service (www.usechippi.com). With respect to these technologies, Chippi acts as the Data Controller.

14B.2. Technologies we use. Depending on the page and over time, we may load: Google Analytics 4 and Google Ads, the Meta (Facebook) Pixel, Microsoft Clarity and Microsoft Advertising (UET), the LinkedIn Insight Tag, and the TikTok, Pinterest, and Reddit pixels. Each is enabled independently and may be added or removed as our marketing changes.

14B.3. What they collect. These technologies may collect your device and browser information, IP address, the pages you view and links you click, referring URLs, and conversion events such as page views, account signups, onboarding completion, and purchases, together with cookies and similar identifiers set by each provider. Microsoft Clarity and Amplitude may also record session replays (such as mouse movement, clicks, and scrolling); we configure these tools to mask sensitive input fields.

14B.4. Why we use them. To measure website traffic and the performance of our marketing, understand our signup and purchase funnel, improve our site and product, and deliver and measure Chippi's own advertising (including retargeting our visitors) on these platforms. We do not use these technologies to make decisions about Applicants.

14B.5. Your choices. You can opt out of interest-based advertising through the Digital Advertising Alliance, the Network Advertising Initiative, and (in Europe) Your Online Choices. You can manage Google advertising via Google Ads Settings and opt out of Google Analytics with Google's browser add-on, and Meta advertising through your Meta ad preferences. You can also block or delete cookies in your browser and use privacy/ad-blocking extensions.

14B.6. "Do Not Sell or Share" and Global Privacy Control. We do not sell your personal information for money. However, the advertising technologies described above may constitute a "sale" or "sharing" for cross-context behavioral advertising under certain U.S. state privacy laws (such as California's CCPA/CPRA). You may exercise your opt-out rights using the mechanisms in Section 14B.5, by emailing help@usechippi.com, or by enabling a Global Privacy Control (GPC) signal in your browser, which we honor as a valid opt-out of sale/sharing where required by law.

15.1. We may update this Privacy Policy from time to time. We will notify Subscribers of material changes by email or through the Service at least 30 days before the changes take effect.

15.2. The "Last updated" date at the top of this policy indicates when the most recent revisions were made.

15.3. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised policy.

If you have questions about this Privacy Policy or our data practices, please contact us:

Chippi Inc.
Email: help@usechippi.com
Website: usechippi.com