Privacy Policy

We collect the following information when you use Escrow:

• Account data: your email address and, if you sign in with Google or Microsoft, your name and profile photo.
• Gmail data: if you grant Gmail access, we read your inbox (read-only scope) to extract real estate deal emails. We store only the sender, subject, date, and body of emails we classify as deal-related.
• Deal metadata: notes, statuses, and ROI calculations you add inside Escrow.
• Usage data: pages visited, features used, and error logs — collected anonymously for product improvement.

• To operate and improve the Escrow service.
• To score and classify real estate deal emails on your behalf.
• To sync your deal metadata across devices via our database (Supabase).
• To send transactional emails (sign-in codes, digest summaries) — never marketing without consent.

Escrow uses the Gmail API with read-only access (gmail.readonly scope). We do not:

• Send emails on your behalf.
• Store your full inbox — only emails our classifier identifies as real estate deal leads.
• Share Gmail data with any third party, including for advertising.

Our use of Gmail data complies with the Google API Services User Data Policy, including the Limited Use requirements.

Your data is stored on Supabase (PostgreSQL), hosted on AWS in the United States. We enforce row-level security so users can only access their own data. Connections are encrypted in transit (TLS) and at rest.

We do not sell your data. We share data only with:

• Supabase — database and authentication infrastructure.
• Vercel — hosting and edge delivery.
• Google — only to authenticate you and read your inbox with your explicit permission.

We retain your account data for as long as your account is active. You can request deletion at any time by emailing privacy@escrow.app. We will delete all your data within 30 days.

You have the right to access, correct, export, or delete your personal data. To exercise these rights, contact us at privacy@escrow.app.

If you are in the EU or UK, you have additional rights under GDPR / UK GDPR, including the right to lodge a complaint with your local supervisory authority.

We use a single session cookie for authentication. We do not use advertising or tracking cookies.

Escrow is not directed at children under 13. We do not knowingly collect data from anyone under 13.

We will notify you of material changes to this policy by email or a banner in the app at least 14 days before the change takes effect.

Questions? Email privacy@escrow.app.