Privacy Policy

1. Introduction

This Privacy Policy describes how Phazr, Inc. (“Phazr,” “we,” “us,” or “our”), a Florida corporation, collects, uses, protects, and shares information when you use the Phazr platform, website, and related services (the “Service”). It is incorporated into our Terms of Service.

Phazr is a homebuying workspace: you upload real estate transaction documents and enter transaction details, and the Service organizes them, explains them in plain language, and tracks your deadlines. By its nature, the Service handles information about one of the largest financial transactions of your life — this policy explains exactly what we do and do not do with it.

2. Information We Collect

2.1 Information you provide

Account information — email address, password (stored as a cryptographic hash, never in plain text), and the display name and role you choose at setup
Transaction information — details you enter about your home purchase, such as property addresses, prices, offer terms, contingency dates, and deadlines
Uploaded documents — real estate transaction documents (for example purchase contracts, loan estimates, closing disclosures, and inspection reports) that you, or collaborators you invite, upload to your workspace
Messages to Homie— questions you ask the Service’s AI assistant and its responses

2.2 Information collected automatically

Usage and log information — standard technical data such as IP address, browser type, and the actions you take in the Service, used for security, debugging, and abuse prevention
Cookies — we use cookies for authentication (keeping you signed in). We do not use advertising or cross-site tracking cookies

2.3 Sensitive identifiers in your documents

We do not ask for your Social Security number, bank account numbers, routing numbers, or payment card numbers. Real estate documents you upload may incidentally contain such identifiers. The Service applies automated redaction to document text before AI processing and before storing any derived text, summaries, or extracted fields (see Section 4). Your original uploaded documents are retained in encrypted storage as the authoritative record.

3. How We Use Your Information

To provide the Service: organizing your transaction, generating plain-language document summaries, extracting key fields, tracking deadlines, and answering your questions about your documents
To secure the Service: authentication, fraud and abuse prevention, and debugging
To communicate with you about your account and the Service
To improve the Service, using aggregated or de-identified information that does not identify you

We do not use your information for advertising, and we do not build advertising profiles.

4. AI Processing of Your Documents and Saved Homes

The Service uses third-party artificial intelligence services (currently OpenAI’s API) to classify documents, extract key fields, generate plain-language summaries, answer your questions, and retrieve market statistics for homes you save. The following commitments apply regardless of any provider’s own policies:

Document content is transmitted solely to generate the analysis you requested
If you use the market snapshot or home value scenarios features, the street address of a home you saved (and basic listing facts such as price, beds, and baths) is transmitted to the AI provider to retrieve market statistics for that area. This information is used only to generate those displays
Before document text is transmitted for AI processing, we apply automated redaction of sensitive identifiers (Social Security numbers, bank account numbers, routing numbers, payment card numbers, and wire-instruction details). One exception: scanned or image-based documents that cannot be read as text are transmitted as images for optical text extraction before redaction can occur; the extracted text is then redacted before all further processing and storage
We do not authorize or consent to the use of your document content for AI model training by any provider, and we select providers whose API terms exclude input data from model training
If a provider’s data handling becomes inconsistent with these commitments, we will migrate to an alternative provider or put data processing agreements in place that preserve them

5. How We Share Information

We do not sell, license, rent, or share your information with third parties for marketing, lead generation, advertising, or any commercial purpose unrelated to your direct use of the Service.

5.1 Sharing you control

Collaborator links — if you generate an upload link for a lender, inspector, title company, or other transaction party, that person can upload documents to your workspace and sees only what the link itself shows (such as the property address). Links expire and can be revoked by you
Your agent— if you connect your workspace with a real estate agent (for example by signing up through your agent’s invite link, or when your agent sets up a transaction with you), that agent can view and help manage your transaction workspace. Your private conversations with Homie are never visible to your agent

5.2 Service providers

We use a small number of infrastructure providers to operate the Service, each only to the extent needed to provide it: Supabase (database, authentication, and document storage), OpenAI (AI processing as described in Section 4), Vercel (application hosting), and Geoapify (address lookup and autocomplete).

5.3 Legal requirements

We may disclose information if required by law, subpoena, or court order, or where reasonably necessary to protect the rights, safety, or property of our users or the public.

6. Data Security

All data in transit is encrypted via TLS 1.2 or higher
Documents and data are encrypted at rest
Your workspace is isolated by per-transaction, row-level database security policies — other users cannot access your data
Sensitive identifiers are redacted from document-derived text before AI processing and storage (Section 4)

No method of transmission or storage is perfectly secure. If we learn of a breach affecting your information, we will notify you consistent with applicable law.

7. Data Retention and Deletion

We retain your information while your account is active so the Service can do its job. If you delete your account or request deletion, we delete your personal information — including uploaded documents and derived summaries — within 30 days, except where retention is required by law or for legitimate security purposes (such as fraud-prevention logs).

You may export your documents at any time before deletion.

8. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to know what categories of information we collect and share (we do not sell personal information, and we do not share it for cross-context behavioral advertising). California residents may exercise rights under the California Consumer Privacy Act.

To exercise any of these rights, contact us at the address in Section 11. We will verify your request using your account email and respond within the timeframe required by applicable law. We will not discriminate against you for exercising your rights.

9. Children's Privacy

The Service is intended for adults entering real estate transactions and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, contact us and we will delete it.

10. Changes to This Policy

We may update this policy as the Service evolves. If we make material changes, we will notify you by email or a prominent notice in the Service before the changes take effect. The “Last Updated” date at the top reflects the latest revision.

11. Contact Us

Questions or requests about this policy or your information: privacy@phazr.co