Skip to content

Effective Date: May 25, 2026 | Last Updated: May 25, 2026

Privacy Policy

Brittani AI ("we," "us," or "our") operates a transaction coordination platform for real estate professionals. This Privacy Policy describes how we collect, use, store, share, and protect your information when you use our application at app.brittani.ai (the "Service").

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

  • Name, email address, and organization/brokerage name
  • Real estate license number and state
  • Phone number (if you enable SMS notifications)
  • Authentication credentials managed by our identity provider (Clerk)

1.2 Transaction Data

When you use the Service to manage real estate transactions, we collect:

  • Property addresses, purchase prices, and contract terms
  • Transaction party information (names, emails, phone numbers of buyers, sellers, agents, lenders, and title company contacts)
  • Uploaded contract documents (PDFs)
  • Deadline and milestone information

1.3 Google User Data

If you connect your Gmail account, we access data through the Gmail API as described in detail in Section 4 below.

1.4 SMS/Text Message Data

If you enable SMS notifications, we collect your phone number and process message content as described in Section 5 below.

1.5 Usage Data

We collect standard server logs including IP addresses, browser type, and pages visited. We do not use third-party analytics or tracking services.

1.6 Cookies

We use only essential cookies required for authentication and security:

  • Session cookies (managed by Clerk) for maintaining your authenticated session
  • OAuth state cookies (temporary, 10-minute TTL) for securing the Gmail connection flow

We do not use advertising cookies, tracking cookies, or third-party analytics cookies.

2. How We Use Your Information

We use your information solely to provide and improve the Service's user-facing features:

  • Transaction coordination — managing deal timelines, deadlines, and communications
  • Email processing — reading, classifying, and drafting emails related to your transactions
  • AI-powered assistance — contract analysis, email drafting, and the Brittani chat assistant
  • Notifications — alerting you to deal updates via SMS or email
  • Account management — authentication, billing, and workspace administration

We do NOT use your information for:

  • Advertising, retargeting, or interest-based marketing
  • Selling or renting data to third parties
  • Credit-worthiness determinations or lending decisions
  • Training generalized AI or machine learning models
  • Profiling or surveillance

3. Artificial Intelligence Processing

The Service uses AI (AWS Bedrock, powered by Anthropic Claude) to provide core features including contract analysis, email classification, email drafting, and conversational assistance.

3.1 What Data AI Processes

  • Contract documents you upload (for extraction of terms, dates, and parties)
  • Email content related to your transactions (for classification and response drafting)
  • Conversation messages you send to the Brittani assistant
  • Deal context (property address, parties, deadlines) for contextual responses

3.2 AI Model Training

Your data is never used to train AI models. Per AWS Bedrock's service terms, customer data is not used to train, improve, or develop foundation models. AI providers do not retain your data after processing your request.

3.3 AI-Generated Content

Email drafts and analysis results generated by AI are stored as part of your transaction records. AI-generated content is always presented for your review before any action is taken (e.g., emails require your approval before sending).

4. Google User Data

Brittani AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4.1 Scopes and Access

When you connect your Gmail account, we request the following permissions:

  • gmail.send — Send emails on your behalf to transaction parties
  • gmail.readonly — Read incoming emails to classify and match them to your deals
  • gmail.modify — Register for real-time email notifications (Gmail watch/push)

4.2 What Google Data We Store

  • OAuth tokens — Encrypted refresh tokens stored in AWS Secrets Manager (not in our database)
  • Email metadata — Subject lines, sender/recipient addresses, Gmail thread IDs, timestamps
  • Email content — Body text of emails matched to your active transactions (for AI classification and deal tracking)
  • AI-generated summaries — Classifications and summaries of transaction-related emails

4.3 What We Do NOT Store

  • Emails unrelated to your active transactions (read but not persisted)
  • Email attachments from Gmail (not downloaded or stored)
  • Contact lists, calendar data, or other Google Workspace data

4.4 Limited Use Compliance

Our use of Google user data is limited exclusively to providing the transaction coordination features described above. Specifically:

  • We only use Google data to provide and improve user-facing features that are prominent in the application's interface.
  • We do not transfer Google data to third parties except as necessary to provide the Service (AI processing for email classification), for security purposes, or to comply with applicable law.
  • We do not use Google data for serving advertisements, including retargeting, personalized advertising, or interest-based advertising.
  • We do not allow humans to read your Google data unless: (a) you provide affirmative consent to view specific messages, (b) it is necessary for security purposes such as investigating abuse, (c) it is necessary to comply with applicable law, or (d) the data is aggregated and anonymized for internal operations.

4.5 Revoking Google Access

You can disconnect your Gmail account at any time from your Settings page. When you disconnect:

  • Your OAuth tokens are permanently deleted from AWS Secrets Manager
  • We stop receiving email notifications for your account
  • Previously stored email records associated with your deals are retained for transaction history purposes until the deal is deleted

You can also revoke access from Google's security settings at myaccount.google.com/permissions.

5. SMS/Text Messaging

5.1 Consent

SMS notifications are optional and require your explicit opt-in. When you verify your phone number and enable SMS, you consent to receive transaction-related text messages from Brittani AI.

5.2 Message Content

We send SMS messages related to:

  • Deal updates and status changes
  • Deadline reminders
  • Responses to your Brittani assistant conversations via text

Message frequency varies based on your deal activity. Message and data rates may apply.

5.3 Opt-Out

You can opt out of SMS at any time by:

  • Replying STOP to any message
  • Disabling SMS in your account Settings

After opting out, you will receive one confirmation message and no further texts.

5.4 Non-Sharing

We will not share, sell, or rent your mobile phone number to third parties for marketing or promotional purposes.

5.5 SMS Service Provider

SMS messages are delivered through Twilio, a third-party communications platform. Twilio processes your phone number and message content solely for the purpose of message delivery in accordance with Twilio's Privacy Notice.

6. Data Sharing and Third-Party Services

We share your data only with the following service providers, solely to operate the Service:

  • AWS (Amazon Web Services) — Cloud infrastructure, AI processing, document storage, secret management
  • MongoDB Atlas — Database hosting
  • Clerk — Authentication and identity management
  • Stripe — Payment processing
  • Twilio — SMS message delivery
  • Google (Gmail API) — Email read/send operations on your behalf
  • Google (Maps/Places API) — Address autocomplete (client-side only)

We do NOT sell, rent, or trade your personal information to data brokers, advertisers, or information resellers.

6.1 Legal Disclosures

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, safety, or property of Brittani AI, our users, or the public.

6.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. We will provide notice and obtain your consent before Google user data is transferred in such circumstances.

7. Data Security

We implement industry-standard security measures to protect your data:

  • Encryption in transit — All data transmitted via TLS 1.2+ (HTTPS)
  • Encryption at rest — Database encryption (MongoDB Atlas AES-256), secret encryption (AWS KMS), document storage encryption (S3 server-side encryption)
  • Access controls — Multi-tenant isolation ensuring workspace data is never accessible across organizations; role-based access within workspaces
  • Token security — Gmail OAuth tokens stored in AWS Secrets Manager with IAM-scoped access, never in the application database
  • Authentication — Managed by Clerk with support for multi-factor authentication
  • Security headers — Content Security Policy, HSTS, and additional HTTP security headers on all responses
  • Security assessments — Annual third-party security assessment per Google's CASA program requirements

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Data Retention

  • Active deal data and emails — Retained while the deal is active or closed
  • Deleted deal data — 30 days after deletion, then permanently purged (including S3 documents and email records)
  • Chat conversation messages — 30 days after session closes, then messages are cleared (summary and metadata retained)
  • Gmail OAuth tokens — Until you disconnect Gmail (then immediately and permanently deleted)
  • Account data — Until account deletion
  • Audit logs — Retained for legal compliance and dispute resolution purposes
  • SMS message records — Retained while your account is active; deleted within 30 days of account deletion

9. Your Rights and Choices

9.1 Access and Export

You can access your transaction data, email records, and account information through the Service at any time. To request a complete export of your data, contact us at privacy@brittani.ai.

9.2 Deletion

You can:

  • Delete individual deals (purged after 30 days including all associated documents and emails)
  • Disconnect Gmail (tokens immediately deleted)
  • Disable SMS (notifications stop immediately)
  • Request full account deletion by contacting privacy@brittani.ai

We will process deletion requests within 30 days. Some data may be retained as required by law or for legitimate business purposes (fraud prevention, legal disputes).

9.3 Correction

You can update your account information, deal details, and party information directly through the Service at any time.

9.4 Withdraw Consent

You can withdraw consent for optional data processing (Gmail access, SMS) at any time through your Settings without affecting your ability to use other features of the Service.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know — Request what personal information we collect, use, disclose, and sell
  • Delete — Request deletion of your personal information
  • Opt-out — We do not sell or share personal information for cross-context behavioral advertising
  • Non-discrimination — We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact privacy@brittani.ai. We will respond within 45 days.

11. International Users

The Service is hosted in the United States (AWS us-east-1 region). If you access the Service from outside the US, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

12. Third-Party Transaction Participants

Real estate agents using the Service may enter contact information for transaction parties (buyers, sellers, lenders, title companies, other agents). This information is:

  • Used solely for transaction coordination purposes
  • Stored with the same security protections as all other data
  • Deleted when the associated deal is purged
  • Not used for marketing or solicitation by Brittani AI

If you are a transaction participant and wish to have your information removed, contact privacy@brittani.ai.

13. Children's Privacy

The Service is not directed at children under 13 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided personal information, we will promptly delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a new effective date and, where appropriate, notifying you via email or in-app notification.

Your continued use of the Service after changes take effect constitutes acceptance of the revised policy. We will not make retroactive changes that reduce protections for previously collected Google user data without obtaining your consent.

15. Contact Us

For privacy-related questions, data requests, or concerns:

Brittani AI
Email: privacy@brittani.ai
Website: brittani.ai

We will respond to all privacy inquiries within 30 days.