Privacy Policy

1. Who We Are

AgentScribe ("AgentScribe," "we," "us," or "our") operates the AI content platform at agentscribe.net and provides an AI-powered content generation platform for real estate agents.

We are the data controller for the personal information we collect through this website and through the delivery of our services. For questions about this policy or to exercise your rights, contact us at hello@agentscribe.net.

2. What Information We Collect

2.1 Information You Provide Directly

• Contact and account information. When you fill out our contact form, book a call, or start a subscription, we collect your name, email address, phone number (if provided), business name, and market/location details.
• Payment information. When card payments are enabled, billing address and payment card details are collected and processed by Stripe, our PCI-DSS-compliant payment processor. We never store full card numbers on our servers — all card data is tokenised and held by Stripe under their own Privacy Policy. (Where checkout is running in demo mode, no card data is captured or charged.)
• Content and brand materials. Information you share during onboarding, including details about your real estate market, brand preferences, target clients, and any assets you provide for content production.
• Newsletter and free resource signups. Your email address when you subscribe to our weekly content tips or download a free resource.
• Communications. Records of emails, messages, and other correspondence you send to us.

2.2 Information Collected Automatically

• Analytics data. We use Cloudflare Web Analytics, a privacy-first analytics tool that does not use cookies and does not collect personally identifiable information. It records aggregate page view data, referring URLs, browser type, and device type. Where enabled, we also use Google Analytics 4 to measure aggregate traffic and on-site events; it sets first-party analytics cookies and processes data as described in Sections 5 and 6.
• Server logs. Standard server logs may record your IP address, the pages you visit, the time and date of your visit, and your browser type. These logs are used for security and operational purposes and are not linked to your identity.

2.3 Information from Third Parties

If you book a call through our Cal.com scheduling link, Cal.com collects your name and email address on their platform. Their use of that data is governed by Cal.com's Privacy Policy. We receive the meeting details from Cal.com to manage our scheduling.

3. How We Use Your Information

We use the information we collect for the following purposes:

• →To deliver our Services. Researching your market, producing content deliverables, managing your subscription, and communicating about your account.
• →To process payments. Billing you for your subscription, handling payment failures, and issuing refunds where applicable under our Refund Policy.
• →To send transactional communications. Subscription confirmations, billing receipts, content delivery notifications, and service-related announcements. These are not optional while your subscription is active.
• →To send marketing communications. Our weekly content tips newsletter and promotional emails — only where you have opted in. You may unsubscribe at any time.
• →To improve our Services. Analysing aggregate usage patterns to understand how clients engage with our content and platform.
• →To comply with legal obligations. Retaining records as required by applicable tax, accounting, and data protection laws.
• →To protect our business and users. Detecting fraud, resolving disputes, and enforcing our Terms and Conditions.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases:

• Contract performance. Processing necessary to deliver the Services you have subscribed to, including billing and content production.
• Legitimate interests. Improving our Services, preventing fraud, managing our business operations, and sending transactional communications — where our interests do not override your fundamental rights.
• Consent. Sending marketing emails and newsletters — you may withdraw consent at any time by unsubscribing.
• Legal obligation. Retaining records as required by law (e.g. tax and accounting records).

5. How We Share Your Information

We do not sell your personal information. We do not share it with third parties for their own marketing purposes. We share your data only in the following limited circumstances:

5.1 Service Providers

We share data with trusted third-party vendors who process it on our behalf and are bound by data processing agreements:

• —Form processing (FormSubmit): to receive and deliver submissions from our contact, newsletter, and regional lead-capture forms (name, email, and any details you provide)
• —Payment processing (Stripe): to issue and process subscription invoices and card payments securely
• —Email delivery (Brevo): to send transactional and newsletter communications you have requested
• —Scheduling (Cal.com): to manage consultation bookings
• —Analytics (Cloudflare Web Analytics and, where enabled, Google Analytics 4): to measure aggregate site traffic and performance
• —Website hosting (Cloudflare Pages): to serve this marketing website securely
• —Application hosting & database (Railway): to run the client dashboard and store account and content records securely

5.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or government authority, or where necessary to protect the rights, property, or safety of AgentScribe, our clients, or the public.

5.3 Sale or Transfer of the Business

AgentScribe operates as a transferable digital business. In the event of a merger, acquisition, financing, reorganisation, or a sale of AgentScribe's business, website, or assets — including a sale conducted through an online business marketplace such as Flippa — the personal information described in this Policy may be transferred to the acquiring party as part of that transaction, so that the Services can continue without interruption for existing clients and subscribers.

Any acquiring party will be required to honour the commitments in this Privacy Policy, or to give affected users notice of, and where required by law consent to, any materially different privacy practices before those practices take effect. Following a completed transfer, the acquiring party becomes the data controller for your personal information and your continued use of the Services is governed by their published privacy policy. We will take reasonable steps to notify active subscribers by email before their data becomes subject to a materially different policy.

6. Cookies and Tracking

AgentScribe's website does not use advertising cookies or sell data to advertisers. Our default analytics, Cloudflare Web Analytics, is cookieless and privacy-preserving by design — it does not track individual users across websites, generates no personal profiles, and needs no cookie consent banner.

Where Google Analytics 4 is enabled, it sets first-party analytics cookies to measure aggregate traffic and on-site events. We configure it with IP anonymisation and do not use it for advertising. Visitors in the EEA and UK are served a cookie-consent mechanism before non-essential analytics cookies are set, as required by law; you can also block or delete cookies in your browser settings at any time.

Some functionality (such as the embedded Cal.com scheduling widget) may set cookies governed by their own providers' policies. We recommend reviewing Cal.com's cookie policy if this is a concern.

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following:

• Active subscribers. Data is retained for the duration of your subscription and for a reasonable period afterward to handle any disputes, refund requests, or legal claims.
• Billing and financial records. Retained for a minimum of 7 years as required by applicable tax law.
• Email newsletter subscribers. Retained until you unsubscribe or request deletion.
• Enquiries and contact form submissions. Retained for up to 2 years unless a subscription results from the enquiry.

When data is no longer required, we delete or anonymise it securely.

8. Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, disclosure, alteration, and destruction. These include:

• ✓HTTPS encryption across all pages of this website
• ✓Payment data tokenisation via PCI-compliant payment processors
• ✓Access controls limiting who within our team can access client data
• ✓Cloudflare DDoS protection and security infrastructure

No method of transmission over the internet is 100% secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security and accept no liability for breaches outside our reasonable control.

9. International Data Transfers

AgentScribe operates primarily from the United States. If you access our Services from outside the US, your information may be transferred to, stored in, and processed in the United States or other countries where our service providers operate.

For users in the EEA or UK, where we transfer data to countries not deemed adequate by the relevant supervisory authority, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms.

10. Your Rights

10.1 All Users

Regardless of your location, you have the right to:

• ✓Unsubscribe from marketing emails at any time using the link in each email
• ✓Request a copy of the personal data we hold about you
• ✓Ask us to correct inaccurate or incomplete data
• ✓Ask us to delete your personal data, subject to legal retention requirements

10.2 EEA and UK Residents (GDPR / UK GDPR)

In addition to the above, you have the right to:

• ✓Restrict our processing of your data in certain circumstances
• ✓Object to processing based on our legitimate interests
• ✓Request portability of your data in a machine-readable format
• ✓Lodge a complaint with your local data protection supervisory authority

10.3 California Residents (CCPA / CPRA)

California residents have the right to:

• ✓Know what personal information we collect, use, disclose, or sell
• ✓Request deletion of your personal information
• ✓Opt out of the sale or sharing of personal information — we do not sell or share your data for advertising purposes
• ✓Non-discrimination: we will not deny you Services or charge different prices for exercising your privacy rights

To exercise any of these rights, contact us at hello@agentscribe.net. We will respond within 30 days (or as required by applicable law).

10.4 Canadian Residents (PIPEDA)

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to access the personal information we hold about you, request corrections, and withdraw consent to its collection, use, or disclosure (subject to legal or contractual restrictions). We collect and use personal information only for the purposes identified in this Policy and with your consent. To make a request, contact us at hello@agentscribe.net.

10.5 Australian Residents (Privacy Act 1988)

Under the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs), you may request access to and correction of the personal information we hold about you, and you may complain about how we handle your personal information. We collect personal information only by lawful and fair means and use it only for the purposes for which it was collected or a related purpose you would reasonably expect. Contact us at hello@agentscribe.net; unresolved complaints may be referred to the Office of the Australian Information Commissioner (OAIC).

10.6 New Zealand Residents (Privacy Act 2020)

Under New Zealand's Privacy Act 2020 and its Information Privacy Principles, you have the right to access and request correction of the personal information we hold about you. We collect personal information for lawful purposes connected with our Services and take reasonable steps to keep it accurate and secure. Contact us at hello@agentscribe.net; unresolved concerns may be raised with the Office of the Privacy Commissioner.

11. Children's Privacy

Our Services are directed exclusively at business professionals aged 18 and over. We do not knowingly collect personal information from anyone under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at hello@agentscribe.net and we will delete it promptly.

12. Third-Party Links

Our website contains links to third-party websites (including social media platforms, Cal.com, and Google Business Profile). Once you leave our site, this Privacy Policy no longer applies. We are not responsible for the privacy practices of third-party sites and encourage you to review their policies before submitting personal data.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify active subscribers of material changes by email at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

Continued use of our Services after the effective date of any changes constitutes your acceptance of the revised Policy.

14. Related Policies

This Privacy Policy should be read alongside our:

• —Terms and Conditions
• —Refund Policy

15. Contact and Data Requests

For any questions, concerns, or data subject requests relating to this Privacy Policy:

We aim to respond to all privacy-related enquiries within 5 business days and to all formal data subject requests within 30 days (or the timeframe required by your local law, whichever is shorter).