Privacy Policy

Last updated: June 13, 2026

1. Information We Collect

FriendRE collects information that you provide directly to us, information collected automatically, and information from third-party sources.

Information You Provide

  • Account information (name, email, username, profile picture)
  • Date of birth — collected once during onboarding to verify you meet the 18+ age requirement, then cleared after verification
  • Profile details (bio, location, professional credentials, license numbers, brokerage)
  • Professional verification materials (license/credential documents, MLS ID, and a verification selfie) — submitted by professionals seeking a verified badge, used solely to confirm professional status and retained no longer than 90 days after review
  • Posts, comments, and other content you create
  • Video URLs you share from supported platforms (YouTube, TikTok, Instagram, Facebook, X, LinkedIn) along with titles and descriptions
  • Messages and communications with other users
  • Files and attachments you upload
  • Property information submitted to the Home Value CMA tool (address, bedrooms, bathrooms, square footage, year built)
  • Mortgage calculator inputs (home price, down payment, interest rate, loan term)
  • CRM data (leads, client notes, appointments, testimonials) for professional users
  • Community group posts and Q&A contributions
  • Search alert criteria and saved searches
  • Contact form submissions when inquiring about listings
  • AI chat conversations with Jane, our AI assistant

Information Collected Automatically

  • Device information (browser type, operating system, device type)
  • Usage data (pages viewed, features used, engagement metrics)
  • Location data (when you browse location pages or use location-based features)
  • Video viewing activity and engagement data
  • Karma score, achievement progress, and leaderboard rankings
  • Referral link clicks and conversion tracking
  • Notification preferences and interaction data
  • IP address (used for rate limiting and security)
  • Push notification subscription tokens (if opted in)

2. How We Use Cookies

We use cookies and similar technologies for the following purposes:

Essential Cookies (Always Active)

These cookies are necessary for the website to function properly. They enable core functionality such as security, authentication, and session management. These cookies cannot be disabled.

  • Authentication cookies (Clerk session management)
  • Security cookies (CSRF protection)
  • Load balancing cookies

Analytics Cookies (Optional)

These cookies help us understand how visitors interact with our website by collecting and reporting information. Error tracking through Sentry helps us identify and fix issues.

Preference Cookies

These cookies allow the website to remember choices you make (such as dark mode preference, accessibility settings, and notification preferences) and provide enhanced, more personalized features.

When you set your cookie preferences, we log your consent choice along with a timestamp, IP address, and browser user-agent to maintain a compliance audit trail. You can change your preferences at any time (see Section 10).

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Enable user-to-user communication and connections
  • Process subscription payments and manage billing
  • Display embedded video content from third-party platforms
  • Power the Jane AI chat assistant with contextual responses
  • Provide Home Value CMAs and mortgage calculations (for informational purposes only — FriendRE is not a brokerage or appraisal firm)
  • Display neighborhood insights (housing and population statistics, nearby amenities)
  • Calculate and display karma scores, achievements, and leaderboard rankings
  • Track referral program participation and rewards
  • Deliver real-time notifications, search alerts, and weekly digest emails
  • Enable CRM functionality for professional users (lead management, appointments)
  • Send you technical notices, security alerts, and subscription-related communications
  • Moderate content and enforce community guidelines
  • Protect against fraud, abuse, and rate-limit violations
  • Comply with legal obligations

4. Information Sharing

We share your information in the following circumstances:

  • Public content: Posts, videos, comments, and profile information you choose to make public are visible to other users and guests
  • Lead submissions: When you submit a contact or lead form, your name, email, phone, and message may be shared with one or more matched local professionals — a real estate agent, and optionally a lender and/or attorney, selected by role and geographic proximity — and stored in their CRM
  • Leaderboards: Your name, karma score, and profile image may appear on public leaderboards
  • Service providers: We share data with third-party services that help us operate the Platform (see Section 6)
  • Legal requirements: We may disclose information when required by law or to protect our rights

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encrypted authentication managed by Clerk — we do not store passwords ourselves
  • Multi-factor authentication (TOTP + backup codes) available in account settings
  • CSRF (Cross-Site Request Forgery) protection on all state-changing operations
  • Rate limiting to prevent abuse (Redis-backed sliding window algorithm)
  • Secure file validation, magic-byte signature scanning, and sanitized filenames for uploads
  • Application-level encryption for sensitive location anchors (your home and saved-anchor coordinates)
  • TLS 1.2+ for all traffic, HSTS preload for HTTPS enforcement
  • Content Security Policy (CSP) headers in production
  • Payment processing handled entirely by Stripe — we never store your payment card details

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Data Breach Notification

In the event of a data breach that compromises the security of your personal information, we will notify affected users and any applicable regulatory authorities without undue delay and in accordance with applicable law — including timelines required by U.S. state breach-notification statutes and, for users in the EEA or UK, Articles 33 and 34 of the GDPR. Where we notify you, the notice will describe, to the extent known, the nature of the incident, the categories of information involved, and the steps we are taking in response and that you can take to protect yourself.

6. Third-Party Services

We use the following third-party services to enhance your experience. Each service may collect and process data according to their own privacy policies:

Clerk (Authentication)

Manages user authentication, sessions, and account security. Clerk processes your login credentials, email, and session tokens.

Stripe (Payment Processing)

Processes subscription payments for the Professional plan. Stripe handles all payment card data — we never store your card information on our servers. Subject to Stripe's Privacy Policy.

Google Maps Platform

Provides location-based features, maps, and places data. By using our location features, you agree to Google's Terms of Service and Privacy Policy.

OpenStreetMap / Nominatim

Provides geocoding, map tiles, and location search. Location queries (city names, addresses) are sent to Nominatim for resolution.

Google AI Studio (AI Services)

Powers the Jane AI chat assistant using Google's Gemini 2.0 Flash model, accessed via Google AI Studio. The text of your chat messages is sent to Google for inference and is processed subject to Google's Privacy Policy and applicable Gemini API / AI Studio terms. Do not share sensitive personal information in chat that you would not want processed by a third-party AI provider.

DigitalOcean (Infrastructure)

Hosts FriendRE's servers, managed PostgreSQL database, and Spaces object storage. Your account data, content, and uploaded files are stored on DigitalOcean infrastructure subject to their Privacy Policy.

Cloudflare (CDN & DNS)

Provides DNS resolution, TLS termination, DDoS protection, and content delivery for the FriendRE web app. All traffic flows through Cloudflare. Subject to Cloudflare's Privacy Policy.

Resend (Email)

Delivers transactional emails (account verification, security alerts, subscription receipts), weekly digest emails, trial warning notifications, and search alert emails. Your email address and name are shared with Resend for delivery.

Upstash Redis (Rate Limiting)

Provides distributed rate limiting to prevent abuse. Stores anonymized usage counters keyed by user ID or IP address. No personal content is stored.

MLS Grid / Midwest Real Estate Data LLC (MRED) (Listings)

Provides property listing data displayed on the Platform, sourced directly from MRED via the MLS Grid API. Your search queries and location preferences are processed locally against cached listing data.

Listing data collected and displayed: Property address, listing price, number of bedrooms and bathrooms, square footage, property type, listing status, listing date, property photos, lot size, year built, listing broker name, listing office name, listing agent name, and geographic coordinates.

Data retention: Active listings are kept fresh by a recurring sync; an active listing that goes stale (no update for roughly 7 days) is automatically purged. Closed and sold listings are retained longer — up to approximately 5 years — to power the Home Value comparable-sales engine and the property-history timeline, with listing photos and expired media removed once a listing closes. We do not retain broker-only or agent-only data.

IDX license:Listing information is displayed under an Internet Data Exchange (IDX) license and is subject to MRED terms and conditions. This data is provided for consumers' personal, non-commercial use and may not be used for any purpose other than to identify prospective properties of interest.

Sentry (Error Monitoring)

Monitors application errors and performance. May collect technical data such as browser information, error stack traces, and page URLs. Sentry is only active when configured and uses a monitoring tunnel to enhance privacy.

LiveKit Cloud (Video/Audio Calling)

Provides real-time video and audio calling functionality via WebRTC. Call sessions are routed through LiveKit's servers for reliable connectivity. We store call session metadata (caller, recipient, duration, status) but do not record or store call audio or video content.

U.S. Census Bureau

Provides housing and population statistics (such as population, housing units, and predominant housing type) displayed on location pages. To support Fair Housing compliance, we do not display demographic proxies (e.g., income, age, race). This is publicly available government data and does not involve any personal information.

7. AI-Generated Content and Data

FriendRE uses AI technology in the following ways:

  • Jane AI Assistant: Your chat messages are sent to our AI provider (Google's Gemini 2.0 Flash, via Google AI Studio) to generate responses, and are processed subject to Google's data-use terms for that service. We retain a 60-day forensic log of interactions on our own systems for safety and abuse review; older logs are purged automatically.
  • AI-generated content (chat responses) may contain inaccuracies. We make no guarantees of accuracy for AI-generated outputs.

8. Nature of Services Disclaimer

FriendRE is a social networking platform that connects users with real estate professionals and provides informational tools. We want to be clear about what we are and what we are not:

  • FriendRE is not a real estate brokerage, appraisal firm, mortgage lender, or any other licensed real estate entity
  • We do not operate as, represent ourselves as, or hold any license as a brokerage
  • We do not facilitate, negotiate, broker, or participate in real estate transactions
  • Our Home Value CMA tool generates a Comparative Market Analysis (CMA) from property details you provide and recent comparable sold listings, for informational purposes only — it does not constitute a professional appraisal or broker price opinion
  • Real estate professionals on our platform operate independently under their own licenses, brokerages, and regulatory obligations
  • Any data collected through our CMA and mortgage tools is used solely for generating estimates and improving our informational services — it is not used for brokerage, lending, or appraisal activities

9. Your Rights

Depending on your location, you may have the following rights:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your information
  • Object to processing of your information
  • Request restriction of processing
  • Data portability
  • Withdraw consent at any time
  • Opt out of marketing communications and weekly digest emails
  • Disable push notifications via browser or account settings
  • Control profile visibility through privacy settings (show/hide email, bio, location, professional info)

10. Your Privacy Choices (California & US State Privacy Rights)

If you are a California resident or a resident of another US state with applicable privacy laws, you have specific rights regarding your personal information:

  • Right to Know: You can request details about the categories and specific pieces of personal information we have collected about you.
  • Right to Delete: You can request that we delete your personal information, subject to certain exceptions. You can delete your account at Settings > Security > Danger Zone.
  • Right to Opt-Out of Sale/Sharing: FriendRE does not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.
  • Right to Correct: You can correct inaccurate personal information through your profile settings.

Cookie Preferences: You can manage your cookie preferences at any time.

To exercise any of these rights, contact us at [email protected] or use the account deletion feature in your security settings. We will respond to verifiable requests within 45 days.

11. International Data Transfers

FriendRE is operated from the United States. Our infrastructure (DigitalOcean Droplets, Managed PostgreSQL, and Spaces object storage) is located in the United States. When you use FriendRE from outside the United States — including from the European Economic Area (EEA), the United Kingdom, or Switzerland — your personal data is transferred to and processed in the United States, where data protection laws may differ from those in your country.

Where required by applicable law (including the GDPR for EEA users and the UK GDPR for UK users), we rely on Standard Contractual Clauses (SCCs)with our sub-processors to provide an adequate level of protection for international data transfers. The sub-processors listed in Section 6 maintain published Data Processing Agreements that incorporate the European Commission's SCCs and equivalent UK addendums.

If you are in the EEA, UK, or Switzerland and would like a copy of the safeguards we have in place for cross-border transfers, or to exercise your rights under the GDPR (including the right to access, rectify, erase, restrict processing, object to processing, or port your data), please contact us at [email protected]. We will respond within 30 days as required by Article 12(3) of the GDPR. Where reasonably possible we will provide an initial acknowledgement within 72 hours.

You also have the right to lodge a complaint with the supervisory authority in your member state if you believe we have not complied with applicable data protection law.

12. Data Retention

We retain your information for as long as your account is active or as needed to provide you services:

  • Account data is retained until you delete your account
  • Posts, videos, and comments are retained until you or our moderation team removes them
  • CRM data (leads, appointments, notes) is retained until the professional user deletes them or their account
  • Subscription and billing records are retained as required by financial regulations
  • Rate limiting data is automatically purged every 60 seconds (in-memory) or per configured TTL (Redis)
  • Account deletion permanently removes all your data including posts, comments, messages, CRM data, karma history, and achievements

13. Children's Privacy

FriendRE is not intended for users under 18 years of age. We do not knowingly collect information from children under 18. If we learn that we have collected personal information from a child under 18, we will promptly delete that information.

14. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page, updating the "Last updated" date, and sending a notification via email or in-app alert.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us through the Platform's support system or by visiting our help center.

For data-subject access requests (GDPR / UK GDPR / CCPA), email [email protected]. For security vulnerability disclosure, email [email protected].

By using FriendRE, you agree to this Privacy Policy and our Terms of Service.