Privacy Policy

Throughline (“Throughline,” “we,” “us,” or “our”) provides software for real estate professionals to prepare market analyses, offers, and transaction documents, and to communicate with clients. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. Throughline is operated by Keystone Equities Inc.

By using Throughline, you agree to this Privacy Policy. If you do not agree, do not use the service.

Information we collect

We collect the following categories of information:

• Account information. Name, email address, brokerage, license details, and authentication data when you create an account or sign in. Sign-in is handled by our authentication provider.
• Transaction and listing data. Property details, comparable sales, valuations, offers, counteroffers, contract terms, dates, and related documents you create or upload.
• Contact and client data. Names, email addresses, phone numbers, and other details of clients and transaction parties you add to the service.
• Communications. The content and metadata of messages, emails, and texts you send or receive through the service, including call recordings and transcripts where you enable that feature.
• Connected-account data. When you connect a third-party account (such as email, MLS, or a transaction-management platform), we access data from that account as needed to provide the features you use.
• Payment information. Billing details are processed by our payment provider; we do not store full card numbers.
• Usage and device data. Log data, IP address, browser type, and actions taken in the service, used to operate and improve the product.

How we use information

• To provide, maintain, and improve the service and its features.
• To generate market analyses, valuations, offers, documents, and communications at your direction.
• To sync data between Throughline and the third-party accounts you connect, at your direction.
• To process payments and manage your subscription.
• To respond to support requests and send service-related notices.
• To detect, prevent, and address security issues, fraud, or abuse.
• To comply with legal obligations.

We do not sell your personal information. We do not use the contents of your transactions, communications, or client data to train third-party advertising models.

How we share information

We share information only as needed to operate the service and at your direction:

• Service providers who host our infrastructure, store data, send email and messages, process payments, and provide authentication, under contracts that limit their use of the data to providing those services.
• Connected platforms you authorize, such as your email provider, MLS, or transaction-management platform, to and from which we read or write data you ask us to.
• AI processing providers that help generate analyses, documents, and drafts. Data sent for processing is used only to return results to you and is not used to train their models where their terms allow us to opt out.
• Legal and safety recipients when required by law or to protect rights, safety, or the integrity of the service.
• Business transfers in connection with a merger, acquisition, or sale of assets, subject to this Policy.

Connected accounts and third-party platforms

When you connect a third-party account, you grant Throughline permission to access that account on your behalf to provide the features you use. We access only the data needed for those features, and you can disconnect a connected account at any time, which revokes our future access. Your use of a connected platform remains subject to that platform’s own terms and privacy policy.

Communications and recordings

Throughline can send and receive emails and text messages and, where you enable it, record and transcribe calls. You are responsible for obtaining any consent required by law in your jurisdiction before recording a call or messaging a client, including all-party consent where applicable. We process this content to provide messaging, summaries, and related features at your direction.

Data retention

We retain your information for as long as your account is active or as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data as described below. Some information may persist in backups for a limited period after deletion.

Security

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your choices and rights

Depending on your location, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can update much of your information in the app, and you can request access or deletion by contacting us. We will respond consistent with applicable law.

Data of clients and third parties

When you add information about clients or other transaction parties, you represent that you have the right to provide that information and to use Throughline to communicate with them. You are the controller of that data; Throughline processes it on your behalf to provide the service.

Children’s privacy

Throughline is not directed to children under 18 and we do not knowingly collect their personal information.

Google user data

If you connect a Google account, Throughline requests access to Gmail with the following scopes: read-only access (gmail.readonly) to receive real-estate documents your team already gets by email, such as showing reports and offer packets, and send access (gmail.send) to send messages you compose and approve inside Throughline from your own address. Throughline's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically: we only read messages matching narrow, sender-specific queries needed for the features you enable; we store extracted document data (for example, showing report PDFs) in your team's workspace; we do not use Google user data for advertising; we do not sell Google user data; we do not allow humans to read your messages except with your explicit permission, for security purposes, or to comply with law; and we do not use Google user data to train generalized artificial intelligence or machine learning models. OAuth tokens are encrypted at rest. You can disconnect Google access at any time in Settings or via your Google account permissions, which revokes our access; on disconnection or account deletion we delete stored Google tokens.

Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the date above and, for material changes, provide additional notice. Your continued use of the service after changes take effect constitutes acceptance.

Contact us

Questions about this Policy or your data? Contact us at jim@jimrossrealtor.com.