Privacy Policy

• We collect what we need to run our websites and Workspace. When you visit our own website, we use Meta’s pixel to show you our ads on Facebook and Instagram, and you can turn that off.
• You own the data you put into Workspace and the leads your website collects. We handle it for you.
• We never sell your data, or the data of the people in your CRM.
• You can see, export, correct or delete your data. Email privacy@brokerandagent.com.

Broker & Agent Solutions is operated by Embark Companies LLC (“we”, “us”). This policy covers brokerandagent.com, your Broker & Agent account, the websites we build and host for our clients, and Workspace.

When you’re our customer, we’re responsible for your account information. The contacts, messages and documents you put into Workspace, and the leads your website collects, are yours: we handle them on your behalf, to provide the services.

What you give us. Your name, email address and phone number, your business details, what you send us through forms and support (including the site address you send for a free preview), and the content you put into your website and Workspace.

What your clients and visitors give you. When someone fills in a form or chats with the assistant on a website we host, or sends their details through one of our calculators or the assistant on another website, we collect what they enter, the page they were on, and whether they agreed to be contacted, and deliver it to the website’s owner.

Our free tools. The calculators run in your browser. Nothing you type is sent to us unless you send your details on a calculator’s form; then a random ID is saved in your browser so the request stays connected to that visit. A copied link carries your numbers in the link itself, not on our servers.

Surveys and feedback. When you answer one of our surveys or rate a page, we collect your answers, and your email address only if you give it. We publish survey results as totals, never your individual answers.

What we collect as you use the services. Sign-in details, device and browser information, and logs of activity, which we use to run, secure and improve the services.

Payments. Card details go straight to Stripe. We never see or store your card number.

On brokerandagent.com we use Plausible Analytics and Cloudflare Web Analytics to count visits, and Plausible on the free preview too. Both are cookieless: they set nothing on your device and don’t identify you.

Google Analytics and Google Ads. On brokerandagent.com and the free preview we also use Google Analytics, to see how people find and use our site, and Google Ads, to measure which of our ads lead to someone asking for a preview. Google’s tag sets cookies to tell visits apart and to connect a click on one of our ads to what happened after it. We keep the ad click ID and campaign that brought you, and the first page of your visit, in our own cookies for up to 90 days, so a preview request records where it came from. When you send a preview request, your email address and phone number go to Google in hashed (scrambled) form, so Google can match the request to an ad click. We’ve turned off Google signals and ad personalization, and Google processes this only to measure our ads, not to build advertising profiles of our visitors. Google’s tags don’t load if your browser sends a Global Privacy Control signal or is set to a European time zone. You can also opt out of Google Analytics with Google’s browser add-on.

Meta (Facebook and Instagram) ads. On brokerandagent.com and the free preview we use the Meta Pixel, so we can show our ads on Facebook and Instagram to people who have visited our site, and see which of those ads lead to someone asking for a preview or sending us a message about our products. It tells Meta the pages you visit. When you send a preview request or such a message, our server also tells Meta that one was sent, with your email address, phone number and name in hashed (scrambled) form, your IP address and browser, and a reference number, so Meta can match the request to an ad you saw; never your message or anything else you wrote. Meta sets a cookie on our site (up to 90 days), we keep the Facebook or Instagram ad click that brought you in one of our own for as long, and Meta can connect your visits to your Facebook or Instagram account to show you our ads, under the Meta Privacy Policy. The pixel doesn’t load if your browser sends a Global Privacy Control signal or is set to a European time zone, or if you’ve turned it off (see Your choices). You can also control ads based on activity from other sites in your Meta ad preferences.

Recordings of visits to brokerandagent.com and the free preview. To see where our pages confuse people or break, we record how a visit uses them: the pages you view, where you scroll and click, the page as it looked, the kind of device and browser you used (such as “Safari on an iPhone”), how you arrived (the site that sent you, the page you landed on, and whether you came from one of our ads, with its campaign), and roughly where you are: the city and state and the name of your internet provider, which Cloudflare works out from your IP address. We keep the IP address with the recording, to tell people from bots and to spot abuse. When you send us a form, we note the same rough location with your message. Anything you type into a form or the chat is hidden in your browser before it’s sent, so it’s never in the recording. The pages of one visit are linked by a code made from your IP address and browser that changes every day and can’t be turned back into either. When we’ve turned on recognizing returning visitors, we also set one cookie of our own, a random ID that connects your visits to brokerandagent.com to each other. It lasts a year from your last visit, only our own site can read it, and it isn’t shared with Google or anyone else. If you send us a form the same day from the same browser, we may connect the recording of that visit, and your earlier visits, to your message. Recordings and their IP addresses are kept for 30 days, on Cloudflare, and only our team can watch them. If your browser sends a Global Privacy Control signal, or you’re in the European Union, the UK or Switzerland, we don’t record your visit or set that cookie.

Microsoft Clarity. On brokerandagent.com and the free preview we also use Microsoft Clarity, which records visits in the same way and turns them into heatmaps, so we can see which parts of a page people use and where they get stuck. It sees the pages you view, where you scroll and click, the page as it looked, and the kind of device and browser you used. Anything you type into a form, everything in the chat, and the answers and photos you give the free preview are hidden in your browser before they’re sent. Clarity sets two cookies on our site, one to recognize your browser when you come back (up to a year) and one to join the pages of a visit (a day), and Microsoft sets one on clarity.ms that Clarity uses to recognize a browser across the sites that use it. We’ve turned off Clarity’s advertising storage, and our site blocks its sync with Microsoft’s advertising cookie. Microsoft keeps Clarity’s recordings for 30 days and handles this data under the Microsoft Privacy Statement. Clarity doesn’t load if your browser sends a Global Privacy Control signal or is set to a European time zone, and you can opt out of it on the Digital Advertising Alliance’s opt-out page by choosing Microsoft.

Your account, Workspace and Site Manager use the cookies they need to keep you signed in. Our typeface, photographs and video are served from our own domain.

Plausible and Cloudflare treat every visit the same way whether or not your browser sends a Do Not Track or Global Privacy Control signal, since they don’t track you across sites. With Global Privacy Control, Google’s tags, Microsoft Clarity and the Meta Pixel don’t load at all.

• To provide the services: build and host your website, run Workspace, deliver your leads and messages.
• To keep the services secure and working, and to fix problems.
• To bill you, and to send you account, security and service messages.
• To answer you when you contact us, and to build the free preview you ask for.
• To improve the services, using what we learn about how they’re used.

We don’t use your data, or your clients’ data, to target ads.

If you connect your Google or Microsoft account, we access only what the feature you turned on needs, and only while it stays connected. You can disconnect at any time in Settings, which removes our access.

• Email (Gmail and Outlook): so your client emails appear in Workspace and you can read, reply and send from there. Google scope: gmail.modify. Microsoft scopes: Mail.ReadWrite and Mail.Send.
• Calendar (Google Calendar and Outlook Calendar): so appointments you make in Workspace appear on your calendar, and your Google Calendar events show in Workspace. We only create and change events made through Workspace. Google scope: calendar.events. Microsoft scope: Calendars.ReadWrite.
• Google Search Console: if you connect it to your website, so your site’s searches and clicks show in Site Manager. Read only. Google scope: webmasters.readonly.

Your messages and events are shown to you, and to teammates who can see the contact under your team’s sharing settings. The access tokens are encrypted. Nobody at Broker & Agent reads your mail or calendar except with your permission, where it’s needed for security, or to comply with the law.

Broker & Agent Solutions’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use Google user data only to provide and improve the features you connected it for. We don’t transfer it except as needed to provide or improve those features, to comply with the law, or in a merger or acquisition. We don’t use it for advertising, and we don’t let people read it except with your consent, for security, to comply with the law, or once it’s aggregated and anonymized.

Some features use AI, provided through OpenAI’s API, to draft, summarize and answer. We send only what the task needs, with storage turned off, and OpenAI doesn’t use API data to train its models.

If you text with us, or use Workspace to text your clients, we use phone numbers and messaging consent only to deliver those messages and record the conversation. We don’t share mobile phone numbers or text messaging consent with third parties or affiliates for their marketing or promotional purposes. Reply STOP to opt out of texts at any time.

We share data only with the service providers that help us run the services, and only for that purpose:

• Hosting, files and security: Cloudflare
• Databases: Neon, on Amazon Web Services
• Sign-in: Google Firebase, and Google or Microsoft when you sign in with them
• Payments: Stripe
• Email: Postmark
• Texts and calls: Twilio, once texting is available
• AI features: OpenAI
• Apps you connect: Google, Microsoft and Zapier, only if you connect them
• Listings: MLS Grid and Spark, which deliver your MLS’s listings (we send them nothing about you)
• Maps and weather: Esri, OpenStreetMap services and Open-Meteo
• Fonts on the websites we host: Google Fonts
• Analytics and measuring our ads: Plausible and Cloudflare, Google (Google Analytics and Google Ads) and Microsoft Clarity on brokerandagent.com and the free preview
• Showing our ads: Meta (Facebook and Instagram), from visits to brokerandagent.com and the free preview

Our help center lists each one, what it receives and when: Service providers we use.

We may also share information when the law requires it, to protect people or the services, or as part of a merger or sale of our business, in which case this policy continues to apply. We never sell your data.

• Your account and workspace: while your account is open. When you close it, we delete your workspace, its files and your account 30 days later. Backups roll over within about four more weeks. Stripe keeps your invoices, as the law requires.
• Security records: your sign-in and security activity for 90 days, and our server logs for 7 days.
• Free preview requests and messages you send us: as long as they’re useful for answering you.
• Survey answers: as long as the research needs them; we publish only totals.

If you’d like something deleted sooner, email privacy@brokerandagent.com.

We protect your data with encryption, keeping each company’s data separate, two-step sign-in, database backups and monitoring. Our Security page explains how, and how to report a problem.

• See and export your data. You can export your contacts from Workspace at any time.
• Correct or delete your data, or close your account.
• Unsubscribe from our emails with one click, and reply STOP to our texts.
• Disconnect Google or Microsoft in Settings.
• Turn off Meta’s ad tracking on our website, in this browser: A browser that sends Global Privacy Control turns it off everywhere.

To make a request, email privacy@brokerandagent.com. We’ll answer within 30 days. Depending on where you live, including California, you may have further rights, and we’ll honor them. We don’t sell personal information. Visits to our own website are shared with Meta to show you our ads, which California law calls sharing for cross-context behavioral advertising; you can turn that off above, and nothing in Workspace, your account or your website’s leads is ever shared this way.

If you’re a client or website visitor of one of our customers, contact that agent or brokerage first: they control your information, and we’ll help them respond.

Our services are for real estate professionals and aren’t directed to children. We don’t knowingly collect information from children under 13.

We store and process your data in the United States.

If we update this policy, we’ll change the date at the top, and for meaningful changes we’ll tell you by email or in your account before they apply.

Questions about this policy, or a privacy request: privacy@brokerandagent.com. Embark Companies LLC, doing business as Broker & Agent Solutions, Sarasota, Florida.