Privacy Policy

Engentfy LLC ("Engentfy," "we," "us," or "our") is a Florida limited liability company that operates the Engentfy platform (the "Platform"), a business-to-business marketplace connecting real estate suppliers with real estate professionals. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our website, applications, and services (collectively, the "Services").

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with any part of this policy, you must discontinue use of our Services immediately.

1. Information We Collect

1.1 Personal Information You Provide

When you create an account, use our Services, or communicate with us, we may collect:

• Account Information: Full name, email address, password (encrypted), phone number, and profile photograph.
• Business Information: Company name, business address, service categories, service descriptions, business hours, website URL, social media profiles, certifications, and license numbers.
• Payment Information: Billing address, credit or debit card details (processed and stored by our payment processor, Stripe — we do not store full card numbers on our servers).
• Listing Content: Photos, descriptions, logos, cover images, and other content you upload to your supplier profile or listings.
• Communications: Messages sent through our platform, contact form submissions, support requests, and email correspondence.
• Reviews & Ratings: Written reviews, star ratings, and reviewer identity information you submit about other suppliers or services.
• Verification Documents: Business licenses, insurance certificates, or other documents submitted during our verification process.

1.2 Information Collected Automatically

When you access our Services, we automatically collect:

• Device Information: IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Usage Data: Pages visited, features used, click patterns, search queries, listing views, time spent on pages, referral source, and navigation paths.
• Location Data: Approximate geographic location derived from your IP address, and precise location if you grant permission for location-based features.
• Log Data: Access times, error logs, and server activity records.

1.3 Information from Third Parties

• OAuth Providers (Google, Facebook): When you sign in using a third-party provider, we receive your name, email address, and profile photo as authorized by you. We do not receive or store your third-party account passwords.
• Payment Processors: Stripe may provide us with limited transaction information, such as payment status, last four digits of your card, and billing country.
• Publicly Available Information: We may supplement your profile with publicly available business information from directories, government registries, or your business website.

2. How We Collect Information

We collect information through the following methods:

• Direct Collection: Information you voluntarily provide when creating an account, submitting listings, filling out forms, or contacting us.
• Automated Collection: Cookies, web beacons, pixels, and similar tracking technologies that operate automatically when you use our Services.
• Third-Party Sources: Information received from authentication providers (Google, Facebook), payment processors (Stripe), and analytics services.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To create and manage your account, process listings, facilitate connections between suppliers and real estate professionals, and provide customer support.
• Payment Processing: To process subscription payments, manage billing, issue refunds, and prevent fraudulent transactions.
• Platform Improvement: To analyze usage patterns, diagnose technical issues, develop new features, and improve the overall user experience.
• Communication: To send transactional emails (account confirmations, password resets, listing updates), service notifications, and — with your consent — promotional materials.
• Security & Fraud Prevention: To detect and prevent unauthorized access, abuse, fraud, and other illegal activities.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and governmental requests.
• Personalization: To customize your experience, display relevant search results, and provide recommendations based on your activity and preferences.
• Analytics: To generate aggregated, anonymized statistics and reports about platform usage, market trends, and supplier performance.

4. Information Sharing & Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Public Profile Information: Your supplier profile, listings, reviews, and business contact information are publicly visible to other platform users as part of the marketplace functionality.
• Service Providers: We share information with trusted third-party service providers who assist in operating our platform, subject to contractual obligations to protect your data.
• Legal Requirements: We may disclose information if required by law, subpoena, court order, or governmental regulation.
• Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity.
• With Your Consent: We may share information in other ways if you provide explicit consent.
• Aggregated Data: We may share anonymized, aggregated data that cannot reasonably be used to identify you.

5. Third-Party Services

Our Services integrate with the following third-party services, each governed by their own privacy policies:

• Supabase: Authentication, database storage, and real-time services. Data is stored in secure, SOC 2 compliant data centers.
• Stripe: Payment processing. Stripe is PCI-DSS Level 1 certified.
• Google (OAuth & Analytics): Sign-in authentication and website analytics.
• Meta/Facebook (OAuth): Sign-in authentication.
• Resend: Transactional email delivery.
• Vercel: Website hosting and content delivery.

6. Cookies & Tracking Technologies

• Essential Cookies: Required for the Platform to function properly (authentication tokens, session management, CSRF protection). These cannot be disabled.
• Analytics Cookies: Help us understand how users interact with the Platform. Used to improve our Services.
• Preference Cookies: Remember your settings, language preferences, and display options.

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using certain features of the Platform.

7. Data Retention

• Active Accounts: We retain your data for the duration of your account's existence.
• After Account Deletion: Certain data may be retained for up to 90 days to comply with legal obligations.
• Payment Records: Transaction records may be retained for up to 7 years as required by tax laws.
• Anonymized Data: Aggregated, anonymized data may be retained indefinitely for analytics.

8. Data Security

• TLS/SSL encryption for all data in transit.
• Bcrypt password hashing — we never store passwords in plain text.
• Multi-factor authentication (MFA/TOTP) for administrative accounts.
• Rate limiting on authentication endpoints to prevent brute-force attacks.
• Session timeout for inactive users (15 min admin, 30 min standard).
• Row-level security (RLS) policies at the database level.
• Regular security audits and monitoring.

No method of transmission over the Internet is 100% secure. We will notify affected users promptly in the event of a data breach as required by law.

9. Your Privacy Rights

• Right of Access: Request a copy of the personal data we hold about you.
• Right of Correction: Request correction of inaccurate or incomplete data.
• Right of Deletion: Request deletion of your personal data.
• Right of Portability: Request a machine-readable copy of your data.
• Right to Opt-Out: Opt out of promotional emails at any time.
• Right to Restrict Processing: Request limited processing in certain circumstances.

To exercise these rights, contact us at info@engentfy.com. We respond within 30 days.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights:

• Right to Know: Disclose categories and specific pieces of personal information collected.
• Right to Delete: Request deletion, subject to exceptions.
• Right to Correct: Request correction of inaccurate information.
• Right to Opt-Out of Sale/Sharing: We do not sell personal information.
• Right to Non-Discrimination: We will not discriminate for exercising your rights.

11. Florida Privacy Rights

We comply with the Florida Digital Bill of Rights (FDBR). Florida residents may access, correct, delete, and obtain copies of their data, and opt out of targeted advertising, data sales, and profiling. Contact info@engentfy.com.

12. Children's Privacy

Our Services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact info@engentfy.com.

13. International Data Transfers

Our Services are primarily operated in the United States. By using our Services, you consent to the transfer of your information to the United States.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice. Your continued use constitutes acceptance.

15. Contact Us