Privacy Policy

Information about our customers and the people who use MyPal for them (account details, billing, sign-in records), about visitors to our website, and about people who call or text MyPal itself is ours. We decide how it is used, and this policy describes that.

Information our customers put into MyPal or connect to it, about their own clients, leads and contacts, is theirs ("Customer Data"). We handle Customer Data only to provide MyPal to the customer, as their service provider, under our Terms of Service and Data Processing Addendum. The agent or brokerage you dealt with decides how your information is used. Their privacy notice applies, and your questions and requests go to them first.

From people who use MyPal:

• Account details: name, email address, brokerage, real estate license number, and the personal mobile number you add for verification, sign-in codes, account alerts and texting MyPal.
• Sign-in and security records: your password (stored only as a one-way hash), two-step verification settings, active sessions with the IP address and browser they came from, and a log of the changes made in your workspace.
• Billing details: the billing contact, country and postal code. Card details are entered with Stripe and never reach MyPal.
• Support and messages you send us.

From people who ask for access on our website: name, email address, brokerage, any note you add, and your IP address.

From people who call MyPal’s sales line, (480) 393-5335: your phone number and a written transcript of the call. That line is answered by MyPal’s AI agent. Audio is turned into text as you speak, and the providers that run the agent may record the call. If you share your name, company, email or other details on the call, we keep them to follow up.

From people who text MyPal’s line: your phone number and your messages.

Customer Data, which customers put into MyPal or connect to it: contacts, households, companies, deals, notes, tasks, calendar events, documents, properties and listings; calls placed or received in MyPal, with their recordings, transcripts and summaries; text messages; email synced from a connected mailbox and email sent through MyPal; email campaigns and newsletters with their delivery, open and click events; and what visitors submit on an agent’s public pages, such as listing inquiries and open-house sign-ins, including the IP address an open-house visitor’s consent was given from.

When someone views an agent’s published page or presentation, MyPal records the visit, with basic device and network information.

• To provide MyPal: run your workspace, place and receive calls and texts, sync the accounts you connect, and run the features you use.
• To keep MyPal secure: verify sign-ins, prevent abuse, and investigate problems.
• To bill for MyPal and send account notices.
• To answer access requests, support questions and calls to our sales line.
• To meet legal obligations.

We do not sell personal information. We do not share it for advertising, and MyPal shows no ads. Customer Data is used only to provide MyPal to the customer who holds it. It is never combined across customers, and never used to train AI models.

Some MyPal features use AI models run by our service providers, listed on our Sub-processors page. MyPal sends only what a feature needs, removes card numbers and Social Security numbers from text first, and our providers do not train their models on it. Pictures and scanned pages are sent as they are.

Writing in your voice. If you turn this on, MyPal reads emails you have sent, and with a separate permission your texts and edited drafts. It keeps a description of how you write and a few short excerpts, and shows those excerpts to the AI model as examples when drafting for you. They are used only for your own drafts. No model is trained on them. Withdrawing the permission stops MyPal reading anything more but keeps what it already learned. Disconnecting the mailbox and choosing to delete its mail removes the email excerpts, and deleting your account removes everything.

AI output can be wrong. Read what MyPal drafts or summarizes before you rely on it or send it.

You can connect a Google or Microsoft account so MyPal can work with your mail, calendar and contacts. Before you leave for Google or Microsoft, MyPal lists each permission it will ask for:

Email content and calendar events from these accounts are sent to our AI providers for the AI features above. That transfer happens only to provide features you use and can see in MyPal, and neither trains on it.

People at MyPal do not read your email, calendar or contacts, except when you ask us to for support, when it is needed for security (for example, investigating abuse), or when the law requires it. We never use data from these accounts for advertising, never sell it or pass it to data brokers, and never use it to train a general AI model. It is used only for features shown to you in MyPal, and the writing-in-your-voice description serves only you.

MyPal’s use and transfer of information received from Google APIs, including Google Workspace APIs, will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect an account at any time in MyPal’s settings. When you do, MyPal stops syncing it and asks whether to keep or delete the email it synced. Disconnecting a Google account also revokes MyPal’s access at Google. For a Microsoft account, remove MyPal under your Microsoft account’s app permissions as well.

Every call placed or received in MyPal is recorded and transcribed. There is no setting to turn recording off. The recording, transcript and summary are kept on the call’s record, which the agent on the call and the people with access to their records in the workspace can see.

Some states require everyone on a call to agree before it is recorded. When the person on the call may be in one of those states, MyPal shows the agent a recording notice to read aloud. MyPal does not play the notice itself. The agent and their brokerage are responsible for giving any notice the law requires.

Calls to MyPal’s own sales line are handled differently: they are transcribed, and the providers that run the agent may record them. See “What we collect”.

MyPal texts its own line, (480) 393-5335, only to people who have opted in, either in the MyPal app after verifying their mobile number or by texting the line first. Those texts are answers to your questions (Ask MyPal) and alerts about your account. How often we text varies with how you use MyPal. Message and data rates may apply. Reply HELP for help or STOP to opt out at any time, and START to opt back in.

We do not sell or share mobile numbers or text-message opt-in information with third parties or affiliates for their marketing or promotional purposes. The only outside company that receives your number for texting is the carrier that delivers the messages.

Agents also text their own contacts from their MyPal numbers. Those texts are the agent’s, sent under the agent’s consent and opt-out obligations. MyPal honors STOP replies to those numbers automatically.

Service providers that run parts of MyPal for us. Each one that handles Customer Data, and what it handles, is listed on our Sub-processors page. Calls to our sales line also use providers from that list, and Discord, which MyPal’s team uses for call reports.

Services you connect, such as Google, Microsoft or a webhook you set up, which receive what MyPal sends them on your instruction.

Other people in your workspace, according to the roles your administrator sets. An administrator can see the whole workspace’s records, a team lead their team’s, and an agent their own.

The public, for the pages an agent chooses to publish: listing pages, open-house sign-in pages, marketing pages and presentations.

Authorities, when the law requires it or to protect the rights and safety of people or of MyPal; and a buyer or successor, if MyPal is sold or merged, under this policy’s protections.

MyPal runs in the United States. Some service providers process data on their own infrastructure, as the Sub-processors page notes. Data is encrypted in transit and at rest, every workspace is kept separate from every other, and sign-in is protected by strong passwords, session expiry and two-step verification.

No system is perfectly secure. If a breach affects your information, we will tell you as the law requires.

Customer Data is kept while the customer’s account is open, unless the customer deletes it sooner. Some records are removed sooner on a schedule.

When a customer’s account ends, its data is deleted as the Data Processing Addendum describes. We keep account and billing records as long as the law requires, and security logs for as long as they are needed to protect MyPal.

• Update your account details in MyPal’s settings.
• Export your contacts and deals as a spreadsheet from MyPal.
• For a correction you cannot make yourself, or deletion of your account, email [email protected]. We answer within 30 days.
• Disconnect a connected account, and choose whether its synced email is deleted, in MyPal’s settings.
• Unsubscribe from marketing email with the link in any message, and stop texts by replying STOP.

If your information is in an agent’s or brokerage’s MyPal account, ask them first. They control it. If you contact us, we will pass your request to them and help them act on it.

The MyPal app uses only the cookies it needs to keep you signed in and secure. The website uses no cookies. Neither uses analytics, advertising or tracking tools.

MyPal is for business use by adults. We do not knowingly collect information from anyone under 18.

We will post any change here with a new effective date. If a change is material, we will email account administrators before it takes effect.

MyPal CRM LLC, Arizona. Email [email protected].