Privacy Policy

1. Introduction

CloseHack ("Company," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at closehack.com (the "Site") and use our products and services, including Custom IDX Websites, QuickTours Marketing, and FlexCRM (collectively, the "Services").

By accessing or using our Site or Services, you agree to this Privacy Policy. If you do not agree, please discontinue use of the Site and Services immediately.

2. Information We Collect

2.1 Information You Provide

• Account & Contact Information: Name, email address, phone number, company name, and website URL when you create an account, request a demo, or contact us.
• Billing Information: Payment card details, billing address, and transaction history processed through our third-party payment processors. We do not store full credit card numbers on our servers.
• CRM & Client Data: If you use FlexCRM, you may input client contact details, notes, property information, and communication records. You retain full ownership of this data.
• Marketing Content: Listing photos, videos, property descriptions, and other content you upload through QuickTours Marketing.
• Support Communications: Messages, emails, and files you send to our support team.

2.2 Information Collected Automatically

• Device & Browser Data: IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Usage Data: Pages viewed, links clicked, time spent on pages, referral URLs, and navigation paths.
• Cookies & Tracking Technologies: We use cookies, web beacons, pixels, and similar technologies as described in our Cookie Policy.
• Log Data: Server logs that record requests made to our servers, including timestamps, request methods, and response codes.

2.3 Information from Third Parties

• MLS Data: Property listing data received from Multiple Listing Services for display on your IDX website.
• Analytics Providers: Data from Google Analytics and similar services about site traffic and user behavior.
• Social Media Platforms: If you interact with our social media pages, the platform may provide us with profile information consistent with your privacy settings on that platform.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our Site and Services.
• Process transactions and send related billing confirmations and invoices.
• Create and manage your account and authenticate your access.
• Respond to your inquiries, support requests, and feedback.
• Send you product updates, marketing communications, and promotional offers (you may opt out at any time).
• Analyze usage trends to improve our Site, Services, and user experience.
• Detect, prevent, and address security incidents, fraud, and technical issues.
• Comply with legal obligations and enforce our terms and policies.
• Generate aggregated, de-identified analytics and benchmarking reports.

4. How We Share Your Information

We do not sell your personal information. We may share it in these circumstances:

• Service Providers: Third-party vendors who perform services on our behalf, such as payment processing (Stripe), email delivery, cloud hosting (Google Cloud), analytics, and customer support tools. These providers are contractually obligated to protect your data.
• MLS Partners: We share necessary data with MLS organizations to facilitate IDX data feeds for your website.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as a business asset.
• Legal Compliance: When required by law, subpoena, court order, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• With Your Consent: We may share information for any other purpose with your explicit consent.

5. Google User Data

CloseHack's FlexCRM allows you to connect your email account — including Gmail — through our third-party integration partner, Nylas. When you connect a Google account, the following applies:

5.1 What Google Data We Access

• Email messages (subject, body, sender, recipients, timestamps) for displaying conversations within FlexCRM.
• Email metadata used to sync and organize your inbox within the CRM.
• Contact information associated with your connected Google account, if applicable to your selected integration scope.

5.2 How We Use Google Data

Google user data is used solely to provide user-facing features within FlexCRM, including:

• Displaying your email conversations alongside CRM contact records.
• Sending and receiving emails on your behalf from within FlexCRM.
• Logging email activity to your CRM contact timeline.

5.3 Limited Use Disclosure

CloseHack's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data for the purposes described in this policy and to provide the user-facing features visible in FlexCRM.
• We do not transfer Google user data to third parties except as necessary to provide or improve these features, to comply with applicable law, or as part of a merger/acquisition with notice to users.
• We do not use Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
• We do not use Google user data to determine creditworthiness or for lending purposes.
• We do not sell Google user data to any third party.

5.4 Human Access to Google Data

CloseHack employees and contractors do not read your Google user data unless:

• You have given us explicit consent (e.g., for a support request).
• It is necessary for security purposes, such as investigating a bug or abuse.
• It is required to comply with applicable law.
• The data has been aggregated and anonymized for internal operations.

5.5 Sub-Processors

Google user data is processed through Nylas, Inc., which acts as a sub-processor to facilitate email connectivity. Nylas is contractually obligated to protect your data in accordance with their privacy policy and applicable data protection laws.

5.6 Retention & Deletion of Google Data

When you disconnect your Google account from FlexCRM, we revoke the associated access token and delete cached email data within 30 days. You may disconnect your Google account at any time from your FlexCRM settings. You may also request deletion of all Google user data by contacting [email protected].

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Services. If you close your account, we will delete or anonymize your personal data within 90 days, unless we are required to retain it for legal, tax, or audit purposes. CRM data you input into FlexCRM is available for export at any time during your subscription and for 30 days after cancellation.

7. Data Security

We implement industry-standard technical and organizational measures to protect your information, including TLS/SSL encryption for data in transit, AES-256 encryption for data at rest, role-based access controls, regular vulnerability assessments, and secure coding practices. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

8. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights:

• Access & Portability: Request a copy of the personal data we hold about you in a structured, machine-readable format.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data, subject to certain legal exceptions.
• Opt-Out of Marketing: Unsubscribe from marketing emails by clicking the "unsubscribe" link in any email or contacting us directly.
• Cookie Preferences: Manage your cookie settings as described in our Cookie Policy.
• Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising your rights. We do not sell or share personal information as defined by the CCPA/CPRA.

10. International Data Transfers

Our Services are hosted in the United States. If you access the Services from outside the U.S., your information may be transferred to, stored, and processed in the U.S., where data protection laws may differ from those in your jurisdiction. By using the Services, you consent to such transfers.

11. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, please contact us immediately and we will take steps to delete such information.

12. Third-Party Links

Our Site may contain links to third-party websites, services, or applications that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party site you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last Updated" date. Your continued use of the Site or Services after any changes constitutes your acceptance of the updated policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: