Privacy Policy

1. Introduction

California Probate & Trust ("we," "us," "our," or "Company") operates the offer marketplace platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

A. Information You Provide

• Account Registration: Name, email address, phone number, password, role (buyer/seller/agent)
• Profile Information: Company name, business address, professional credentials
• Transaction Data: Offers submitted, property interests, offer amounts, approval status
• Communication: Messages, inquiries, support requests

B. Information Collected Automatically

• Device Information: IP address, browser type, operating system, device type
• Usage Data: Pages visited, time spent, clicks, search queries
• Location Data: General location (city/state level) from IP address
• Cookies & Tracking: Session data, preferences, authentication tokens

C. Third-Party Information

• OAuth Providers: Google and Meta provide name, email, and profile picture
• SMS Provider (Twilio): Phone number and message delivery status

3. How We Use Your Information

• To create and maintain your account
• To process transactions and offers
• To send transactional notifications (approvals, offers, status updates)
• To send SMS messages via Twilio (with your consent)
• To provide customer support and respond to inquiries
• To improve our Service and user experience
• To comply with legal obligations
• To detect and prevent fraud or abuse
• To enforce our Terms of Service

4. SMS & Text Messages

We use Twilio to send SMS notifications regarding offers, approvals, and marketplace activity.

• Consent: You must explicitly opt-in to receive SMS messages
• Frequency: Messages are sent as-needed for transactional purposes (typically 0-5 per day during active participation)
• Standard Rates Apply: Your mobile carrier's message and data rates may apply
• Opt-Out: Reply STOP to any message to unsubscribe. Reply HELP for assistance
• Data: Phone numbers are encrypted and securely stored

5. Data Sharing & Disclosure

A. We Share Information With:

• Service Providers: Supabase (database), Vercel (hosting), Twilio (SMS), Google/Meta (authentication)
• Marketplace Participants: Limited information shared between buyers, sellers, and agents as necessary for marketplace operation
• Legal Requirements: Law enforcement or government agencies when legally required

B. We Do NOT:

• Sell your personal information to third parties
• Share data for marketing purposes without consent
• Disclose financial information beyond what's necessary for transactions

6. Data Retention

• Active Accounts: Data retained while account is active
• After Deletion: Data deleted within 30 days of account closure request
• Legal Compliance: Some data may be retained longer if required by law
• Transaction Records: Offer history retained for 7 years for legal compliance

7. Your Privacy Rights

A. General Rights

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Request your data in a portable format
• Opt-Out: Opt-out of SMS messages, cookies, or tracking

B. GDPR Rights (EU Users)

If you are in the EU, you have additional rights including the right to withdraw consent, lodge complaints with your data protection authority, and restrict processing.

C. CCPA Rights (California Users)

If you are a California resident, you have the right to know what data we collect, delete your data, and opt-out of any future sales (though we do not sell data).

8. Data Security

• All data transmitted via HTTPS encryption
• Passwords hashed and salted
• Phone numbers encrypted at rest
• OAuth tokens securely managed
• Regular security audits and updates
• No public data access without authentication

9. Third-Party Links & Services

Our Service may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies independently.

10. Children's Privacy

Our Service is not directed to individuals under 18 years of age. We do not knowingly collect information from children. If we learn we have collected information from a child, we will delete it immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or prominent notice on our website. Your continued use of our Service constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices:

13. Request Account Deletion

To request complete deletion of your account and personal data:

1. Log into your account
2. Go to Account Settings
3. Select "Delete My Account"
4. Confirm deletion request
5. All data will be deleted within 30 days

Or email privacy@cpt.law with your request.