Privacy Policy
Last updated: June 2026
Estate Key LLC ("Estate Key," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered home concierge platform (the "Service"). It applies to homeowners, builders, and other users of the Service, and should be read together with our Terms of Service.
1. Information We Collect
Personal Information
When you create an account, we collect your name, email address, phone number, and role (homeowner, builder, or administrator). Builders may also provide business information such as company name, license details, and team-member information.
Home Data
We collect detailed information about your home, including property addresses, home system specifications (HVAC, plumbing, electrical, roofing, appliances), construction details, material schedules, and any information contained in uploaded documents.
Chat Transcripts & Voice Interactions
We store your chat transcripts and interactions with the AI concierge to provide and support the Service. When you use voice input, your audio is captured in your browser and sent to our transcription provider to convert it to text. We retain the resulting transcript; we do not retain the audio recording after it has been transcribed.
Uploaded Documents
Documents uploaded to the platform, including blueprints, warranties, manuals, inspection reports, photos, and any other files, are stored and processed to power the AI concierge's knowledge of your home.
Payment Information
If you purchase a paid plan, your payment is processed by our payment processor, Stripe. We do not collect or store your full payment card number. Stripe provides us with limited billing information, such as your card brand, the last four digits, expiration date, and billing contact details, so we can manage your subscription.
Usage and Device Data
We automatically collect usage and device data such as device and browser type, IP address, approximate location derived from your IP address, pages visited, features used, timestamps, and interaction patterns, to operate, secure, and improve the Service.
2. How We Use Your Information
We use the information we collect for the following purposes:
- AI Processing: Your home data, documents, and messages are processed by AI models to power the concierge, answer your questions, analyze documents, and generate maintenance recommendations.
- Warranty Management: Home and warranty information is used to track warranty coverage, facilitate claims, and coordinate between homeowners, builders, and subcontractors.
- Notifications: Your contact information is used to send warranty alerts, maintenance reminders, ticket updates, and other service-related communications via email, SMS, or in-app notifications.
- Service Improvement: We use usage data and, where appropriate, de-identified or aggregated information to improve AI accuracy, user experience, and platform features.
- Security and Fraud Prevention: Usage data and access logs are used to detect and prevent fraud, abuse, and unauthorized access.
- Legal and Compliance: We use information as needed to comply with legal obligations, enforce our agreements, and protect the rights, property, and safety of our users, the public, and Estate Key.
Your content and AI training. We do not use the contents of your documents, home data, or chats to train foundation AI models. Our AI providers process your inputs solely to return results to you and, under our agreements with them, do not use data submitted through their APIs to train their models.
3. Third-Party Services and Subprocessors
Estate Key relies on the following third-party service providers (subprocessors) to deliver the platform. We share only the information necessary for each provider to perform its function, and each operates under its own privacy policy:
Anthropic (Claude)
AI processing for the home concierge, document analysis, and intelligent responses.
OpenAI
Speech-to-text transcription of voice input (Whisper) and text embeddings that power semantic search across your documents.
Supabase
Database hosting, file storage, user authentication, and real-time data synchronization.
Stripe
Payment processing and subscription billing. Estate Key does not store full payment card numbers.
Resend
Transactional email delivery for account, warranty, and system notifications.
Twilio
SMS delivery for notifications, alerts, warranty updates, and ticket replies.
Vercel
Application hosting, content delivery, and privacy-friendly web analytics.
Sentry
Error monitoring and crash reporting to detect and fix technical issues; reports may include limited technical and account context.
PostHog
Product analytics to understand feature usage and improve the Service.
Upstash
Managed Redis used for rate limiting and performance caching, including temporary processing of IP addresses.
4. Cookies and Tracking Technologies
We and our providers use cookies and similar technologies (such as browser local storage) to operate and improve the Service. These fall into two main categories:
- Essential: Required for the Service to function — for example, to keep you signed in, maintain your session, and protect against cross-site request forgery. These cannot be disabled without breaking core functionality.
- Analytics: Help us understand how the Service is used so we can improve it (for example, via PostHog and Vercel). These are used for our own product analytics and not to identify you to advertisers.
We do not use third-party advertising cookies and we do not sell your information for advertising. You can control cookies through your browser settings; disabling essential cookies may prevent you from signing in or using parts of the Service.
5. How We Share Your Information
- With Builders: Homeowner warranty claims, reported issues, and relevant home data are shared with the associated builder for warranty management and issue resolution.
- With Subcontractors: When repairs are coordinated through the platform, relevant issue details are shared with assigned subcontractors as needed to perform the requested work.
- With Service Providers: We share information with the subprocessors listed above, who process it on our behalf and only as needed to provide their services to us.
- For Legal and Safety: We may disclose information if required by law, subpoena, or legal process, or where we believe disclosure is necessary to protect the rights, property, or safety of our users, the public, or Estate Key, or to investigate fraud or security issues.
- Business Transfers: If Estate Key is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will provide notice of any such change in control of your personal information.
- Never Sold: We never sell your personal information, home data, or any other data to third parties for marketing or advertising purposes, and we do not share it for cross-context behavioral advertising.
6. Data Security
We implement industry-standard security measures to protect your information:
- Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS/SSL protocols.
- Encryption at rest: Data stored in our database and file storage is encrypted at rest by our infrastructure providers.
- Row-Level Security (RLS): Our database enforces row-level security policies ensuring users can only access data they are authorized to view.
- Multi-factor authentication: Authenticator-based (TOTP) multi-factor authentication is required for administrative access.
- Rate limiting: API endpoints are protected with rate limiting to prevent abuse and brute-force attacks.
- Audit logging: Access to sensitive data and administrative actions are logged for security monitoring and compliance.
While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
7. Data Retention
We retain your personal information and home data for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete or de-identify your personal data within 90 days, except where retention is required by law, necessary to resolve disputes, or needed to enforce our agreements. Some records, such as transaction and audit logs, may be retained longer where required for legal, security, or accounting purposes. De-identified or aggregated data that no longer identifies you may be retained to improve the Service.
8. Your Privacy Rights
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Access: You may request a copy of the personal data we hold about you.
- Correction: You may request that we correct inaccurate or incomplete personal data.
- Deletion: You may request that we delete your personal data, subject to legal retention requirements.
- Data Export: You may request an export of your data in a machine-readable format.
- Opt-Out of Communications: You may unsubscribe from non-essential emails and notifications at any time through your account settings or by contacting us.
- Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise any of these rights, please contact us at support@estatekey.com. We may need to verify your identity before fulfilling your request.
9. California and Other U.S. State Privacy Rights
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), provides you with additional rights:
- The right to know what personal information we collect, use, and disclose.
- The right to access and delete your personal information.
- The right to correct inaccurate personal information.
- The right to opt out of the sale or sharing of personal information. Estate Key does not sell personal information or share it for cross-context behavioral advertising.
- The right to limit the use of sensitive personal information.
- The right to non-discrimination for exercising your privacy rights.
Residents of other states with comprehensive privacy laws may have similar rights. To exercise your rights, contact us at support@estatekey.com.
10. Children's Privacy
The Service is intended for adults and is not directed to children. You must be at least 18 years old to use the Service. We do not knowingly collect personal information from anyone under 18, and specifically not from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at support@estatekey.com.
11. International Users
Estate Key is operated in the United States, and we process and store information in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, and processed in, the United States, which may have data-protection laws different from those in your jurisdiction.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice through the Service or by email. Your continued use of the Service after the changes take effect constitutes your acceptance of the updated Privacy Policy.
Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at support@estatekey.com. Estate Key LLC is the entity responsible for your personal information.