Privacy Policy

What CREos is

CREos is an operating hub for commercial real estate professionals: a place to work leads, listings, and day-to-day tasks in one platform, with data connected from outside sources you choose. Access is by invitation.

What we collect

• Account information: your name and email, held by our sign-in provider (Clerk), plus the workspace role and account membership an administrator grants you.
• Operational records you create: lead statuses, call notes, and similar workflow state. Changes are recorded in an append-only history that includes who made each change and when.
• Usage events: when the platform shows you a locked field or you request an upgrade, we record that event with your user id. These events power the product and are never sold.

The email connection

If you connect an email account, CREos requests permission to send email on your behalf, and nothing else. We do not request, and cannot use, any permission to read your mailbox. Every send happens only when you approve a specific message; there is no automatic sending, no scheduled sending, and no background activity. We never store message bodies (we keep a cryptographic fingerprint so the message you approved is provably the message that was sent), we never add tracking pixels or read receipts, and the copy of record is the one in your own Sent folder, written by your own provider. Recipient addresses and subjects are visible only to you, not to teammates or platform operators. Connection tokens are stored encrypted, and you can revoke the connection at any time from your email provider's security settings, which takes effect immediately.

CREos's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who processes your data

CREos runs on Vercel (hosting), Supabase (database), and Clerk (authentication). We do not sell personal information, we do not run advertising, and we do not share your operational records with any marketplace or data vendor. Where the platform displays data from a connected source, that source's own terms govern that data; your records stay yours.

Retention and deletion

Operational history is retained while your account is active because it is the product: your own record of your work. To request export or deletion of your data, or to ask anything about this policy, contact support@creoshub.com. We will respond within 30 days.

Changes

If this policy changes, the effective date above changes with it, and material changes are announced in the product before they take effect.