Privacy Policy & Security Agreement for AgentConnect

1. Information We Collect

When you connect your account and use AgentConnect, we collect and process the following types of data:

• Account Information: Your name, email address, profile picture, and organization details provided during authentication.
• Google Ecosystem Data (OAuth Data): With your explicit permission when you connect Google, AgentConnect accesses:
  • Google Contacts (read and write): To import your contacts into your workspace and to write your in-app edits back to Google Contacts so the two stay in sync.
  • Google Calendar (read and write events):To show your appointments, showings, and meetings on your dashboard, and — only when you choose — to add a task’s due date to your calendar as an event. We never modify or delete your existing events on our own.

  AgentConnect also offers an optional Gmail side-panel add-on. When you install and use it, it reads only the single email you are currently viewing — and only when you choose to log it to a deal — using a separate Google permission you grant to the add-on. It does not scan your mailbox, and full email bodies are never stored. AgentConnect never sends email on your behalf.

• Application Data: Deals, stages, notes, tasks, and workflow data you create inside AgentConnect.
• Technical & Usage Data: IP addresses, browser type, and log data necessary to maintain service performance and security.

2. How We Use Your Data

We use the data collected strictly for the following operational purposes:

• Providing, operating, and maintaining the core features of AgentConnect.
• Synchronizing your Google Contacts and Calendar into your personal AgentConnect workspace.
• Managing your deals, tasks, and CRM workflows.
• Providing technical support, troubleshooting issue resolution, and system maintenance.

We do not sell, rent, or trade your personal data or your clients’ contact information to third parties or advertisers.

3. Google API Limited Use Disclosure

AgentConnect’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We do not use Google Workspace user data to train generalized artificial intelligence (AI) or machine learning (ML) models.
• We do not share Google user data with third-party advertisers or data brokers.

4. Data Isolation and Internal Access

Data Isolation Between Users

AgentConnect enforces strict database-level row isolation (via Postgres Row Level Security). Your data, contacts, emails, and deal flows are strictly isolated to your user account. No other user of AgentConnect can see, search, or access your data.

Internal Access by Blue Cow Marketing Staff

To ensure system stability and assist you when requested, authorized personnel at Blue Cow Marketing Inc. may access database records under the following strict conditions:

• Troubleshooting & Support: When you open a support request or report an application issue, authorized staff may view relevant log data or record details to resolve technical problems.
• System Auditing: Access is restricted to authorized engineers on a need-to-know basis and is governed by strict internal security protocols.

5. Technology Stack & Infrastructure Security

AgentConnect leverages enterprise-grade cloud infrastructure to ensure your data remains secure:

• Hosting & Web Infrastructure (Vercel): AgentConnect is hosted on Vercel’s global edge network, featuring automatic SSL/TLS encryption for all data in transit (HTTPS) and protection against DDoS attacks.
• Database & Authentication (Supabase / Google OAuth):
  • Data is stored securely on Supabase databases with encryption at rest (AES-256) and in transit (TLS 1.3).
  • We use Google Authentication (OAuth 2.0) for account access. AgentConnect never sees, stores, or handles your Google account password.
  • Security policies (Row Level Security) are applied directly at the database tier to ensure strict tenant boundaries.

6. Data Retention and Deletion

• Retention: We retain your account data and connected Google information for as long as your AgentConnect account remains active.
• Disconnecting Google:You can revoke AgentConnect’s access to your Google account at any time via your Google Account Security Settings.
• Account Deletion: If you wish to permanently delete your AgentConnect account and associated stored data, contact us at 902-300-3030 or email our support team. Upon request, all stored user data will be purged from our active databases within 30 days.

7. Compliance with Canadian Privacy Law (PIPEDA)

As a product of Blue Cow Marketing Inc., based in Nova Scotia, Canada, AgentConnect complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy standards:

• Consent: We collect, use, and share data only with your express knowledge and consent.
• Access: You have the right to request a copy of the personal information we hold about you at any time.
• Accuracy: We encourage users to maintain accurate account information and offer tools to update profiles directly.

8. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our technology, legal obligations, or Google platform requirements. Any updates will be posted on this page with a revised “Last Updated” date.

9. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data privacy, please reach out to us:

Blue Cow Marketing Inc.
56 Woodvale Place
New Minas, Nova Scotia, Canada
Phone: 902-300-3030
Email: shaun@bluecowmarketing.ca
App: AgentConnect (a CRM for real estate agents)