Privacy Policy

1. Who We Are

Parcel CRM ("Parcel CRM," "we," "our," or "us") is a software-as-a-service CRM platform built for land investors. Our service is available at parcelcrm.com. When this policy refers to "the Service," it means the Parcel CRM web application, website, and any related features.

Questions about this policy can be sent to [email protected].

2. Information We Collect

2.1 Information You Provide

• Account information — name, email address, and password when you sign up.
• Organization information — org name, billing plan, and any settings you configure.
• CRM data — seller and buyer records, property details, activity logs, notes, and other content you enter into the application.
• Communications content — SMS messages, call notes, emails, and mail campaign details you create or send through integrated services (Twilio, SendGrid, Lob).
• Payment information — billing is processed by Stripe. We store only a Stripe customer ID; full card details are never transmitted to or stored on our servers.
• Waitlist submissions — name, email, and the details you provide in the beta access request form.

2.2 Information Collected Automatically

• Usage data — pages visited, features used, and session duration, collected through Firebase Analytics.
• Log data — IP address, browser type, and error events logged by Firebase and Google Cloud.
• Device information — browser version and operating system, used for compatibility and support.

2.3 Information From Third Parties

• Skip-trace data — property owner contact information returned by BatchData when you run a skip trace from within the app. This data is stored in your CRM records at your direction.
• Geocoding data — property coordinates returned by Nominatim (OpenStreetMap) and the U.S. Census Bureau's TIGERweb API when you look up a parcel address.

3. How We Use Your Information

• To create and maintain your account and organization.
• To provide, operate, and improve the Service.
• To process billing and communicate about your subscription.
• To send transactional emails (e.g., account confirmation, password reset, waitlist confirmation) via SendGrid.
• To notify you of important updates, security alerts, or changes to this policy.
• To diagnose bugs, investigate support issues, and monitor service health.
• To enforce our Terms of Service and prevent fraud or abuse.

We do not use your CRM data (seller records, buyer records, activity logs) for any purpose other than delivering the Service to you.

4. How We Share Your Information

We do not sell, rent, or trade your personal information or your contacts' information to any third party. We share data only in the following limited circumstances:

4.1 Service Providers

We use third-party vendors to operate the Service. Each is bound by contractual data-processing terms:

• Google Firebase / Google Cloud — authentication, database (Firestore), hosting, and cloud functions.
• Stripe — payment processing and subscription management.
• Twilio — SMS messaging and voice calls placed through the app.
• SendGrid — transactional and campaign email delivery.
• Lob — physical direct mail printing and delivery.
• PandaDoc — e-signature document delivery.
• BatchData — skip-trace property and owner data.

4.2 Within Your Organization

Users you invite to your Parcel CRM organization can view and edit data within that organization according to their assigned role (admin, agent, or read-only).

4.3 Legal Requirements

We may disclose information if required by law, court order, or to protect the rights and safety of Parcel CRM, our users, or the public.

4.4 Business Transfers

If Parcel CRM is acquired or merges with another entity, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a materially different privacy policy.

5. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription, your data is retained for 30 days in case you reactivate, then deleted. CRM records, activity logs, and communications data are deleted on the same schedule.

Waitlist submissions are retained until the waitlist program ends or until you request deletion.

Backups may retain data for up to 90 days beyond the deletion date for disaster-recovery purposes.

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you.
• Correction — request that inaccurate information be corrected.
• Deletion — request that your account and associated data be deleted.
• Portability — request an export of your CRM data in CSV format (available in-app via the export function).
• Objection — object to processing of your personal information where we rely on legitimate interests.

To exercise any of these rights, email [email protected]. We will respond within 30 days.

7. California Privacy Rights (CCPA)

If you are a California resident, you have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at [email protected].

8. Data Security

We use industry-standard security practices to protect your data:

• All data is transmitted over HTTPS/TLS.
• Firestore security rules enforce per-organization data isolation — your records are not accessible to other organizations.
• Firebase Authentication handles credential storage; passwords are never stored in plaintext.
• API keys for third-party integrations (Twilio, SendGrid, Lob, etc.) are stored server-side in Cloud Functions and never exposed to the browser.
• Access to production data is limited to authorized personnel.

No system is perfectly secure. If you discover a security issue, please report it to [email protected].

9. Cookies and Tracking

We use cookies and similar technologies solely to keep you signed in (Firebase Authentication session cookies) and to collect anonymous usage analytics (Firebase Analytics). We do not use advertising cookies or cross-site tracking.

You can disable cookies in your browser settings, but doing so will prevent you from signing in to the application.

10. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have, we will delete it promptly.

11. International Data Transfers

Parcel CRM operates in the United States. If you access the Service from outside the U.S., your data will be transferred to and processed in the U.S., where data protection laws may differ from those in your country. By using the Service, you consent to this transfer.

12. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies directly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify you by email or via an in-app notice. Continued use of the Service after a change takes effect constitutes acceptance of the revised policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:

• Email: [email protected]
• Website: parcelcrm.com