Privacy Policy

Last Updated: May 1, 2026

MrktGenius LLC (“MrktGenius,” “we,” “us,” or “our”) provides a real estate management platform for licensed real estate agents in New York State. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have regarding your data.

By creating an account or using MrktGenius, you agree to the practices described in this policy.

Information We Collect

We collect only the information necessary to operate the platform and deliver the features you use. We do not collect data for advertising, marketing analytics, or sale to third parties.

Account Information. When you create an account, we collect your name, email address, and authentication credentials. If you sign in with Google, we receive your name, email address, and profile picture from Google’s OAuth service.

Professional Information. As a licensed real estate agent, you may provide your license number, brokerage affiliation, working hours, time zone, communication preferences, and similar professional details to configure the platform.

Client and Transaction Data. When you use MrktGenius to manage your business, you create records about your clients, properties, showings, documents, tasks, communications, and pipeline status. This data belongs to you and is stored to make the platform function.

Google User Data. If you connect your Google account, we access the following Google APIs with your explicit consent:

• Google Sign-In (openid, email, profile): Used solely to authenticate you and display your name and profile picture in the application.
• Google Calendar Events (https://www.googleapis.com/auth/calendar.events): Used to read calendar events to display them within MrktGenius, and to create, update, or delete events you initiate through the platform (such as property showings and client appointments). We request only the calendar.events scope, which limits our access to events on your calendars; we do not access calendar settings, ACLs, or other calendar metadata. Calendar synchronization is bidirectional and occurs only when you take an action that requires it.

Integration Data. If you connect third-party services (such as ShowingTime, OneKey MLS, or document signing providers), we store the credentials or tokens needed to interact with those services on your behalf. Credentials are encrypted at rest.

Usage and Diagnostic Data. We log basic application events (such as login times, errors, and audit trail entries) to operate, secure, and debug the platform. We do not use third-party analytics or advertising tools.

How We Use Your Information

We use your information only to operate the user-facing features of the MrktGenius platform that you interact with directly. Specifically, we use your data to:

• Authenticate you and maintain your session
• Display your client pipeline, calendar, documents, and tasks
• Synchronize calendar events between MrktGenius and your Google Calendar in both directions
• Send transactional emails and notifications you have requested
• Process documents for electronic signature when you initiate a signing request
• Respond to your interactions with the DONNA AI assistant
• Detect and prevent abuse, fraud, or security incidents
• Comply with legal obligations

How We Use Google User Data: Limited Use Disclosure

MrktGenius’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• We use Google user data only to provide and improve user-facing features that are prominent in the application’s user interface.
• We do not use Google user data for advertising, including retargeting, personalized advertising, or interest-based advertising.
• We do not allow humans to read your Google user data unless you give us affirmative consent for a specific reason (such as troubleshooting a support issue), it is necessary for security purposes, or it is required by law.
• We do not use Google user data to develop, improve, or train any AI or machine learning models, generalized or otherwise. The DONNA AI assistant uses Anthropic’s Claude API to process your data only at runtime in order to respond to your specific in-app requests; Google user data passed to Claude is not retained by Anthropic for training under their standard API terms, and we do not retain it for model training either.
• We do not transfer or sell Google user data to third parties for any of the above purposes.

How We Share Your Information

We do not sell, rent, or trade your personal information. We share data only with service providers we use to operate the platform, and only as necessary to deliver functionality you have requested:

• Railway — cloud infrastructure provider that hosts our application and PostgreSQL database (United States)
• Anthropic — AI provider (Claude API) that processes prompts at runtime to generate responses for the DONNA assistant. Under Anthropic’s standard API terms, data submitted to the Claude API is not used to train or improve Anthropic’s models.
• Microsoft Graph API — used to send transactional emails on your behalf when configured
• Twilio — used to send SMS messages on your behalf when configured
• XodoSign / Eversign — used to send documents for electronic signature when you initiate a signing request
• Google APIs — used for sign-in authentication and calendar synchronization

Each of these providers is bound by its own privacy policy and processes data only as necessary to perform its specific function. We do not share your data with any other third parties for their own purposes.

We may disclose information when required by law, subpoena, or other valid legal process, or when necessary to protect the rights, property, or safety of MrktGenius, our users, or others.

Data Storage and Security

All platform data is stored in a PostgreSQL database hosted on Railway (railway.app), based in the United States.

We protect your data through the following measures:

• All data is transmitted over HTTPS/TLS encryption in transit
• Database access is restricted to authenticated application connections
• Authentication credentials for third-party integrations are encrypted at rest
• Sign-in is protected by email-verified magic links or Google OAuth, with rate limiting and brute-force protections
• An access controls system restricts which accounts can perform sensitive actions
• Administrative actions are logged to an audit trail

We do not store your Google account password. Authentication is handled entirely through Google’s OAuth 2.0 protocol.

While we take reasonable steps to protect your data, no system is perfectly secure. You should use a strong, unique password for any non-OAuth account and notify us promptly if you suspect unauthorized access.

Data Retention and Deletion

We retain your account data and associated client records for as long as your account is active.

If you request account deletion, we will delete your user record and all associated data — including client records, documents, tasks, showing history, and stored calendar synchronization data — from our database. Deletion cascades through all related records.

Authentication logs and audit trail entries may be retained for security and compliance purposes after account deletion in anonymized form.

To request deletion, contact us at the email address listed below.

Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct any inaccurate information in your account
• Request deletion of your account and all associated data
• Revoke Google OAuth access at any time through your Google Account permissions page, which will stop calendar synchronization and Google sign-in
• Export your client and pipeline data in a portable format

To exercise any of these rights, contact us at the email address below.

Children’s Privacy

MrktGenius is a professional tool for licensed real estate agents. We do not knowingly collect personal information from anyone under the age of 18. If we learn that we have collected data from a minor, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date at the top of this page and, where appropriate, notify you by email. Your continued use of the platform after any changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

MrktGenius LLC
Email: privacy@mrktgenius.com
Location: New York, United States