Privacy policy

Lytle.ai is a SaaS product operated by Richard Romero (the "seller", "we", "us"). This policy explains what data the platform collects from agent-users and from the contacts (buyers and sellers) they engage. Richard Romero is the data controller for account and product-usage data.

• Account data — name, email, brokerage, phone (from agent-users).
• Lead data — names, contact details, budget/timeline, property preferences (entered by agents or captured from lead-gen forms with consent).
• Conversation data — SMS, email, and chat transcripts between the AI, the agent, and the lead.
• Product usage — pages viewed, features used, session logs, and diagnostic events.
• Billing data — payments are processed by Paddle.com, our Merchant of Record. Paddle collects and stores payment details; we receive only the plan, status, and last-four digits.

• Deliver the AI assistant, lead capture, CRM, calendar, and analytics features.
• Train and improve the AI's response quality using anonymized, human-reviewed examples — pricing, negotiation, and legal replies always require human approval.
• Send transactional service emails (receipts, security notices, product updates).
• Detect abuse, fraud, and TCPA/CAN-SPAM compliance issues.

We do not sell personal data. We do not use lead conversation content for advertising.

• Encryption in transit (TLS 1.2+) and at rest for the primary database.
• Role-based access control for agent accounts and brokerage admins.
• Row-level security so agents only see their own leads and conversations.
• Audit logging on privileged actions.

These describe currently enabled controls in the app. This page is not an independent certification.

We use first-party cookies to keep you signed in and to remember UI preferences. We use privacy- respecting product analytics to understand feature usage. We do not use third-party advertising cookies.

• Active account data is retained while your subscription is active.
• Closed accounts are purged within 90 days, except records we must retain for tax or legal reasons.
• Individual leads and conversations can be deleted from the app at any time.

Depending on your jurisdiction (including California under CCPA/CPRA, and the EU/UK under GDPR — see the GDPR page) you may have the right to access, correct, delete, port, or restrict processing of your personal data. Contact privacy@lytle.ai to exercise these rights.