Privacy Policy

1. Who we are

Brokernomy is run by Brokernomy LLC ("we", "us"). This policy says what information we hold about you, what we do with it, who else handles it, and the choices you have.

2. What we collect

• Your account: your name, your email address, and your password, which is stored in a scrambled (hashed) form that we cannot read. So that an old password is not used again, we keep your last few former passwords in the same scrambled form. If you turn on two-step sign-in, we keep what it needs: the key your authenticator app was given and your backup codes, both stored encrypted, and, for a code we email you, a scrambled copy of the code for the few minutes it works. A device you ask us to trust is remembered with a cookie for 30 days. We also record the version of the Terms of Service you agreed to, and when.
• The business records you enter: closings and commissions, expenses, mileage, dues and licenses, contacts and leads, payments to contractors, and pay runs. With the property flip tools: each house, by its address or the name you give it, with its costs, budget, loans and sale, and the names of the lenders and partners you enter, with each partner's share. With the rental property tools: each property and its units, the names of your tenants with their lease dates, rent and security deposit, and the money you record as received and paid. With the rental property tools, also: when you bought a property, the price and closing costs, and the documents and photos you keep with it; move-in and move-out inspections, with the condition you note for each part of a unit and the photos you take, which can show a tenant's belongings or a person; and the day you set to settle a tenant's security deposit by. Referral fees other agents owe you: the agent and their brokerage, the client and property you name, the fee and its dates.
• People and businesses you pay, kept for your 1099 records: the name, the business name and the address if you enter them, the kind of business, whether you hold their W-9, and the last four digits of their taxpayer ID, with whether it is a Social Security number or an EIN. Brokernomy does not take a full taxpayer ID: one typed in is refused, and the full number stays on the W-9 you keep.
• Statements you upload: each line's date, description and amount. Long account and card numbers in a description are cut to their last four digits before the line is stored. The statement file itself is not kept.
• Receipts you upload: the payee, date and total. You choose on each upload whether the picture or PDF is kept. If you keep it, it is stored encrypted with the expense, or with the line on a house or a rental, as your record, and shows whatever the receipt shows. If you do not, it is deleted as soon as you confirm the expense or the line. When Ask Reale reads a receipt, the payee, date, total and a category are the only things taken from it: no card number, name or address is taken. Before a photo is stored, the hidden details a camera writes into it are removed: where and when it was taken, and the device.
• Files you attach to an expense, to a line on a house or a rental, to a rental property or to an inspection: receipts, invoices, and photos of the work, such as before and after a repair. Each is stored encrypted with that expense or line, as your record, and shows whatever the picture or PDF shows, which in a photo of a property can include a tenant's belongings or a person. Nothing is read from these files, by Ask Reale or anyone. Before a photo is stored, the hidden details a camera writes into it are removed. You can remove any of them at any time.
• Disbursement forms and draw requests are put together when you download them. What you type into them is not kept.
• Payroll reports you upload: the company totals for each pay run, and the name and amount of each payment to a contractor. The report file is not kept. No one employee's pay is kept, and no Social Security number or taxpayer ID, whole or in part.
• Settlement statements you upload: the closing date, the property address, the sale price, the commission on your side and what was taken from it, once you have checked them and saved the closing. The statement file itself is not kept, and no buyer's or seller's name and no loan or account number is taken from it.
• Billing: your subscription, which plan it is, and its status. Card details are entered on Stripe's own pages. We do not receive or store your full card number.
• A calendar address, if you make one: we keep it only in a scrambled form that we cannot read back, with which kinds of date you chose to show and when a calendar app last read it. Anyone who has the address can read those dates without signing in, so it is yours to keep to yourself, and you can replace it or turn it off at any time.
• Email reminders, if you agree to them: we keep that you agreed and when, which kinds of date you chose to be emailed about and how many days ahead, and a record of which reminders have been sent, so that none is sent twice. That record identifies the entry and its date and holds no name, and each part of it is deleted about a month after its date has passed. The emails go to your account's email address and say what is due and when, without amounts. An email about a deal or a lease names the client, the property or the tenant, and is sent only if you ticked that kind. We ask once whether you want reminders, and keep when you answered. You can stop them at any time, on your account page or from the link in every email, which deletes your choice and that record.
• Suggestions: when you send a message from our blog, we keep the message, what you said you are, and your name and email address if you gave them. The message, without your name or email address, is sent to the AI service to write the reply you see.
• Check-ins: about a month after you subscribe, we ask how Brokernomy is working for you. If you answer, we keep your answers with your account and delete them with it, and they are not sent to the AI service. If you tick that we may quote you, we may show your own words on our website under the name and role you gave.
• Technical records: the cookie that keeps you signed in. With each sign-in, the internet address (IP address) and the kind of browser it came from are recorded with it. A record of each request made to the site: when it was made, the internet address it came from, the address of the page asked for, and the kind of browser used. It is kept for 30 days and then deleted. And a log of each request made to the AI service, which records the feature used, the size of the request and when, and not its contents.
• Which of our ads or posts brought you, if you came by a link in one: the names in that link, kept with your account. See Cookies, below.
• How our public pages are used: which pages are opened, which links and buttons are pressed but not the words on them, the page you came from, the kind of browser and device you use, and the internet address (IP address) your visit comes from. A random identifier kept in your browser tells one visit from the next. It is not linked to your account, and nothing is recorded on the pages you see once you are signed in. HeyCatch keeps this for us; see Outside services, below.
• A record of activity on your account: when it was signed in to, when its password or two-step sign-in was changed, when all your records were downloaded, and when an accountant or broker you invited was added, was removed, or opened one of your reports. Each entry holds what was done and when. An entry for a sign-in, or for a change to your password or two-step sign-in, also holds the internet address (IP address) and the kind of browser it came from. The record holds none of your figures, and no client's, tenant's or contractor's name. We keep it so that you, and we, can tell if someone else has been in your account. You can see it on your account page.

3. How we use it

We use your information to provide the service to you: to keep your records, produce your reports, take payment, keep your account secure, tell you about the service, and see how people find and use our website so that we can improve it. We do not sell your personal information, and we do not use it or share it for advertising, beyond counting which of our own ads bring people to us.

4. Outside services that handle your information

We share text and uploaded visual media (receipts, invoices, summary documents) with secure third-party artificial intelligence, document-parsing, and cloud infrastructure providers solely to extract transaction data and categorize expenses.

• Anthropic (the Claude AI service): reads a statement, a receipt, a payroll report or a settlement statement, or suggests categories, only when you choose Ask Reale for that upload. The screen tells you what will be sent before you choose. It also answers a question you type into the Ask Reale window: the question is sent with your plan and the page you are on, and none of your records. We do not keep your questions or the answers.
• Stripe: takes payment and keeps your billing records.
• Amazon Web Services (hosting, database and file storage): runs the service and stores your records and files, in the United States.
• Amazon Web Services (email): sends the emails the service sends you, such as the link to choose a new password, or a reminder if you agreed to them. It is given your email address and the text of the email.
• Google (Maps): works out the driving distance of a trip, only when you press "Work out the miles" on your trip log. It is sent the places you typed, with any stops on the way, and not your name, the date or the client.
• Follow Up Boss: only if you bring your deals in from it. We send it the API key you paste, once, and it sends us your active deals: each one's name, the people on it, its stage, its price and its projected close date. The deals you choose are added to your pipeline. The key is not kept.
• Your own calendar provider (such as Google, Apple or Microsoft), if you add your Brokernomy calendar address to it: each time it looks for changes it reads the dates you chose to show there, without amounts, and nothing else.
• HeyCatch (website analytics): counts how our public pages are used, as described under What we collect. It is not told who you are, it is given nothing from the pages you use once signed in, and it is not told which of our ads or posts brought you, unless you came by a link HeyCatch made for us. It works for us under a data processing agreement: it may use what it records only for the service it provides to us, and it does not sell or share it. It keeps it in the United States. To write short summaries for us of how our public pages are used, HeyCatch sends what it records through OpenRouter to AI model providers, which may process it outside the United States. They may not use it to train their models, and they may keep it for a limited time to check for abuse.

We may also disclose information if the law requires it, or to a successor if the business is sold or merged, under this policy.

5. AI and your records

Our AI service providers process your data under strict confidentiality agreements and do NOT use your financial records, receipt images, parsed payroll data, or expense notes to train public machine learning models.

Anthropic deletes what we send it, and what it sends back, within 30 days. The exceptions are content its automated safety checks flag as breaking its usage rules, which it may keep for up to two years (and the score from that check for up to seven), and anything the law requires it to keep longer.

The AI features are optional and are chosen upload by upload. What they return is a suggestion that you check before anything is saved.

• A payroll report in CSV or text form has every Social Security number and taxpayer ID replaced with [REDACTED-SSN] before it is sent.
• A payroll report in PDF form is checked on our own servers first. If it prints a Social Security number, or is a scan that cannot be checked, it is not sent.
• When a payroll PDF holds several reports in one file, only its payroll journal or payroll summary pages are sent. The pay stubs, bank pages and other reports in it are left out.
• Statement lines sent for a category suggestion carry only the date, the amount and the description, with long numbers already cut to their last four digits.
• A whole statement, receipt or settlement statement sent to be read is sent as it is, and the screen says what that includes before you choose.

6. No biometric information

Our document-parsing tools do not extract, store, or process biometric identifiers, even if human faces, reflections, or signatures are incidentally captured in receipt photos or uploaded documents.

7. Payroll and compensation summaries

When configured by the account holder, the service processes employer payroll summary reports, gross wage figures, and employer-paid tax totals solely to generate aggregate expense entries on your business Profit and Loss statement. We do not extract, store, or sell employee Social Security Numbers, nor do we construct profiles or perform credit or identity checks on individuals listed in payroll documents.

If you are an employee or contractor of a Brokernomy customer and have a question about a payroll record, contact that customer, who is the employer responsible for it. You can also write to us.

8. Tenant information

The rental property tools hold what a landlord enters about a tenancy: the tenant's name, the unit, the lease dates, the rent, the security deposit and the payments received. They do not ask for a tenant's Social Security number, date of birth, bank details or screening report, and have no place for them. Do not put any of these in a notes box.

If you are a tenant of a Brokernomy customer and have a question about a record of your tenancy, contact that customer, who is the landlord responsible for it. You can also write to us.

9. Information about property owners

The property management tools hold what a property manager enters about an owner they work for: the owner's name, their email address, phone number and mailing address if entered, the fee terms of the management agreement, and the money received, paid and charged for them. They do not ask for an owner's Social Security number, taxpayer number or bank details, and have no place for them. Do not put any of these in a notes box.

If your property is managed by a Brokernomy customer and you have a question about a record of it, contact that customer, who is the manager responsible for it. You can also write to us.

10. People you choose to share with

No one else sees your records unless you choose to share them. There are two ways to share, and each one starts with you.

Your accountant. You can give your accountant or tax preparer a free login of their own, by handing them a one-time code. They can download your reports, such as your P&L, your tax organizer, your mileage log and your 1099 worksheet, for the years you choose, and a list of your receipts without the pictures. They cannot open your screens or your receipt pictures, and they cannot change anything. You can see their name and email address and when they last downloaded a report, and you can take the access away at any time. It also stops if your subscription ends.

Your broker or team lead. If they use Brokernomy's team tools, you can join their roster with a one-time code they give you, after ticking a box beside a list of what they will see. They see your name and email address; your closings: the date, the property, the side, the sale price and the gross commission; your split and how far you are toward your cap; and your licenses, with their numbers and when they expire, and your continuing education hours and courses. They also see what their own records say the brokerage paid you. They do not see your P&L, expenses, receipts or statements, what you keep from a closing, your referral fees or other deductions, your lead sources, pipeline or contacts, your mileage log or tax organizer, or flip houses or rental properties of your own. You can leave at any time, and they see nothing of yours from that moment.

11. Cookies

We use the cookie that keeps you signed in. If you reach our site by a link in one of our own ads or posts, we also set a cookie of our own that names that ad or post. It lasts 30 days. If you create an account in that time, the names are kept with your account, so that we can tell which of our ads bring people in, and the cookie is removed. Nothing in it is sent to Facebook, Instagram, TikTok or anyone else. We also use HeyCatch's analytics on our public pages. It keeps a random identifier in a cookie and in your browser's storage for up to a year, so that one visit can be told from the next. It does not say who you are. We do not use anyone else's advertising cookies.

12. How long we keep it

We keep your records for as long as your account is open, so that you have them when you need them for your taxes.

You can delete an individual receipt, statement or record yourself at any time. You can delete your whole account from your account page: your records and receipts are removed from the service at once, and your subscription is ended.

After an account is deleted, nothing of your records is kept for longer than 30 days: copies left in our backups are gone within 30 days of the deletion.

Two things stay: a log of requests made to the AI service, which no longer names you, and Stripe's own billing records, which Stripe keeps as the law requires of it.

The record of requests made to the site is not tied to your account. Each entry is deleted 30 days after it was made, whether or not the account is still open.

The record of activity on your account is deleted entry by entry, 12 months after each was made, and all of it at once when you delete your account.

A suggestion or question sent from our blog is deleted from the service 2 years after it was sent, or when you delete your account if you sent it while signed in. The emails that told us of it stay in our own mailboxes until we delete them.

If your subscription ends and you do not delete your account, your records stay in it, where you can still download them or delete them.

HeyCatch keeps what it records of how our public pages are used for as long as we use HeyCatch. Within two months after we stop, it deletes it or makes it anonymous for good.

13. How we protect it

• Receipt files and the files you attach are encrypted by the service before they are stored, with a key kept apart from the database and from the file storage.
• Your records are kept in a database, and receipt files and the files you attach in private file storage that cannot be made public. Amazon Web Services encrypts both, as a second layer.
• Your records are shown only to your own signed-in account, and to an accountant or a broker only as far as you have chosen to share with them.
• Connections to the service are encrypted.

No method of storing or sending information is perfectly secure. If a breach affects your information, we will tell you as the law requires.

14. Your choices and rights

You can see and correct your records in the service, and delete records yourself. From your account page you can download everything you have in the service as one file, and delete your account. If you need help with either, write to help@brokernomy.com. Depending on where you live, the law may give you further rights over your personal information; we will honour a request made under them, and we will not treat you differently for making one.

15. Children

The service is for adults running a business. It is not meant for anyone under 18, and we do not knowingly collect their information.

16. Changes to this policy

If we change this policy in a way that matters, we will tell you by email or in the service before the change takes effect.

17. Contact

Privacy questions and requests: help@brokernomy.com. Brokernomy LLC, 1019 Main St, Unit #1134, Bridgeport, CT 06604.