Real Estate AI Assistant: Privacy Policy

Effective date: October 30, 2026

This policy explains how BCG Ventures LLC ("BCG", "we") collects, uses and shares information through the bcg-ventures.com website and the Real Estate AI Assistant (the "Service"). Questions: brian@bcg-ventures.com, or BCG Ventures LLC, 1914 Gustave Cook Ln, Richmond, TX 77469.

1. Two kinds of information

• Information about you, our customer (a real estate agent or brokerage): your account, billing and contact details, and how you use the Service.
• Information in Your Data: the emails, documents, contacts and deal files the Service handles for you, and the messages, voice notes, audio files and video notes you send it, which include personal information about your clients and others in your transactions (buyers, sellers, lenders, title companies, other agents). For this information we act as your service provider: we process it only to provide the Service to you, on your instructions. You decide what to connect.

2. What we collect

When you visit bcg-ventures.com

• Our website sets no cookies and loads no analytics, advertising pixels or third-party scripts on its public pages. Our cloud hosting provider's servers receive standard request data (such as IP address, browser type and pages requested) to deliver the site. It keeps that request data only briefly, and we don't review it.
• If you email us, we get what you send.

When you sign up

• Checkout is handled by Stripe. You give Stripe your email, payment card and the billing address it needs to calculate sales tax; we receive your name, email, billing details and subscription status, but not your full card number.
• You book your onboarding call through a Google Calendar booking page, which collects your name, email and anything you add to the booking.

When you use the Service

• Connected accounts. With your permission, the Service accesses the accounts you connect. For Google, that can include Gmail (reading, searching, sorting and drafting email, and sending it only if you turn sending on), Google Calendar, Google Drive and the other Google services you approve on Google's permission screen; you can choose read-only access when you connect. You connect Google through a Google app in your own Google account. Canva connects through Canva's own sign-in, and you chat with your assistant through Telegram and the web dashboard.
• Telegram sign-in. If you link your Telegram account in the dashboard, we keep its Telegram ID, first name and username on your assistant so that account can open the dashboard without a password. Unlinking it, or resetting your password, removes them. When you open the dashboard inside Telegram, Telegram's own script runs on that page to confirm your Telegram account.
• Messages and documents you send it, such as contracts, addenda and disclosures, and your questions and instructions.
• Deal files the Service builds: people, key dates, tasks and documents for each transaction.
• Memory and preferences, such as your preferred title companies and lenders and how you like updates written, and notes the assistant records about how you like to work. You can view what it remembers in the dashboard, and edit your profile and notes there; to correct or delete anything else it has recorded, email us.
• Logins you give it, such as HAR or RPR credentials. Logins you add in the dashboard's Password Vault are stored encrypted and passed to the tools that use them without being shown to the AI model. Please don't type passwords into chat: a password sent as a message is handled like any other message (section 5).
• Property research: addresses you ask about and the data returned: property listing details, map coordinates, flood-zone and public property, MUD and water-district records. The provider categories are listed in section 6.
• Usage and technical data: activity, error and performance logs needed to run and secure the Service. Some logs on your workspace include message content (for example conversation records and the start of voice-note transcripts). Our monitoring service also receives error reports and a periodic summary of how the Service is working for you, which can quote your messages.

We don't knowingly collect information from children under 13; the Service is for licensed professionals.

3. How we use it

• To provide the Service: build and update deal files, calculate deadlines, answer questions about your documents, draft messages, run the briefings and reminders you schedule, and take actions you've allowed.
• To set up and support your account, including onboarding.
• To bill you and manage your subscription.
• To keep the Service secure, prevent abuse and fix problems.
• Security check: once a week the Service looks at which of your Google Drive files are open to anyone with the link (file names, and the first row of spreadsheets only) and at your assistant's notes, and tells you in Telegram if something looks personal or like a password. It never changes sharing without your OK.
• To send you service messages (trial reminders, billing notices, changes to terms). We don't send marketing email.
• To comply with law and enforce our Terms.

We don't sell your personal information or Your Data, and we don't share it for cross-context behavioral advertising. We don't use Your Data to train AI models. Our AI model providers handle it under their own terms (section 5), and their terms or our account settings don't let them train on it.

4. Google user data

You connect Google through a Google app in your own Google account or organization, and your assistant uses only the permissions you approve on Google's screen.

The use of information received from Google Workspace APIs, and any other Google APIs, will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use your Google data only to provide the features you use and can see: finding, sorting and summarizing your email, drafting replies, sending email when you've allowed it, finding and organizing Drive files, reading your calendar, and the weekly security check (section 3).
• We don't sell it, don't use it for advertising, and don't transfer it to advertising platforms, data brokers or information resellers.
• We don't use it to create, train or improve AI or machine-learning models of our own. The AI providers that process it for you (section 5) receive it to carry out your request.
• No person at BCG reads your Google data except (a) when you ask us to look at a specific email or file, for support, (b) when needed for security, such as investigating abuse, (c) to comply with law, or (d) in aggregated, anonymized form for running the Service.
• We share it with the service providers in section 6 only as needed to run those features.

You can remove your assistant's Google access anytime at myaccount.google.com/permissions, or by deleting your Google app.

5. How the AI works with your information

To answer questions, sort and draft email, and work with your documents, the Service sends the relevant parts of Your Data (for example an email or contract excerpt and your question) to AI model providers. They use it to produce the response and handle it under their own terms. Your deals and documents aren't shared with other customers.

Some work happens in the background, such as sorting your incoming email, picking out things worth remembering from your conversations, checking on how the Service is working for you, transcribing voice messages, audio files and the sound of video notes (only the audio is sent, never the video), and searching documents. These requests can include your incoming emails (sender, subject, date and body), your messages and their audio, the assistant's replies and document text. How long an AI model provider keeps this text depends on its terms. Their terms or our account settings don't let them train on it.

Document reading. To read scanned contracts and other PDFs, the Service sends the file to a document storage and text recognition provider.

6. Who we share it with

We share information only as needed to run the Service, with service providers whose own terms limit how they use it:

A current list of our service providers is available on request: email brian@bcg-ventures.com.

We may also disclose information if the law requires it, to protect rights and safety, or as part of a merger or sale of the business (with this policy continuing to apply). We share Your Data with other people only when you tell the Service to (for example by approving an email).

7. How long we keep it

• Your Data, logs and stored logins: while your subscription is active. When your subscription ends, we disconnect your connected accounts and delete stored logins within 7 days, and delete your assistant, with Your Data and its logs, within 30 days. If you ask before then, we'll send you a copy of your deal files and documents first. We don't keep backups of your assistant.
• Monitoring data: error reports and the periodic summaries about how the Service is working for you are deleted 90 days after they're made.
• Text sent to AI services: AI model providers keep it according to their own terms (section 5).
• Billing records: as long as tax and accounting law requires.
• Emails with us: as long as needed to support you.

8. Security

We use safeguards designed to protect your information: encrypted connections (HTTPS) to the dashboard and the services we use, and encrypted storage for the passwords you save in the Password Vault and for your Google connection. No system is perfectly secure. If a breach affects your personal information, we'll notify you as the law requires.

9. Your choices and rights

• See and correct: view your assistant's memory in the dashboard and edit your profile and notes there; email us to correct or delete anything else it has recorded, or to update account details.
• Disconnect: revoke the Service's access to any connected account anytime (for Google, at myaccount.google.com/permissions or by deleting your Google app).
• Delete or export: email brian@bcg-ventures.com to delete your account and data or get a copy. We'll respond within 45 days.
• Your clients' requests: if one of your clients asks you about their information, we'll help you respond.
• Depending on where you live, you may have additional rights under state privacy law (such as to access, correct, delete or opt out). Email us to use them; we won't discriminate against you for doing so. If we deny a request, you can appeal by replying to our decision.
• California residents: we don't sell or share personal information as those terms are defined in California law, and we honor requests as described above. Our website doesn't track you across sites, so it doesn't respond differently to "Do Not Track" signals.

10. Changes

If we make material changes, we'll email customers and post the new date here at least 30 days before they take effect.

11. Contact

BCG Ventures LLC · brian@bcg-ventures.com · 1914 Gustave Cook Ln, Richmond, TX 77469