Privacy Policy

This Privacy Policy describes how Interactive MM, LLC ("KeyFlow," "we," "us") collects, uses, and shares information when you visit keyflow.homes or use the KeyFlow application at app.keyflow.homes (together, the "Service"). By using the Service, you agree to the practices described here.

1. Information we collect

You provide directly

• Account information. When you sign in with Google, we receive your name, email address, and profile picture directly from Google. If you choose to enable SMS notifications, we also collect your mobile phone number.
• Business data. Transactions, contacts, financial entries, documents, and other content you create or upload.
• Communications. Messages you send us via email or through the Service.

Email we store

When you send email from KeyFlow, it goes out through your own Gmail account. KeyFlow stores a copy of the email you send from it, replies sent to a deal's TC address, and incoming mail waiting for your review. People with access to your workspace can see this mail. KeyFlow never reads your Gmail inbox.

If you share a deal with a client through a client portal, the client can see the emails on that deal they were part of, unless you hide them.

Automatically

• Usage data. Pages visited, features used, and approximate timestamps, used to operate and improve the Service.
• Device data. Browser type, operating system, and IP address.

For a paid account, we store a record of your subscription status, your plan, and your billing dates. Your card number and other payment details are held by Stripe, not by us.

2. How we use information

• To provide, secure, and improve the Service.
• To extract contract data automatically. When you upload a contract for extraction, we send it to Google's Gemini AI service, which returns the contract terms as structured fields for you to review and use. Google does not retain the document or use it to train its models.
• To improve extraction accuracy. When you correct an extracted field, we record the correction and use it to measure and improve extraction accuracy across the Service.
• To send transactional account messages (including SMS, if you opted in).
• To send the email you compose or approve.
• To respond to your support requests.
• To comply with applicable law and enforce our Terms.

Google user data

When you connect your Google account, KeyFlow asks for these permissions:

• Gmail, send only. To send email you compose or approve, from your own address. It doesn't let us read your mailbox.
• Contacts, read only. To import your Google contacts.
• Calendar. To add your deal milestones to a calendar KeyFlow creates.

KeyFlow's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We don't use this data for advertising, we don't sell it, and we don't use it to train AI models. People at KeyFlow read it only with your consent, for security, or as the law requires.

3. SMS notifications & messaging

If you opt in to SMS notifications, KeyFlow will send transactional account messages: the team digest and teammate texts described below. You will only receive SMS from KeyFlow after you explicitly opt in.

• How you opt in. Sign in to KeyFlow, open Settings → Profile → Text messages, enter your mobile phone number, and check the explicit consent checkbox confirming you agree to receive transactional SMS messages from KeyFlow. Your consent is recorded with a timestamp and audit source.
• Message types. Team updates and deal reminders, and texts your teammates send you from KeyFlow.
• Frequency. Message frequency varies with your settings, up to one update a day, plus occasional texts from your teammates.
• Charges. Message and data rates may apply.
• Opt-out. Reply STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, or QUIT at any time to unsubscribe. Reply HELP for help or contact support@keyflow.homes.
• Mobile information sharing. KeyFlow does not sell, rent, or share mobile phone numbers or SMS opt-in data with any third parties or affiliates for marketing, promotional, or other purposes. Mobile information is shared only with our SMS service provider (Twilio Inc.) solely to deliver messages you have opted in to receive, and with no other party.

4. How we share information

We do not sell your personal information. We share limited information only with:

• Service providers that help us operate the Service (e.g., Google Cloud / Firebase for hosting, authentication, and database; Google Gemini for contract data extraction; Twilio for SMS delivery; Resend for email delivery and for receiving replies to a deal's TC address), under contracts that limit their use of your data.
• Stripe, to process payments and calculate tax. Stripe handles your card details directly — KeyFlow never receives or stores your full card number.
• People you authorize, such as clients you invite into a client portal share link you generate.
• Authorities, when required by law, valid legal process, or to protect the safety of our users.

5. Data retention

While your account is active

We keep your account and business data, including stored email and uploaded files, for as long as your account is active. We may retain limited records longer where required for tax, legal, or fraud-prevention reasons.

When you delete

When you delete your account, we keep it for 90 days in case you change your mind, and then permanently delete it. When a workspace owner deletes a team workspace, we begin deleting it right away. Deletion removes the workspace's records, stored email, and uploaded files. Deleting your account also disconnects your Google account.

We keep limited operational records, such as usage counts, with no message content. Stripe keeps billing records under its own policy.

Backups

Deleted data can remain in our backups for up to 14 weeks, and then it is gone.

6. Security

Your data is stored on Google Cloud / Firebase infrastructure. We use industry-standard technical and organizational safeguards — including encryption in transit and at rest, and access controls — to protect your information. No system is perfectly secure; if you believe your account has been compromised, contact us immediately.

7. Your choices

• Access, correct, or delete your data via account settings, or by contacting us.
• Export your data from Settings at any time. The export includes your records and any received mail stored only in KeyFlow. Email you sent is in your Gmail Sent folder.
• Opt out of SMS at any time by replying STOP.
• Opt out of non-essential email by following the unsubscribe link in those messages.
• If you are a contact of a KeyFlow user, you can unsubscribe from that agent's marketing email with the link in the message.

8. Children's privacy

The Service is intended for users 18 years of age or older. We do not knowingly collect information from children under 13.

9. External links

The Service may contain links to third-party websites that we do not operate or control. We are not responsible for the content, policies, or practices of those sites. We encourage you to review their terms and privacy policies before providing any information.

10. Changes

We may update this Policy from time to time. Material changes will be communicated through the Service or by email. Continued use of the Service after an update constitutes acceptance.

11. Contact

Questions or requests regarding this Policy: support@keyflow.homes.
Interactive MM, LLC.