Privacy Policy
Last updated October 4, 2026
VossAI (vosssai.com) gives real estate agents a digital business card, a simple leads manager and writing tools. This policy explains what we collect, why, and the choices you have. "We" means VossAI, Dallas, Texas. Questions: jojo@elitelivingrealty.com.
Information we collect
- Agent accounts: your name, email, phone, brokerage, photos, card content, listings, and your plan and billing status. Card payments are processed by Intuit QuickBooks Payments; we never store full card numbers.
- Visitors to a card: pages viewed, buttons tapped and where the visit came from (QR code, NFC card, link), using a random visitor ID stored in your browser. If you fill in a card's contact form, we receive the name, email, phone and message you enter and give them to that agent.
- Advertising pixels: an agent on Agent Pro or Teams may add their own Meta pixel or Google tag to their card. When they do, Meta or Google receives information about your visit under their own privacy policies.
- MLS data: listing information an agent's MLS makes available through SimplyRETS.
How we use information
- To run the cards, deliver leads to the agent, and show agents their stats.
- To send a lead to the agent's CRM when the agent turns that on (for example Follow Up Boss, GoHighLevel through Back Boss, a CRM lead email, or a webhook the agent provides).
- To bill subscriptions and accessories and to send receipts, account and support emails.
- To write drafts in AI Studio: the details an agent types are sent to Anthropic's Claude to produce the draft and are not used to train models.
We do not sell personal information.
Google account connection (Gmail)
An agent can choose to connect their Google account so the emails they send to their leads from VossAI go out from their own Gmail address. When they do:
- We request only the gmail.send permission (plus their email address so we can show which account is connected). VossAI cannot read, search, delete or change anything in their mailbox.
- We use it only to send the specific emails the agent writes and chooses to send to their own leads. Nothing is sent automatically or in bulk.
- The access token Google gives us is encrypted and stored on our servers, used only for that purpose, and deleted when the agent disconnects Google in VossAI or removes VossAI at myaccount.google.com/permissions.
- We never sell Google user data, use it for advertising, or let people read it, except with the agent's permission, for security, or as the law requires.
VossAI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Who we share information with
Only the service providers that run VossAI, for that purpose: Supabase (database and storage), Netlify (hosting), Resend (email), Intuit QuickBooks (payments), Anthropic (AI Studio drafts), SimplyRETS (MLS listings), and the CRM or tools an agent connects. We also share information if the law requires it.
How long we keep it
Agent accounts and their leads are kept while the account is active. An agent can delete leads anytime, and can ask us to delete their account and data by emailing us. Card visit statistics are kept in summary form.
Your choices
- Card visitors can ask the agent, or us, to delete the details they submitted.
- Agents can turn off reminder emails with the link in any reminder, disconnect Google, and turn off any CRM connection in the dashboard.
- You can block cookies and advertising pixels in your browser settings.
Security
Data is encrypted in transit. Access to each agent's data is limited to that agent by database rules, API keys and Google tokens are stored only on the server, and Google tokens are encrypted at rest.
Changes
If we change this policy we will update the date above, and tell agents by email about important changes.