HotSpot Estates, LLC

Privacy Policy

Effective date: July 9, 2026 · Last updated: October 15, 2026 · Subject to change with 14 days’ written notice

This Privacy Policy describes how HotSpot Estates, LLC (“we,” “us,” or “our”) collects, uses, and protects information in connection with the AgentResponder service. By using the service, you agree to the practices described in this policy.

§ 1 Information We Collect

We collect the following types of information:

Account Information: Your name, email address, and billing information when you sign up for the service.

Google Account Access: With your explicit consent, we access your Gmail account to read real estate inquiry emails from Zillow and StreetEasy and to send automated replies on your behalf. We use Google OAuth 2.0 and store only the necessary tokens to operate the service.

SMS Provider Credentials: Your API key or account credentials for your connected SMS provider (e.g., Quo/OpenPhone, or another supported provider), used solely to send SMS messages and create contacts for leads on your behalf.

Listing Data: The property listings, email templates, and SMS templates you create within the dashboard.

Lead Data: Names, email addresses, and phone numbers of renters extracted from inquiry emails processed through the system, together with details of the listing each renter inquired about (such as neighborhood, number of bedrooms and bathrooms, and price), taken from your listing in the dashboard or from the inquiry email itself.

Usage Data: Log data, timestamps, and records of emails processed to support the service and prevent duplicate replies.

AI-Assisted Matching: When an inquiry can’t be confidently matched to one of your listings automatically, a short excerpt of the inquiry email (subject line and a portion of the body) is sent to our AI matching provider to help identify the correct listing. See §3(e) and §4 below.

Follow-Up Data: If you enable the optional Follow-Up feature, we check the original inquiry’s email thread (and your connected SMS provider’s message history, if applicable) to see whether the lead has responded, in order to decide whether to send a scheduled follow-up message.

§ 2 How We Use Your Information

We use your information solely to operate and improve the service:

(a) To process your Gmail inbox and automatically respond to rental inquiries.

(b) To send SMS messages via your connected SMS provider account on your behalf.

(d) To manage your subscription and process payments via Stripe.

(e) To send you account-related notifications (trial reminders, billing updates).

(f) If enabled, to send automated follow-up messages to a lead who has not responded to your initial reply.

(g) To keep a history of the inquiries you’ve received in your dashboard, so you can search, filter and export them and choose to contact past leads again (for example, with Bulk Contact).

§ 3 Google User Data

Our use of Google user data is strictly limited to the following:

(a) Reading emails from Zillow and StreetEasy in your Gmail account, including saving the renter’s contact details and the inquired-about listing’s details (neighborhood, bedrooms, bathrooms, price) with the lead, and checking an inquiry’s existing email thread for a reply if you’ve enabled the optional Follow-Up feature.

(b) Sending reply emails on your behalf through your Gmail account, including scheduled Follow-Up messages if enabled.

(d) We do not use Google user data to train any AI or machine learning models.

(e) We do not sell Google user data. The one limited exception is described in §4 below: a short excerpt of an inquiry email may be sent to our AI matching provider solely to help identify which of your listings an inquiry is about, when our primary matching can’t determine this with confidence.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

§ 4 Data Sharing

We do not sell your personal information. We share information only with the following service providers as necessary to operate the service:

Stripe — for payment processing.

Google — for Gmail API access (authorized by you).

Secure cloud infrastructure providers — for database storage and application hosting.

Your connected SMS provider — for sending messages on your behalf (authorized by you).

An AI-based matching provider — when an inquiry can’t be confidently matched to a listing by our primary matching logic, a short excerpt of the inquiry email (subject and a portion of the body) is sent to this provider solely to help identify the correct listing. This provider does not use this data to train its models.

We may also disclose information if required to do so by law or in response to a valid legal request.

§ 5 Lead Data & Compliance

Lead information (names, emails, phone numbers, and the details of the listing inquired about) extracted from inquiry emails is used only to provide the service to you: sending automated replies and follow-ups on your behalf, showing you your inquiry history, and sending messages you choose to send to your leads. You, the Client, are responsible for ensuring that your use of automated messaging complies with applicable laws, including the Telephone Consumer Protection Act (TCPA) and CAN-SPAM Act. We are not liable for how you use lead data or the content of messages sent through the service.

§ 6 Data Security

We take reasonable technical and organizational measures to protect your information. OAuth tokens and API keys are stored securely in an encrypted database. We do not store your Google account password. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

§ 7 Data Retention

We retain your account data, including your full history of inquiries and lead data, for as long as your account is active. (Your dashboard shows the last 30 days by default, but older inquiries are kept and can be viewed by choosing a longer date range.) When you cancel, your data is retained for up to 30 days, after which it is deleted. You may request deletion of your data at any time by contacting us, or delete your account yourself at any time in Settings → Delete account (on the website or in the AgentResponder app). Deleting your account immediately cancels your subscription, disconnects your Gmail and texting accounts, and permanently erases your account and its data, except billing records we are required to keep for accounting and tax purposes.

§ 8 Revoking Access

You can revoke AgentResponder’s access to your Google account at any time through your Google Account permissions page. Revoking access will stop the service from processing your emails until you reconnect.

§ 9 Confidentiality

We treat your account information, listing data, and lead data as confidential. We will not share this information with any third party except as described in this policy. We expect clients to maintain the confidentiality of their account credentials and not share access with unauthorized users.

§ 10 Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email at least 14 days before they take effect. Continued use of the service after that period constitutes acceptance of the updated policy.

Questions? Reach us at office@agent-responder.com