Privacy Policy · StateGen

This Privacy Policy explains how StateGen ("we") collects, uses, and protects information when you use our real estate management platform (the "Service"). It covers people who run or work at an agency using StateGen, and the client contact data those agencies store in the Service.

Information we collect

Account data: name, email, agency name and domain, role, agent ID, password (stored hashed by our authentication provider), and — if you connect it — your WhatsApp number and opt-in timestamp.
Business data you enter: property listings, client and lead records (which may include client names, phone numbers, budgets, and preferences), deals, calendar events, and notes.
Messages: the content of messages exchanged with the optional WhatsApp assistant, and logs of those interactions.
Payment data: handled by Stripe. We receive subscription status and identifiers but do not store full card numbers.
Usage and technical data: basic logs needed to operate and secure the Service.

How we use information

To provide and operate the Service, including matching, pipeline, analytics, and the WhatsApp assistant.
To authenticate users and enforce per-company data isolation and role permissions.
To process subscriptions and payments.
To generate listing descriptions and interpret messages using an AI provider.
To send service-related and reminder messages you have configured.
To secure, troubleshoot, and improve the Service, and to comply with legal obligations.

Client data and your responsibility

Agencies use StateGen to store information about their own clients and leads. For that data, the agency is the controller and StateGen is a processor acting on the agency's instructions. Agencies are responsible for having a lawful basis and any required consent to store client data and to contact clients — including via WhatsApp, in line with WhatsApp's policies.

Service providers we share with

We share data only as needed to run the Service, with providers that process it on our behalf:

Supabase — database, authentication, and file storage.
Vercel — application hosting.
Stripe — payment processing.
Twilio and/or Meta (WhatsApp) — message delivery for the assistant.
An AI provider — to generate descriptions and interpret messages; message content sent for processing is not used to train third-party models where we can control that setting.

We do not sell personal data.

Data retention

We keep account and business data for as long as your account is active and for a reasonable period afterward, then delete or anonymise it, unless a longer period is required by law. Removing an agent or deleting records removes them from active use.

Security

We use industry-standard measures including encryption in transit, authenticated access, and per-company data separation. No system is perfectly secure, but we work to protect your data and to limit access to what each user is permitted to see.

International transfers

Our providers may process data in countries other than yours. Where that happens, we rely on those providers' safeguards for such transfers.

Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data, or to object to or restrict certain processing. Account users can update much of their data in the app; for other requests, contact us. If you are a client of an agency using StateGen, please contact that agency, which controls your data.

Changes

We may update this Policy from time to time. Material changes will be notified through the Service or by email, and the "Last updated" date above will change.

Contact

Questions or privacy requests: support@stategenapp.com.