Privacy Policy

Last updated: April 23, 2026

Introduction

Pierce Industries LLC, doing business as PREP ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our real estate management platform.

Information We Collect

Personal Information

Name and contact information
Email address and phone number
Real estate license information
Payment and billing information
Property and transaction data

Usage Information

Platform usage and activity
Device and browser information
IP address and location data
Cookies and tracking technologies: We use two categories of cookies. Strictly necessary — NextAuth session cookies keep you signed in for the duration of your browser session (deleted when you close your browser or sign out). Analytics — Google Analytics 4 sets _ga and _gid cookies to distinguish users and sessions; these persist for up to 2 years and 24 hours respectively. You can remove or block analytics cookies via your browser settings or the Google Analytics Opt-out Add-on.

Analytics and Measurement

We use Google Analytics 4 (GA4) to understand how visitors use our website and platform. GA4 collects the following information:

Pages visited and time spent on pages
Device type, browser, and operating system
Approximate geographic location (city and region level)
Referral source and session behavior
Core Web Vitals performance metrics (page load time, interactivity, and visual stability) to monitor and improve site performance

GA4 uses cookies and similar technologies to collect this data. Data collected through GA4 is processed by Google LLC under their privacy policy. We use this data to improve our website, understand usage patterns, and optimize the user experience. We do not use GA4 to collect personally identifiable information.

You can opt out of Google Analytics data collection by installing the Google Analytics Opt-out Browser Add-on.

How We Use Your Information

Provide and maintain our services
Process payments and subscriptions
Send important updates and notifications
Improve our platform and user experience
Comply with legal obligations

Data Security

We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure servers, and regular security audits.

Third-Party Services and Sub-Processors

We use trusted third-party services to operate PREP. These sub-processors receive only the information required to perform their service and are bound by their own privacy and security commitments:

Stripe — payment processing (card data is sent directly to Stripe and never stored on PREP servers)
Google — authentication (Sign in with Google) and optional Google Calendar integration (details below)
Google Analytics 4 — aggregate website usage measurement and Core Web Vitals
Vercel — application hosting (United States)
Supabase — managed PostgreSQL database (United States)
Amazon Web Services (AWS) — cloud infrastructure including Amazon S3 (document storage), Amazon SES (email delivery), and Amazon Bedrock (AI document and email extraction, described below). Data is processed in the AWS us-east-1 region (United States).
Resend — transactional email delivery and optional inbound email ingestion
Cloudflare Turnstile — bot and spam protection on public lead-capture forms (described below)

All sub-processors listed above operate in the United States. International customers should be aware that submitted information will be transferred to, stored, and processed in the United States. By using PREP or submitting information through a PREP-powered form, you consent to this transfer.

Public Lead-Capture Forms

PREP customers (real estate agents, teams, and brokerages) can publish public lead-capture forms at PREP-hosted URLs (for example, https://www.the-prep.casa/p/[slug]). If you submit information through one of these forms:

The information you provide (name, email, phone, and any other fields the agent has configured) is delivered to the PREP customer who owns that form. That customer is the primary recipient and controller of your information and will contact you directly.
PREP acts as the service provider (processor) that stores and routes the submission on behalf of the customer.
To prevent spam and abuse, we also collect technical metadata: your IP address, browser user agent, the referring URL, UTM parameters from the link you clicked, and timing signals about your interaction with the form.
We set a first-party cookie (pierce_portal_visited, 30-day lifetime) to recognize returning visitors for spam scoring. This cookie is used only for anti-abuse purposes and does not track you across other websites.
We use Cloudflare Turnstile to verify that form submissions come from a human and not an automated bot. Turnstile may process technical signals from your browser according to Cloudflare's privacy policy.

If you want your information removed after submitting a form, please contact the agent who operates the form first (they are the primary recipient). You may also contact us at privacy@the-prep.casa and we will route the deletion request to the appropriate customer.

Inbound Email Lead Ingestion

PREP customers on eligible plans can forward lead emails (for example, notifications from Zillow or Realtor.com) to a unique PREP-hosted inbound address. When an email is forwarded to that address, we process its subject, body, and sender information so that we can create a contact record for the customer. This may include parsing personal information (name, email, phone) about a third-party lead whose email was forwarded to PREP.

This inbound email data is stored only for the PREP customer who received it and is never used to train AI models. If you believe an email containing your personal information has been forwarded to PREP without your consent, please contact us at privacy@the-prep.casa.

Use of Artificial Intelligence

PREP uses large language models operated by Amazon Web Services (Amazon Bedrock, Anthropic Claude family) to assist with specific tasks:

Extracting contact information from inbound emails forwarded to a customer's PREP inbound address
Mapping columns in uploaded CSV files to PREP contact fields during import
Extracting structured fields from real estate documents uploaded by customers
Scoring inbound leads on a 1-5 scale based on fields you provided (such as timeline, budget, and pre-approval status). This score is a private organizational aid for the customer and is not a consumer-facing credit, insurance, or housing decision.

Content sent to Amazon Bedrock for processing is transmitted over encrypted connections and is not used to train the underlying models (see AWS Bedrock data privacy). PREP does not use customer or lead information to train its own AI models. PREP does not make automated decisions about housing, credit, insurance, or employment based on AI output. Protected- class attributes (such as race, religion, national origin, or familial status) are not collected by PREP and are not used as inputs to lead scoring.

Data Retention

We retain personal information for as long as needed to provide the service and to meet legal, tax, and audit obligations:

Account and customer data — retained while your account is active and for up to 30 days after deletion, after which personal data is removed except where longer retention is required by law
Transaction, offer, and agreement records — customers may be required by state real estate regulations to retain these records for 3-7 years; we retain them for the customer accordingly
Form-submission metadata (IP address, user agent, referring URL) — retained for the life of the submission record for audit, anti-abuse, and dispute-resolution purposes
Raw form payloads (the unmodified JSON of a lead-capture submission) — retained for audit and debugging and may be purged after 90 days
Billing records (invoices, payment status) — retained as required by applicable tax and accounting law (typically 7 years)
Security and access logs — retained for up to 12 months for incident-response and audit purposes

To request earlier deletion of your personal information, contact privacy@the-prep.casa. We will honor valid deletion requests except where retention is required by law or by the legitimate business purposes listed above.

Data Breach Notification

If we learn of a security incident that affects your personal information, we will notify you and, where required, regulators in accordance with applicable law. We aim to notify affected users without undue delay and, where GDPR applies, within 72 hours of discovering the breach.

Google Calendar Integration

PREP offers an optional Google Calendar integration that allows you to sync critical real estate transaction dates directly to your Google Calendar. When you connect your Google Calendar, the following applies:

Data Accessed

When you connect your Google Calendar, we access calendar event titles, dates, times, locations, and attendees from your primary Google Calendar. We use the calendar.events scope, which provides read and write access to your primary Google Calendar.

Purpose

Calendar access is used solely to sync real estate transaction dates — including closing dates, inspection deadlines, contract expiration dates, and option periods — to your Google Calendar so you never miss critical deadlines. We do not read or process your existing calendar events for any other purpose.

Storage

OAuth access and refresh tokens are stored securely in our database using encryption at rest. Calendar event metadata (event IDs and sync status) is stored for synchronization tracking purposes only.

Sharing

Google Calendar data is never shared with third parties, advertisers, or data brokers. We do not sell, trade, or transfer Google user data to third parties.

Disconnecting and Deletion

You can disconnect your Google Calendar integration at any time from your Account settings. Disconnecting immediately deletes stored tokens and calendar sync data from our systems. You can also revoke PREP's access to your Google Calendar at any time from your Google Account permissions page.

Google API Limited Use Disclosure

PREP's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not sell, trade, or transfer Google user data to third parties.

Your Rights

Access and update your personal information
Request deletion of your data
Opt-out of marketing communications
Export your data
Withdraw consent for data processing

These rights apply to all users; see the CCPA and GDPR sections below for region-specific details.

Your Choices

You have several options to control how your information is collected and used:

Google Analytics opt-out: Install the Google Analytics Opt-out Browser Add-on to prevent GA4 from collecting data about your visits
Cookie preferences: You can manage or disable cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or be notified when a new cookie is set
Marketing communications: You may opt out of marketing emails at any time by clicking the unsubscribe link in any email we send or by contacting us at privacy@the-prep.casa

California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:

Right to know: You have the right to know what personal information we collect, the sources from which we collect it, the purposes for which we use it, and the categories of third parties with whom we share it
Right to delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions
Right to opt out of sale: We do not sell personal information to third parties

Analytics data collected through Google Analytics may constitute "sharing" of personal information under CCPA. You can opt out of this data collection by installing the Google Analytics Opt-out Browser Add-on.

To exercise your California privacy rights, please contact us at privacy@the-prep.casa. We will respond to verified requests within 45 days as required by law.

European User Rights (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and applicable national laws provide you with the following rights regarding your personal data:

Right of access: You have the right to request a copy of the personal data we hold about you
Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal data where there is no compelling reason for its continued processing
Right to data portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller
Right to restriction of processing: You have the right to request that we restrict the processing of your personal data under certain circumstances
Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal
Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of your personal data infringes the GDPR

To exercise any of these GDPR rights, please contact us at privacy@the-prep.casa. We will respond within 30 days of receiving your request.

Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: privacy@the-prep.casa

For terms-of-service questions, email legal@the-prep.casa.