Privacy Policy

Overview

Valory is an AI-powered workflow management platform built for real estate agents. We take your privacy seriously. This policy explains what data we collect, how we use it, and how we protect it — in plain language.

What We Collect

How We Use Your Data

• Providing the service — storing your workflows, processing documents, powering AI features, and syncing across web and mobile.
• Billing — tracking usage on metered plans and processing payments through our payment provider.
• Product improvement — understanding how features are used so we can make Valory better. We use aggregated, anonymized data for this — not your individual deal details.
• Notifications — sending you task reminders, deal updates, and important account notifications (like billing alerts). You can control notification preferences in your settings.

How We Protect Your Data

• All data is encrypted in transit (TLS) and at rest.
• Your database is hosted in the United States with enterprise-grade infrastructure providers.
• Authentication is handled by a dedicated identity provider with support for multi-factor authentication.
• File uploads are stored in secure, access-controlled cloud storage.
• We use role-based access controls — your data is only accessible to you and any clients you explicitly invite to the client portal.
• AI processing is performed via API calls to model providers. Your data is sent for processing and is not retained by those providers for training or any other purpose beyond generating a response.

Google Calendar Integration

Valory offers an optional integration with Google Calendar. When you connect your Google account, we request access to create, update, and delete calendar events on your behalf, and to read your calendar events. We use write access exclusively to sync your task due dates and deadlines to your calendar when you choose to add them. We read your calendar events only when you actively ask Val (our AI assistant) about your schedule — for example, “What's on my calendar this week?” In that case, the relevant event details are sent to our AI provider (Anthropic) solely to generate a response for you in real time; they are not stored by that provider or used to train any AI model. We do not modify or delete events that were not created by Valory. We store your calendar connection credentials (OAuth tokens) securely and use them only to perform actions you initiate. You can disconnect your Google Calendar at any time from Settings, which revokes our access.

Gmail Integration

Valory offers an optional Gmail integration for sending emails related to your real estate tasks. When you connect Gmail, we request permission to send emails on your behalf. We use this access exclusively to send emails that you review and explicitly approve — Valory never sends emails without your confirmation. We do not read your inbox, access your existing emails, or scan your email content. Email drafts generated by AI are stored within Valory for your review before sending. The content of emails you approve and send may be analyzed to learn your preferred writing style (greetings, sign-offs, tone) so that future drafts better match how you write. This analyzes only the outbound drafts you have approved — never your inbox or received mail — and is not used to train any third-party AI model. You can disable this learning on a per-email basis. You can disconnect Gmail at any time from Settings, which revokes our access.

Google Workspace Limited Use

Valory's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google Workspace data (from Google Calendar and Gmail) is used only to provide and improve user-facing features within Valory. We do not transfer or sell this data, and it is never used to develop, improve, or train generalized or foundational AI/ML models. Where an AI feature processes Google Workspace data — for example, answering a question about your calendar — that data is sent only to AI providers whose terms prohibit training on it, and is used solely to serve your request.

Third-Party Services

Valory integrates with third-party services for authentication, payment processing, AI model inference, database hosting, file storage, calendar sync, email sending, and application hosting. Our AI subprocessors are Anthropic (Claude — powers Val, document analysis, and email drafting), Google (Gemini — document analysis), OpenAI (text-to-speech and speech-to-text), and Groq (speech-to-text). Each is used under commercial, paid API terms that prohibit using your data to train their models. We select providers with strong security and privacy practices. We do not sell your data to any third party, and we only share the minimum data necessary for each service to function.

Client Portal

If you use the client portal feature, your clients can view deal progress, milestones, and documents you've marked as shared. Clients only see information you explicitly choose to share — they do not have access to your private notes, internal tasks, or other deals.

Data Retention and Deletion

Your data is retained as long as your account is active. If you close your account, you can export your data before deletion. After account closure, we will delete your personal data, workflows, and uploaded documents within 30 days. Some anonymized, aggregated data (like usage statistics) may be retained. Billing records are retained as required by law.

Your Rights

• Access — you can view and export all of your data at any time from within the app.
• Correction — you can update your information directly in the app.
• Deletion — you can delete individual records or your entire account.
• Portability — you can export your data in standard formats.

Changes to This Policy

If we make significant changes to this policy, we'll notify you via email or an in-app notification. Minor updates (like clarifications) will be reflected by updating the date at the top of this page.

Contact

Questions about privacy? Reach out at privacy@valoryai.app.