Privacy policy

Information we use

Miramont Command is an invitation-only workspace for real estate professionals. Information depends on your role and the features your organization uses:

• Account and profile information, including name, work email, phone number, profile photo, organization, role and account identifiers.
• Business records you or your organization provide: client contact information, property addresses, deal activity, notes, contracts, photos, files, commission and income information, goals and performance metrics.
• Connected business information, including authorized Follow Up Boss contacts and activity, Zillow metrics and saved property information.
• Messages, AI inputs and responses when you choose AI features; permission and privacy choices; and activity or audit records.
• Technical information needed to operate and secure the service, including device installation identifiers, push tokens, delivery status, IP addresses, authentication logs and error information.

How information is used

We use information to authenticate users, enforce role-based access, organize transactions and tasks, calculate estimates, provide requested coaching or document analysis, deliver business alerts, respond to support requests and protect the service. Projections and AI outputs are informational and require human review.

Who processes information

Authorized people within your organization can access records according to their role. Service providers process information to operate the app: Supabase for authentication, database and file storage; Replit and Lovable for hosting and backend services; and Apple for iPhone push delivery. Font resources may be loaded from Google Fonts. Connected business systems receive information when their integration requires it.

We do not use advertising identifiers, sell personal information, or share it for cross-app advertising tracking.

Optional AI features

With your explicit permission, Maximus sends your messages, relevant conversation history and business context—including your name, goals, metrics, client names and property or deal details—to Lovable’s AI gateway and Google Gemini. Contract analysis sends selected document content or pages, which may include personal and financial information, to the same providers to propose extracted terms.

You can decline these features and continue using the rest of the workspace. Review the feature-specific disclosure before allowing sharing. You can withdraw permission in Privacy & account; withdrawal prevents new AI requests but cannot recall information already processed. Share only information you are authorized to provide.

iPhone permissions and notifications

Notifications are optional and can be disabled in the app or iOS Settings. Push messages use a generic notice; client names, addresses, amounts and documents are not included in the lock-screen payload. Opening an alert requires access to your authenticated workspace. The app requests camera access only when you choose to capture an attachment. Files and photos are accessed through your selected upload or sharing action. The native app does not request location, contacts or microphone access.

Storage and security

We use authenticated access, encrypted network connections, role-based controls and protected server credentials. Session data is stored on your device to keep you signed in. Temporary exported documents are removed from the app after sharing; copies you save or send are controlled by the destination you choose. Service providers may process information in the United States or other countries where they operate.

Retention, access and deletion

We retain account and business information for as long as needed to provide the service, maintain business records, protect against fraud, resolve disputes and meet applicable obligations. Retention depends on the record and purpose; backups may persist through their normal replacement cycle.

You can correct profile information in Settings and request access, correction or deletion by contacting support. To initiate account deletion in the app, open Privacy & account and choose Request account deletion. The request is recorded immediately for an administrator to process; submitting it does not immediately erase your account. AI permission and business push delivery are disabled when you submit the request.

We aim to respond within 30 days and will explain verification, timing and any records that must be retained. Records required for transaction, legal or security obligations may be retained with restricted access after account deletion. Contact support for the status of a request or the details of applicable retention.

Children and changes

This professional service is not intended for children under 18. We may update this policy as the service changes. The effective date identifies the current version; material changes to AI sharing require renewed permission.