Privacy policy

Draft. This wording is being reviewed and is not final.

Who we are

Kirbify is a customer relationship tool for real estate agents and teams, run by Kirby Chan Digital in Ontario, Canada. This page says what we collect, why, where it goes and how to have it removed.

Two kinds of information

Account information: the name, email address and business details of the people who use Kirbify.

Client information: the contacts, messages, notes, deals and files that an agent or team keeps in their Kirbify account. That information belongs to the agent or team. We hold it for them and do what they instruct. If you are a client of an agent who uses Kirbify and want to see or remove what they hold about you, ask them first; we will help them do it.

What we collect

What you type in or import; messages sent and received through Kirbify, and recordings of calls where the account has turned recording on; answers given on forms and landing pages, with the consent wording shown at the time; pages a contact viewed on an agent’s connected website; and a log of who changed what, with the time and internet address.

What we use it for

To run the service: storing contacts, sending the texts and emails an account asks for, showing reports, and keeping the account secure. We do not sell personal information and we do not use it for advertising.

Who else handles it

We use other companies to run parts of the service. Each receives only what it needs: Cloudflare (hosting and network), Supabase (the database and sign-in), Twilio (texts and calls), Resend (email), Stripe (payments; we never see card numbers) and, only for accounts that turn on AI features, Anthropic (drafting replies from the conversation, and the assistant that answers visitors in a website’s chat).

Where it is kept

Some of these companies store or process information in the United States, including texts, emails and anything sent for AI drafting. Information held there is subject to the laws of that country.

Connected Google and Facebook accounts

When an agent connects a Google or Facebook account, Kirbify reads only what that connection is for: leads from their own lead ad forms, their own Page and Business Profile, their calendar’s busy times, and email with people who are already their contacts. Kirbify’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. It is not used for advertising, not sold, and not read by people except where needed for security, to comply with law, or with the user’s agreement.

Consent to messages

Kirbify records consent for each person and checks it before every text and email. Every email carries an unsubscribe link and every first or automated text says how to stop. Unsubscribes and STOP replies take effect at once.

How long we keep it

For as long as the account is open. An account owner can download everything the account holds at any time, and can erase any one contact. When an account is closed, its information is deleted within 30 days, except records the law requires us to keep, such as proof of consent.

Asking for your information, or for it to be deleted

Write to us at the address below. We will answer within 30 days. To delete information that Kirbify received through a connected Google or Facebook account, disconnect it under Settings, Connections, or write to us and we will remove it.

Changes

If this policy changes in a way that matters, account owners are told by email before it takes effect.

Contact

Kirby Chan Digital, Ontario, Canada.