NurtureFlow ("NurtureFlow," "we," "us," or "our") operates the website nurtureflow.app and the NurtureFlow automated follow-up platform (the "Service") for real estate professionals. This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information.
By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.
Account information. When you create an account, we collect your name, email address, phone number, and a hashed password.
Contact data you import. Real estate agents upload CSV files or manually add contacts. This data may include a lead's name, email address, phone number, property interests, and lead type (e.g., new lead, past client, sphere of influence). You are responsible for obtaining appropriate consent from your contacts before importing their data.
SMS and communications data. We log outbound and inbound SMS messages tied to contacts, including message content, timestamps, Twilio message IDs, and delivery status.
Usage data. We collect information about how you interact with the Service — pages visited, features used, follow-up actions taken, and timestamps.
Payment information. Payments are processed by Stripe. We do not store full credit card numbers or bank account details. We retain your subscription status, plan type, and transaction history.
Lead capture form submissions. If you use NurtureFlow's landing page feature, form submissions from your leads (name, email, phone) are stored and linked to contact records in your account.
Device and browser information. Standard web server logs include IP addresses, browser type, referring URLs, and device type.
Agent responsibility. NurtureFlow provides SMS messaging infrastructure for licensed real estate agents. Agents are responsible for obtaining proper written consent from their contacts before sending SMS messages, in compliance with the Telephone Consumer Protection Act (TCPA) and applicable state laws.
Opt-out. Every contact can reply STOP to any message to be permanently opted out. NurtureFlow processes opt-out replies automatically and marks those contacts as opted out in your account. Opted-out contacts will not receive further SMS messages.
Opt-in. Contacts should provide explicit written consent before receiving SMS messages. We recommend that agents inform contacts that they may receive automated follow-up messages and provide a clear opt-out mechanism.
Message frequency. Message frequency depends on your configured follow-up cadences. Typical usage involves 1–5 messages per contact over a sequence, but this varies by agent configuration.
Support. For SMS-related questions, text HELP to any NurtureFlow number or email support@nurtureflow.app.
We use cookies and similar technologies to operate and improve the Service:
Most browsers allow you to block or delete cookies. Disabling cookies may affect Service functionality.
We do not sell your personal information or your contacts' personal information to third parties.
We share data with the following third parties only as necessary to operate the Service:
All data is stored in PostgreSQL databases hosted on Neon infrastructure in the United States. Passwords are hashed using bcrypt before storage — we never store plaintext passwords. OAuth and integration tokens are encrypted using AES-256-GCM. All connections use TLS/HTTPS in transit.
While we implement industry-standard security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
We retain your account data for as long as your account is active. If you cancel your subscription and request account deletion, we will delete your account data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., financial records required for tax compliance).
SMS logs are retained for 12 months from the date of the message to support dispute resolution, compliance audits, and opt-out verification.
Contact data you import is retained as long as your account is active. You may delete contacts at any time from within the Service.
All users. You may:
California residents (CCPA / CPRA). You have the right to:
To exercise California rights, email support@nurtureflow.app with subject "CCPA Request." We will respond within 45 days.
All marketing emails we send include a valid physical mailing address, a clear identification that the message is an advertisement where applicable, and an unsubscribe mechanism. We honor unsubscribe requests promptly (within 10 business days).
Transactional emails (receipts, password resets, account notifications) are not subject to CAN-SPAM opt-out requirements but you may contact us to discuss preferences.
NurtureFlow is a professional tool for licensed real estate agents and is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at support@nurtureflow.app.
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. For material changes, we will notify you by email or by a notice within the Service at least 7 days before the change takes effect. Continued use of the Service after the effective date constitutes acceptance of the revised policy.
For privacy questions, data requests, or to report a concern:
We aim to respond to all privacy inquiries within 5 business days.