Privacy Policy

CoBroker Mail is operated by [LEGAL ENTITY NAME] ("we", "us"). This policy describes two different relationships, and it is worth knowing which one applies to you.

• Account holders — real estate professionals who create an account and pay to send a listing blast.
• Access requesters — people who leave their email address so we can tell them when access opens. We store the address, the page it came from and the request dates, and use them only for that contact.
• Recipients — people who receive a blast sent through the service. If you are here to stop receiving them, go to section 5.

Everything below is information you enter yourself, or that the service records as you use it.

• Account details — name, email address, brokerage, phone number, license line and title, plus any headshot, logo or banner image you upload for your sender profile.
• Password — stored only as a salted scrypt hash. We cannot read your password, and we will never ask you for it.
• Listing content — the addresses, prices, details, photographs and copy you put into a blast.
• Campaign records — what you sent, when it went out, how many addresses it reached, and the resulting delivery, open, click and reply totals.
• Payment records — the order amount, status and the identifier returned by our payment processor.

Payments are processed by PayPal. Card and bank details are entered on PayPal's own systems and are never transmitted to us or stored on our servers. We retain only the order identifier, the amount, and whether the order was paid, failed or refunded. PayPal handles that data under its own privacy policy.

Sending email means keeping track of what happened to each message. For every blast we record delivery status, opens, link clicks, bounces and spam complaints, along with any reply that comes back to the sending address.

Opens are measured with a small tracking image, and links are routed through our servers so clicks can be counted. Both are approximate rather than exact — Apple Mail Privacy Protection loads images for every recipient regardless of whether a person opened the message, and some mail clients block tracking entirely.

Replies sent to a blast's reply address are forwarded to the agent who sent it. We store the sender's address and name, the subject and a short preview so the agent's campaign report can show that a reply arrived; the conversation itself continues in their own inbox.

For recipients we hold an email address, any name, company or phone number associated with it, and the delivery and engagement records described in section 4.

To stop receiving blasts, use the unsubscribe link in the footer of any message you have received from us. Unsubscribes are recorded against the address itself and applied across the whole platform, so a single unsubscribe removes you from every sender's future blasts, not only the one you received. The same applies automatically to any address that hard bounces or reports a message as spam.

If you no longer have one of the emails, write to [CONTACT@YOURDOMAIN.COM] from the address you want removed, or send us the address, and we will suppress it and confirm.

The site sets one cookie: a session cookie that keeps you signed in. It is HTTP-only, is limited to same-site requests, and expires after thirty days. We do not use advertising cookies, and we do not run third-party analytics or tracking scripts on this site.

We do not sell or rent personal information. We do not give account holders a copy of the recipient list, and it is never exposed through the application — customers pay for delivery to the list, not for the list.

We use a small number of service providers to run the product:

• an email delivery provider, which transmits the blasts and reports what happened to them;
• PayPal, which processes payments;
• our hosting and file storage provider, which serves the site and stores uploaded images;
• our database host, which stores the records described above.

We will also disclose information where we are legally required to, or where it is necessary to investigate fraud or abuse of the service.

Traffic to the site is encrypted in transit. Passwords are salted and hashed with scrypt. Session cookies are HTTP-only, so page scripts cannot read them. Shareable campaign report links are signed, meaning a link cannot be altered to reveal another agent's campaign, and those reports never expose the recipient list.

No system is perfectly secure, and we cannot guarantee that a determined attacker will never succeed.

Account and campaign records are kept while your account is open and for as long as we need them for tax, accounting and dispute-resolution purposes. Unsubscribe and suppression records are kept permanently and on purpose: removing them is what would allow a previously unsubscribed address to be mailed again.

You can review and change your account details and sender profile at any time from your settings page. To request a copy of the information we hold about you, to correct it, or to have your account and its data deleted, write to [CONTACT@YOURDOMAIN.COM]. We will respond within a reasonable period. Deleting an account does not withdraw a suppression record, for the reason given in section 9.

If we change this policy we will update the date at the top of the page. Material changes affecting account holders will also be sent to the email address on the account.

[LEGAL ENTITY NAME]
[STREET ADDRESS], New York, NY [ZIP]
[CONTACT@YOURDOMAIN.COM]