Privacy Policy
Last updated: February 22, 2026
1. Introduction
PlyCRM ("we," "our," or "us") is a customer relationship management platform built for commercial real estate professionals, operated by Cameron's CRE LLC. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at www.plycrm.com and our web-based application (collectively, the "Service").
By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.
2. Information We Collect
2.1 Account Information
When you create an account, we collect information you provide directly, including:
- Full name
- Email address
- Password (stored in hashed form)
- Google account information (if you sign up via Google OAuth)
2.2 Professional Information
To provide a tailored experience, we may collect professional details such as:
- Company or brokerage name
- Job title or role
- Phone number
- Professional licenses or designations
2.3 CRM Data
As part of using the Service, you may enter, upload, or import business data, including:
- Contact and client records (names, emails, phone numbers, addresses)
- Property information (addresses, valuations, unit counts, square footage)
- Deal and pipeline data (transaction stages, pricing, notes)
- Notes, tasks, and activity logs
- Imported data from third-party sources (e.g., RealNex, spreadsheets)
2.4 Usage Data
We automatically collect certain information when you access the Service, including:
- Log data (access times, pages viewed, actions taken)
- Device information (browser type, operating system, screen resolution)
- IP address and approximate geographic location
- Referring URLs and search terms
2.5 Cookies and Tracking Technologies
We use cookies and similar technologies for:
- Essential cookies: To maintain your authenticated session, keep you logged in, and provide security features including bot protection (Cloudflare Turnstile). These cookies are necessary for the Service to function and cannot be disabled.
- Preference cookies: To remember your settings, such as theme preference (light/dark mode) and layout configurations. These are stored in your browser's local storage.
- Analytics cookies: We use Google Analytics to understand how visitors interact with our website. Google Analytics sets cookies (including
_ga,_ga_*, and_gid) to distinguish unique visitors, maintain session state, and throttle request rates. These cookies are only set if you consent via our cookie banner. You can opt out at any time by clearing your cookie preferences. For more information, see Google's Privacy Policy and Google Analytics Opt-out Browser Add-on.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Provide and maintain the Service: To operate the CRM platform, process your data, and deliver the features you use
- Service-related communications: To send you account notifications, security alerts, password resets, email verification, and important updates about the Service
- Improve the platform: To analyze usage patterns, fix bugs, develop new features, and optimize performance
- AI-powered features: To process your queries and data through our AI chat feature, providing intelligent responses and insights about your CRM data
- Security and fraud prevention: To protect against unauthorized access, detect abuse, and ensure the integrity of the Service
- Legal compliance: To comply with applicable laws, regulations, and legal processes
4. How We Share Your Information
We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:
4.1 Service Providers
We work with trusted third-party service providers who assist us in operating the Service. These providers are contractually obligated to use your information only to perform services on our behalf:
- Cloud hosting and infrastructure providers
- Email delivery services
- Analytics providers
- AI model providers (for processing AI chat queries)
- Security and CDN providers
4.2 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities, such as a court order, subpoena, or government investigation.
4.3 Business Transfers
If PlyCRM is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.
4.4 With Your Consent
We may share your information with third parties when you have given us explicit consent to do so.
5. Data Security
We take the security of your data seriously and implement industry-standard measures to protect it:
- Encryption in transit: All data transmitted between your browser and our servers is encrypted using HTTPS (TLS 1.2+)
- Encryption at rest: Sensitive data stored in our databases is encrypted at rest using AES-256 encryption
- Access controls: We enforce role-based access controls and require strong authentication for all administrative access
- Password security: User passwords are hashed using industry-standard algorithms and are never stored in plaintext
- Regular backups: We perform automated backups to prevent data loss and ensure business continuity
- Incident response: We maintain incident response procedures and will notify affected users promptly in the event of a data breach
While we strive to use commercially acceptable means to protect your information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.
6. Your Rights
You have the following rights regarding your personal information:
- Access your data: You can access and review the personal information we hold about you through your account settings
- Correct inaccurate data: You can update or correct your personal information at any time through the Service
- Delete your account: You can request deletion of your account and associated data by contacting us
- Export your data: You can request a copy of your data in a portable format
- Opt out of marketing: You can unsubscribe from marketing communications at any time using the unsubscribe link in our emails or by contacting us
To exercise any of these rights, please contact us at cameron@cameronscre.com. We will respond to your request within 30 days.
7. Data Retention
- Active accounts: We retain your data for as long as your account is active and as needed to provide you with the Service
- Deleted accounts: When you request account deletion, we will remove your personal data and CRM data from our active systems within 30 days
- Backups: Data in backups will be purged within 90 days of account deletion
- Legal obligations: We may retain certain information for longer periods if required by law or to resolve disputes
8. Third-Party Services
The Service integrates with or relies on the following third-party services, each of which has its own privacy practices:
- Google OAuth: Used for authentication when you choose to sign in with Google. Subject to Google's Privacy Policy
- Amazon Web Services (AWS): Used for cloud hosting, data storage, and email delivery (SES). Subject to the AWS Privacy Notice
- Google Analytics: Used to analyze website traffic and usage patterns. Only activated with your consent. Subject to Google's Privacy Policy
- Cloudflare: Used for security, DDoS protection, CDN, and bot detection (Turnstile). Subject to Cloudflare's Privacy Policy
- Anthropic: Used to power AI chat features. Data sent to AI features is processed according to Anthropic's Privacy Policy. We do not send your entire CRM database to AI providers; only the data relevant to your specific query is transmitted
9. Children's Privacy
The Service is not intended for individuals under the age of 18. PlyCRM is a professional business tool designed for commercial real estate professionals. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 18, please contact us at cameron@cameronscre.com.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes, we will:
- Update the "Last updated" date at the top of this page
- Notify you by email or through a prominent notice within the Service
- Give you the opportunity to review the changes before they take effect
Your continued use of the Service after the effective date of the revised Privacy Policy constitutes your acceptance of the changes.