Privacy Policy

Who This Policy Covers

This policy applies to three groups: site visitors and clients who browse listings or create an account; our agents and staff who use the CRM; and people who interact with us on Facebook or Instagram or submit a lead form through those platforms. Where a section applies to only one group, we say so.

Information We Collect

• Contact information you provide through our contact form, account signup, or in conversation with an agent — name, email, phone number.
• Account information if you create an account — your saved listings, message history with your agent, and notification preferences.
• Communications — messages you send through our messaging feature, and any email or text correspondence.
• Usage information — pages viewed and listings saved, including through browser local storage if you use these features without an account.
• Device information if you enable push notifications — a notification subscription token tied to your browser/device, not your identity directly.

Information in the CRM (Agents & Clients)

Our agents use the CRM to manage their real estate business. It stores contact records for clients and prospects (name, email, phone, notes, and property preferences), lead and transaction records, call and text logs, showing and task records, and correspondence. Much of this is entered by agents in the ordinary course of serving clients. If you are a client, the agent you work with maintains a record about you here so they can represent you.

When an agent connects a third-party account to their own CRM profile (for example Google Workspace, RingCentral, Dotloop, or Facebook/Instagram), we store the access tokens needed to operate that connection. Sensitive tokens are encrypted before storage. These connections are personal to each agent and are removed when the agent disconnects them.

Facebook & Instagram Data

Agents may connect a Facebook Page and linked Instagram Business account to their CRM profile. When an agent does so, with their permission we access and store only what those features need:

• Page and account identifiers — the Page ID and name, the linked Instagram Business account ID and username, and the agent's app-scoped user ID.
• A Page access token, stored encrypted, used to publish posts the agent creates and to retrieve messages, comments, and lead-form submissions on that Page.
• Messages and comments sent to the connected Page or Instagram account, so the agent can read and reply to them from the CRM inbox.
• Lead-form submissions from Facebook or Instagram Lead Ads, which become lead records for the agent to follow up on.

We use this data only to provide those features to the agent who connected the account. We do not use Facebook or Instagram data for advertising, do not sell it, and do not share it with other third parties except the infrastructure providers listed below that store it on our behalf. Page access tokens are kept only while the connection is active.

Removing your data. An agent can disconnect Facebook/Instagram at any time from the CRM settings, which deletes the connection and its stored token, posts, and inbox items. You can also remove the app from your Facebook Business Integrations settings; Facebook then notifies us and we delete the associated data automatically. For details or to confirm a deletion, see our data deletion instructions at crm.crossroadsrealtymi.com/meta-data-deletion or email us.

How We Use Information

• To connect you with one of our agents and respond to your inquiries
• To operate the saved-listings and messaging features of your account
• To send you service-related communications — replies to your messages, and (only with your separate opt-in) text message or push notifications about new messages
• To maintain and improve the security and functionality of our site

We do not sell your personal information.

Text Message & Push Notifications

Text message and push notifications are sent only if you opt in, and only to notify you that your agent has replied to a message. Message frequency varies with your own conversation activity. Message and data rates may apply. Reply STOP at any time to stop receiving texts, or disable either channel from your account settings. Opting out of texts or push notifications does not affect your account or your ability to use the site.

Who We Share Information With

We don't sell or rent your information to third parties for their own marketing. We share information with service providers who help us operate our site and CRM and are bound to use it only for that purpose: our hosting and database provider (Supabase), our website and application host (Vercel), Google Workspace (email, calendar, and file storage used by agents), RingCentral (agent calling and texting), and Dotloop (transaction paperwork). When an agent has connected Facebook or Instagram, Meta Platforms processes the related messages, comments, and lead data as described above. We use Google Analytics to understand site traffic in aggregate — it doesn't identify you personally. Property listing data displayed on this site comes from our local Multiple Listing Service via the Spark Platform API and is governed by that MLS's own data use rules.

Your Choices

You can update your notification preferences or delete saved listings at any time from your account settings. To request a copy of your data, request deletion of your account, or ask any question about this policy, contact us at gary@crossroadsrealtymi.com or (231) 832-8322.

Children

Our site is not directed at children under 13, and we do not knowingly collect information from them.

Security

We use industry-standard safeguards — encrypted connections, access controls, and a reputable infrastructure provider — to protect your information. No method of transmission or storage is perfectly secure, and we can't guarantee absolute security.

Data Retention

We keep information for as long as it's needed for the purpose it was collected. Client and contact records are retained while we have an active or prospective relationship and as needed to meet real estate recordkeeping obligations. Connected-account tokens (Google, RingCentral, Dotloop, Facebook/Instagram) are kept only while the connection is active and are deleted when the agent disconnects or when the underlying app authorization is removed. You can request deletion of your information as described below.

Changes to This Policy

We may update this policy from time to time. We'll post the revised version here with an updated date.