Privacy Policy Effective date: September 3, 2026 · Last updated: October 17, 2026 This Privacy Policy explains how Renested ("Renested," "we," "us," or "our") collects, uses, discloses, and protects information when you visit renested.ai, create a Renested account, or interact with Rover and the AI Agents, Lead Pages, Booking Pages, and related features built by Renested (together, the "Service"). On this page Who this policy covers Information we collect How we use information Rover and AI-assisted processing Our legal bases for processing Cookies and similar technologies Google Calendar data How we share information Data retention How we protect information Your rights and choices International data transfers Children's privacy Third-party links and integrations Changes to this policy Contact us 1. Who this policy covers This policy applies to three groups of people: Visitors who browse renested.ai or submit a form (for example, the Contact page, a playbook request, or a pre-launch waitlist). Members: the Realtors and mortgage professionals who hold a Renested account (including a free pilot account) and configure AI Agents, Lead Pages, Booking Pages, and integrations. End clients: the buyers, sellers, and borrowers who message a Member's Rover-powered AI Agent on a website widget or WhatsApp, or who receive messages a Member sends through Rover. When Renested processes an end client's information on behalf of a Member, Renested acts as a service provider/processor for that Member, who remains responsible for how they use that data in their own business. 2. Information we collect Information you provide directly Contact and form data: name, email address, phone number, profession, country, and message content submitted through the Contact page, playbook requests, or similar forms. Account data: name, business email, phone number, brokerage/company name, professional license information you choose to add, and password (stored using industry-standard hashing). Billing data: billing name, address, and payment method details. Full card numbers are processed by our third-party payment processor and are not stored on Renested's own servers. Content you upload: knowledge-base documents, listing information, scripts, files you share in your chats with Rover, and other material you use to train or configure an AI Agent. Your chats with Rover: what you type or say to Rover. When you talk to Rover, your speech is turned into text so Rover can answer. Leads and clients you add: names, contact details, notes and dates you give Rover so it can follow up for you. Communications: messages you send us for support, sales, security, or partnership inquiries. Information collected through use of the Service End-client conversation data: messages, contact details, and qualifying answers an end client provides to a Member's AI Agent on Web or WhatsApp. Feedback: thumbs up and thumbs down on Rover's and your Agents' replies (see section 4). Usage and product data: features used, Agents created, pages published, appointments booked, and similar activity within your account. Device and log data: IP address, browser type, device identifiers, referring pages, and timestamps. Integration data: when you connect Google Calendar, Calendly, Follow Up Boss, or another supported app, Rover reads only what it needs from that app to do the work you ask for. If you connect Follow Up Boss, Rover reads your contacts' names, renewal dates and mortgage rates to do the work you ask for. We never sell your contacts or share them with anyone except the services that run Rover for you. Information from other sources We may receive limited information from payment processors, communication providers (such as WhatsApp Business), analytics providers, and publicly available professional-licensing sources used to verify a Member's stated profession. When you ask Rover about a property, it may read public listing pages and public web search results to answer you. 3. How we use information Provide, operate, secure, and improve the Service, including Rover, AI Agents, Lead Pages, and Booking Pages. Create and administer accounts, process payments, apply Founding plan eligibility, and handle refund or cancellation requests. Route end-client conversations and leads to the correct Member account and, where configured, to that Member's connected calendar or CRM. Send the messages and follow-ups a Member sets up and approves (see section 4). Respond to support, sales, security, accessibility, and partnership inquiries. Send transactional messages (account, billing, security) and, where you have consented, product updates and marketing communications you can opt out of at any time. Monitor for fraud, abuse, and violations of our Terms of Service or Acceptable Use requirements. Comply with legal obligations and enforce our agreements. 4. Rover and AI-assisted processing Rover uses artificial-intelligence and large-language-model technology to draft responses, ask qualifying questions, summarize conversations, and prepare (not finalize) follow-up actions such as calendar holds or message drafts. What this means for you: publishing content, sending to a client, and other consequential actions require explicit Member review and approval inside the product. Rover does not approve loans, issue pre-approvals, determine borrower eligibility, invent listing details, or provide licensed real-estate, mortgage, legal, tax, appraisal, or financial advice. Renested does not use conversation content to make decisions that have a legal or similarly significant effect on an individual without a human being able to review that decision. Estimates, CMAs and pre-qualified amounts Value estimates and CMAs: Rover can prepare a value estimate or a comparative market analysis (CMA) from public data, such as nearby sold homes, with the sources it used. These are estimates, not appraisals, and each one says: "AI estimate from public data, not an appraisal. Please check before relying on it." Sold prices: Rover may read sold prices from public listing pages, with a link to the source and the date. Each sold price shown to the Member carries a note to confirm it on their MLS before relying on it. Rover shows short facts and a link only. It does not copy listing photos or descriptions, and it keeps nothing from those pages beyond the request. Sending a CMA to a client: a CMA goes to a client only after the Member previews it and says yes. The emailed CMA says: "Prepared for {client} by {pro name}, {brokerage name}. Data as of {date}. This is an estimate from public data, not an appraisal." It also lists its sources. Mortgage professionals: value estimates go to the Member only. Rover does not email a value estimate to a mortgage client. Pre-qualified amounts: for mortgage professionals, Rover can calculate a pre-qualified amount from numbers the Member enters, using public Canadian rules, and shows its working. This is shown to the Member only. It is not a pre-approval; only a lender can issue one. Other data answers (market numbers, rates, public facts) carry the note: "From AI using public data. It may be wrong, so please check before you rely on it." Deadline reminders: Rover lists the dates it finds in a Member's documents and reminds them before each one. Members should always check the dates in the documents with their brokerage or lawyer. Texts and follow-ups to your leads and clients Rover sends texts and emails to a Member's leads and clients only as the Member sets them up and approves. Consent clock: Rover follows up with a lead for up to 2 years after a deal, or 6 months after an enquiry. After that it stops, unless the person has said yes in writing. The Member gives the date when adding the lead. A lead's first message says: "{Pro name} may follow up with you about {topic}. Reply STOP any time and you won't hear from us again." Every message carries the Member's name, a way to reach them, and "Reply STOP". Texts go only from Canadian numbers, between 9 am and 8 pm in the recipient's time zone. When someone replies STOP, all texts from that Member to that number stop at once. Rover replies once ("You're unsubscribed. You won't get more texts from {Pro name}.") and tells the Member. Rover records where each number came from. Help improve Rover (feedback) Members can mark Rover's replies with a thumbs up or down. Rover asks once: "Help improve Rover? Our team may read replies you mark with a thumbs down." The Member chooses Yes or No; nothing is selected for them. If the Member says yes, our team may read replies marked with a thumbs down, to fix what went wrong. Every time our team reads one, it is logged. If the Member says no, or turns it off later in Settings, our team sees only the counts, never the words. Turning it off hides past text from us at once. Visitors can also mark an Agent's replies. Your messages and feedback may be reviewed to improve this service. When our support team can see a Member's account Our support team sees account basics only: the plan, the app version, and error codes that contain no Member content. To look at a Member's leads or chats for a support request, we ask first: "Let Rover Support see my leads and chats for this request for 24 hours. You can stop it any time." That access is for that request only, ends by itself after 24 hours, and every view is logged. "Make me forget everything" and deleting your account When you tell Rover to forget, it erases its memories (including saved decisions), your chat files, your chats with Rover, hand-off records between Rover's staff, talk sessions and preferences. Your account, leads, Agents, Rover's staff, settings, Knowledge, campaigns and credits stay. Deleting your account is a separate request and removes your account data as described in section 9. Where an AI Agent's output is shared with an end client, we encourage (and a Member's own professional obligations may require) clear disclosure that the end client is interacting with an AI-assisted system rather than a human agent. How AI is used on Rover by Renested You may be talking to an AI assistant Real estate and mortgage professionals use Renested to answer people quickly. When you chat on a professional's website, on WhatsApp, or through their Facebook Page or Instagram account, the first replies may come from an AI assistant that works for that professional. The chat window is labelled "AI assistant". What the AI assistant does It answers common questions using information the professional gave it. It can take your name and how to reach you, so the professional can follow up. It can offer times and book a meeting with the professional. It can pass the conversation to the professional. When a person takes over, the chat says so. What it does not do It does not give legal, financial, mortgage or tax advice. It does not decide anything about a loan, a rate, an approval, a price or a contract. It does not pretend to be a person. It can be wrong An AI assistant can make mistakes or misunderstand you. Confirm anything that matters to you with the licensed professional you are dealing with. A licensed professional is responsible The AI assistant helps; it does not replace the professional. The professional reads the conversations, follows up with you, and makes every decision that needs a licence. Your information What you type in the chat is shared with the professional you are contacting and is handled by Renested for them. To produce an answer, the words of your conversation are sent to an AI provider. The companies we use are listed in section 8, under "Who helps us run Rover by Renested". Your messages and feedback may be reviewed to improve this service. This policy explains what is kept and for how long. You can ask the professional not to contact you again at any time, and you can ask us what information we hold about you: support@renested.ai. For professionals using Renested Your assistant only says what your own information supports. Where it does not know, it says so and offers to connect the person with you. You can read every conversation, take over any of them, and pause your assistant at any time. You remain responsible for your advertising, your licence disclosures and what is promised to your clients. 5. Our legal bases for processing Renested is based in Canada and primarily serves Members in Canada and the United States. Depending on where you are located, we rely on one or more of the following bases to process personal information: performance of a contract with you (for example, operating your Renested account), our legitimate interests in operating and securing the Service, your consent (for example, for optional marketing communications or the "Help improve Rover" feedback choice), and compliance with legal obligations. If you are located in a jurisdiction that grants additional statutory rights (such as the European Economic Area, the United Kingdom, or a U.S. state with a comprehensive privacy law), the applicable provisions of that law apply to our processing of your information in addition to this policy. 6. Cookies and similar technologies We use strictly necessary cookies to operate renested.ai and the product (for example, to keep you signed in), and, where enabled, analytics cookies to understand how visitors use our site so we can improve it. You can control cookies through your browser settings; disabling non-essential cookies will not affect your ability to use core features of the Service, but may affect how the marketing site performs. 7. Google Calendar data When you connect a Google account, Renested requests the calendar.events, calendar.freebusy, userinfo.email, and openid scopes. We use this access to read your busy times so we can offer accurate, free appointment slots to visitors on your website, to create a calendar event for each confirmed booking, to correct that event's title when needed, and to store your connected email address so we can identify and manage the connection. We do not read your email, files, or contacts. Google API Services User Data Policy: Renested's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Workspace APIs adheres to the Google User Data Policy, including the Limited Use requirements. Renested uses third-party AI providers, listed in section 8, to power its assistant. No Google user data is sent to these providers. Renested does not use Google user data to develop, improve, or train generalized AI or machine-learning models, and does not sell Google user data. You can disconnect your Google account at any time from your calendar settings inside the product. Disconnecting deletes the stored authorization tokens for that connection. 8. How we share information We do not sell personal information. We share information only in the following circumstances: With the relevant Member: when an end client messages a Member's AI Agent, that conversation and the contact details provided are shared with the Member who owns that Agent. Service providers: hosting and infrastructure providers, our payment processor, AI providers, email and messaging delivery providers (including WhatsApp Business infrastructure), scheduling integrations (Google Calendar, Calendly), app-connection providers, analytics providers, and other vendors who process data on our behalf under contractual confidentiality and data-protection obligations. Legal and safety reasons: to comply with a subpoena, court order, or other legal process; to enforce our Terms of Service; or to protect the rights, property, or safety of Renested, our Members, or the public. Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality arrangements. With your direction or consent: where you have asked us to share information with a specific third party. Mobile phone numbers and text-message opt-in data collected by Rover by Renested are never shared with or sold to third parties or affiliates for marketing or promotional purposes. Who helps us run Rover by Renested Rover by Renested ("Renested") is based at 133 Richmond St W Ste 207, Toronto, ON M5H 2L3, Canada. To run the service we use other companies. Some of them handle information that you or your visitors give us. The law calls these companies subprocessors. This section lists every one, what it does for us, and where it works. We only give each company what it needs to do its job. Companies that handle customer or visitor information Company What it does for Renested What it may see Where MongoDB, Inc. (MongoDB Atlas, on Amazon Web Services) Our main database Account details, leads, conversations, bookings, settings United States (Virginia) Hetzner Online GmbH The servers that run the Renested app Everything the app handles while it is being processed United States (Virginia) Cloudflare, Inc. File storage for uploads, and our domain name service Documents, images and files you upload United States and global network Pinecone Systems, Inc. Search over the documents you give your AI assistant Pieces of your uploaded documents, as search records United States OpenAI, L.L.C. AI models that write answers, and speech-to-text The text of a conversation and the document pieces needed to answer it; audio you dictate United States Anthropic, PBC AI models that write answers, including your Agents' answers to website visitors The text of a conversation and the document pieces needed to answer it United States Google LLC AI models (Gemini); Sign in with Google; Google Calendar when you connect it Conversation text for answers; your name and email for sign-in; calendar availability and the bookings you make United States xAI Corp. AI models that write answers The text of a conversation and the document pieces needed to answer it United States Deepgram, Inc. Turning your speech into text when you dictate or talk to Rover Audio you speak to the app, and its transcript United States ElevenLabs, Inc. Rover's spoken voice The text Rover speaks to you United States AssemblyAI, Inc. Speech-to-text when you dictate Audio you speak to the app, and its transcript United States Brave Software, Inc. (Brave Search) Public web searches Rover makes to answer you The search words Rover sends (not your account or your contacts) United States Composio Connecting the apps you choose, such as Follow Up Boss or your calendar What Rover reads from or sends to a connected app to do the work you ask for United States TypeSafe Automated checks: whether an ad's or a message's wording is supported by your facts before you approve it, whether your Agent's practice answers are right, and how a support request is sorted The text being checked: ad text and listing details, a message before it is sent, your Agent's practice answers and the source passages they rest on, and the subject and first message of a support request United States Meta Platforms, Inc. (WhatsApp Business Platform, Facebook and Instagram) Sending and receiving WhatsApp messages when you connect a number; receiving leads from your Facebook lead forms and messages from your Facebook Page and Instagram account; preparing ads you approve, when you connect your Facebook account Your contacts' phone numbers and the messages sent through WhatsApp, Messenger and Instagram; the leads from your lead forms; the ad text and listing details you approve United States and global network Twilio Inc. Phone numbers, calls with Rover, and the text messages you and Rover send Phone numbers, call audio while a call is connected, and message content United States Follow Up Boss Copying your new leads into your Follow Up Boss account, and reading your contacts when you ask Rover to work with them, when you connect it The details of each lead it copies; your contacts' names, renewal dates and mortgage rates United States Stripe, Inc. Taking payments for your Renested plan Your billing name, email and payment details (card numbers go to Stripe, not to us) United States Zoho Corporation Sending our email (booking codes, invitations, support replies) Recipient email addresses and the content of those emails United States / Canada OpenCage GmbH Working out the time zone and country of a conversation The approximate location (latitude and longitude) of the person who starts the conversation, when their browser shares it Germany Companies that help us but do not receive customer information Company What it does UptimeRobot Checks that our website and service are reachable GitHub, Inc. Stores our program code and runs our tests AI providers and your information When Rover or your AI assistant answers, the words of that conversation and the parts of your information needed for the answer are sent to one of the AI providers above. We do not send them your whole account. They use it only to produce the answer. Changes to this list We will update this list before a new company starts handling customer information. If you want an email when this list changes, write to support@renested.ai. 9. Data retention We retain personal information for as long as needed to provide the Service, comply with our legal and contractual obligations (including tax and accounting requirements), resolve disputes, and enforce our agreements. Specifically: While your account is open: we keep your information until you delete it. Files you share in Rover chats are kept as long as the chat exists. You can delete any file at any time. "Make me forget everything" erases the items listed in section 4 at once. If your free pilot ends without a paid plan: your account becomes read-only. You can still sign in, see and download everything. We keep your data for 90 days, send you reminders, and then delete it. Choosing a paid plan in those 90 days restores everything. When you delete your account: we delete or anonymize your personal information within a reasonable period, except billing and audit records, which we keep for 6 years as tax law requires. Thumbs-down text and its view log: 12 months, or until the Member turns "Help improve Rover" off (text hidden at once) or deletes the account. Support access log: 12 months. 10. How we protect information We use administrative, technical, and physical safeguards designed to protect personal information, including encryption of data in transit, access controls limiting who inside Renested can view account and conversation data, logged staff access, and monitoring for unauthorized access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify affected individuals and any applicable regulator as required by law. 11. Your rights and choices Depending on where you live, you may have the right to request access to, correction of, deletion of, or a copy of your personal information, to object to or restrict certain processing, and to withdraw consent for optional communications at any time. Canadian residents may exercise rights available under applicable federal and provincial privacy law (including PIPEDA); residents of U.S. states with comprehensive privacy laws (such as California's CCPA/CPRA) may exercise the rights those laws provide, including the right to opt out of the sale or sharing of personal information. Renested does not sell personal information. In the app you can download your information, delete files, chats, leads or your whole account, turn "Help improve Rover" on or off, and disconnect any connected app at any time. To exercise any of these rights, contact us at info@renested.ai. We will verify your request and respond within the timeframe required by applicable law. If you are an end client of a Member's AI Agent and want to exercise a data right, you may also contact the Member directly, since they control how the AI Agent's leads are used in their own business. If we can't resolve a privacy concern, Canadian residents can contact the Office of the Privacy Commissioner of Canada. 12. International data transfers Renested and its service providers may process and store information in Canada, the United States, or other countries where our infrastructure or vendors operate. When information is processed in another country, the laws of that country apply to it there. Where required, we use appropriate safeguards for cross-border transfers of personal information. 13. Children's privacy The Service is intended for licensed real estate and mortgage professionals and their adult clients. It is not directed to, and we do not knowingly collect personal information from, children. If you believe a child has provided us with personal information, please contact us so we can delete it. 14. Third-party links and integrations The Service may link to or integrate with third-party products such as Google Calendar, Calendly, Follow Up Boss, and WhatsApp. Those third parties have their own privacy practices, and this policy does not cover how they handle your information. 15. Changes to this policy We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice (such as an email or in-product notice). Your continued use of the Service after a revised policy takes effect constitutes acceptance of the changes. 16. Contact us If you have questions about this Privacy Policy or how Renested handles your information, contact us at info@renested.ai, or write to us at Rover by Renested, 133 Richmond St W Ste 207, Toronto, ON M5H 2L3, Canada. Rover by Renested is a business name of 9 Yards Financial Corp., Ontario, Canada. Our privacy officer is [privacy officer], who is responsible for this policy and for how we handle personal information.