Privacy Policy

Effective Date: February 19, 2026 | Last Updated: February 19, 2026

GoPiperGo LLC ("we," "our," or "us") operates the Piper AI platform, a managed artificial intelligence lead response service designed for licensed real estate professionals in the Raleigh-Durham Triangle market. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use our services, visit our website at gopipergo.com, or interact with our platform in any capacity.

We are committed to transparency and compliance with all applicable federal and state privacy laws. By using our services, you acknowledge that you have read and understood this policy.

1. Information We Collect

1.1 Information from Real Estate Agent Clients

When you subscribe to GoPiperGo's managed AI services, we collect the following:

• Full legal name and business name

• Business email address and phone number

• Real estate license number and brokerage affiliation

• Billing and payment information (processed by our third-party payment processor; we do not store full credit card numbers)

• Google Calendar credentials (OAuth2 tokens) for showing coordination

• CRM integration preferences and webhook endpoints

1.2 Information from Leads and Prospects

When prospective homebuyers or sellers interact with the Piper AI assistant via SMS, voice, or web chat on behalf of our agent clients, we collect:

• Phone number (in E.164 format) as provided by the lead's carrier

• Name, if voluntarily provided during conversation

• SMS message content exchanged with the Piper AI assistant

• Property inquiry details and showing preferences as communicated during the conversation

• Opt-in and opt-out records including timestamps

• Lead source attribution (e.g., Zillow, Realtor.com, agent website)

1.3 Information Collected Automatically

• IP address and browser type when visiting gopipergo.com

• Device identifiers and session data

• Cookies for website analytics and functionality (see Section 7)

• SMS delivery status and response time metrics from our messaging infrastructure

2. How We Use Your Information

2.1 For Service Delivery

• Processing and responding to inbound lead inquiries via AI-powered SMS, voice, and chat

• Scheduling property showings and coordinating calendar availability

• Qualifying leads and routing escalations to the subscribing agent

• Generating daily performance summaries and lead activity reports for agents

• Maintaining conversation continuity across multiple interactions with the same lead

2.2 For Platform Operations

• Monitoring system performance, uptime, and response latency

• Debugging errors and improving AI response quality

• Ensuring compliance with TCPA, A2P 10DLC, and Fair Housing regulations

• Processing subscription billing and account management

2.3 What We Do NOT Do

We do not sell, rent, or trade personal information to third parties for marketing purposes. We do not use lead conversation data to train general-purpose AI models. We do not use protected class characteristics (race, color, religion, national origin, sex, familial status, disability) in any lead scoring, qualification, or AI response generation. See our Fair Housing Compliance Statement for details.

2.4 Mobile Information Privacy

Mobile information, including phone numbers collected through SMS opt-in, will not be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

2.5 Service Messages vs. Marketing Messages

GoPiperGo distinguishes between two types of SMS communications:

• Service Messages (Transactional): Messages related to your inquiry, lead response, showing coordination, account updates, and service-related notifications. These require your consent via the primary SMS consent checkbox on our sign-up form.
• Marketing Messages (Promotional): Messages containing special offers, product updates, promotional content, and tips. These require separate, optional consent via a dedicated marketing consent checkbox. Marketing consent is never required to use our services and this checkbox is unchecked by default.

You may opt out of marketing messages independently of service messages at any time by replying STOP to any marketing message, or by contacting us at support@gopipergo.com. Opting out of marketing messages will not affect your receipt of service-related messages.

3. Data Sharing and Third-Party Services

We share personal information only as necessary to deliver our services and only with the following categories of service providers:

--------------------- ------------------------ ------------------------

Service Provider** **Purpose** **Data Shared

Twilio Inc. SMS and voice Phone numbers, message communications delivery content, delivery status

OpenAI AI language processing Conversation text (no for lead conversations PII labels attached; API usage only, not training data)

Supabase (AWS) Secure database hosting All platform operational for lead and data, encrypted at rest conversation records

Google (Calendar Showing scheduling and Agent calendar API) calendar integration availability, showing appointment details

Cloudflare Website hosting, CDN, Website visitor IP and DDoS protection addresses, session data

Payment Processor Subscription billing Agent billing details (we do not store card numbers)

--------------------- ------------------------ ------------------------

We may also disclose information when required by law, subpoena, or court order, or to protect the rights, safety, or property of GoPiperGo, our clients, or others.

4. Data Security

We implement industry-standard security measures to protect personal information:

• Encryption in Transit: All data transmitted between our systems, third-party APIs, and end users is protected by TLS 1.2 or higher. All webhook endpoints, API calls, and SMS transmissions use HTTPS.

• Encryption at Rest: Our database infrastructure (Supabase on AWS) uses AES-256 encryption at rest for all stored data including lead records, conversation logs, and agent credentials.

• Access Controls: API credentials are managed through secure environment variables. Database access is restricted via Row Level Security (RLS) policies. Administrative access requires authenticated credentials.

• Infrastructure Security: Our hosting environment employs security headers (Content-Security-Policy, X-Frame-Options, X-Content-Type-Options), firewall rules, and automated monitoring.

• Error Handling: Failed operations trigger retry mechanisms with exponential backoff rather than exposing data in error states. Escalation workflows ensure graceful degradation.

5. Data Retention and Purging

5.1 Active Account Data Retention

While an agent's subscription is active, we retain lead and conversation data as needed to provide continuous service. This includes maintaining conversation history for AI context continuity, lead stage tracking, and showing coordination.

Agents are responsible for exporting relevant lead data to their own CRM system. GoPiperGo provides CRM webhook integration and data export capabilities to facilitate this transfer. Once data has been confirmed transferred to the agent's CRM, operational conversation data in our system is retained only as long as necessary for service delivery and compliance purposes.

5.2 Compliance Record Retention

In accordance with TCPA and A2P 10DLC requirements, the following records are retained for a minimum of four (4) years:

• SMS opt-in consent records with timestamps

• STOP/opt-out request records with timestamps

• AI disclosure delivery confirmations

• DNC registry scrub logs

5.3 Conversation Data Purging

Lead conversation content (message bodies, AI-generated responses, qualification notes) is purged from our operational database according to the following schedule:

• Active leads: Retained for the duration of active engagement plus 90 days after the lead is archived or opted out

• Completed transactions: Conversation data is purged 90 days after the showing is completed or the lead is marked as closed, provided the agent has exported relevant data to their CRM

• Ghost/nurture leads: Purged 180 days after the final nurture attempt with no response

*Agents may request earlier purging of specific lead data at any time by contacting support@gopipergo.com.*

6. Account Deletion and Data Removal

6.1 Agent Account Cancellation

When an agent cancels their GoPiperGo subscription:

• A 30-day grace period begins during which the agent may export all remaining lead data, conversation logs, and showing records via CRM webhook or data export

• After the grace period, all operational data associated with the agent's account is permanently deleted from our systems within 14 business days, including lead records, conversation histories, showing data, and agent profile information

• Compliance records (opt-in/opt-out logs) are retained for the required 4-year period even after account deletion, as required by federal regulations

• OAuth tokens (Google Calendar, Gmail) are immediately revoked upon account cancellation

6.2 Lead Data Removal Requests

Leads who have interacted with the Piper AI assistant may request deletion of their personal data by:

• Texting STOP to opt out of all communications (this triggers immediate cessation of messages and flags the record for purging)

• Contacting support@gopipergo.com with their phone number and a deletion request

Upon receiving a valid deletion request, we will remove the lead's conversation content and personal identifiers within 30 days, while retaining anonymized compliance records as required by law.

7. Cookies and Website Analytics

Our website at gopipergo.com uses minimal cookies necessary for site functionality. We may use analytics services to understand website traffic patterns. We do not use advertising cookies or tracking pixels. Visitors may control cookie preferences through their browser settings.

8. Children's Privacy

Our services are designed for licensed real estate professionals and are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a minor, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. We will notify active subscribers via email before any material changes take effect. The "Last Updated" date at the top of this policy indicates the most recent revision.

10. Contact Us

If you have questions about this Privacy Policy, your data, or wish to exercise any rights described herein, please contact us:

Email: support@gopipergo.com

Phone: (919) 278-7202

Fuquay-Varina, NC 27526