FRONTSTEP AI, LLC Privacy Policy

Last updated: June 1, 2026

FRONTSTEP AI, LLC (the "Company") is committed to maintaining robust privacy protections for its users. Our Privacy Policy ("Privacy Policy") is designed to help you understand how we collect, use, and safeguard the information you provide to us and to assist you in making informed decisions when using our Service.

For purposes of this Policy, "Site" refers to the Company's website, accessible at https://www.frontstep.ai and any related mobile applications.

"Service" refers to the Company's services accessed via the Site, including AI-powered SMS and email lead qualification and messaging on behalf of real estate professionals and property managers.

The terms "we," "us," and "our" refer to FRONTSTEP AI, LLC. "You" refers to the user of our Site or Service.

By accessing our Site or Service, you accept our Privacy Policy and Terms of Use (found here: https://www.frontstep.ai/terms-of-use) and consent to our collection, storage, use, and disclosure of your Personal Information as described below.

I. INFORMATION WE COLLECT

We collect both Non-Personal Information and Personal Information.

Non-Personal Information includes anonymous usage data, general demographic info, referring/exit URLs, device/platform types, user preferences, and aggregate click data.

Personal Information includes data you voluntarily provide when registering or using the Service, such as your email address, name, phone number, and any other contact information. It also includes data we collect on behalf of our users about their leads and prospects, including name, email address, phone number, and communication history.

1. Information Collected via Technology

To activate the Service, you must submit your email address. You may also provide additional Personal Information to use certain features.

We collect browser and device data (e.g., referring URL, browser type, device type, access times) via cookies and similar tracking technologies to improve the Service. We use both session and persistent cookies.

2. Information You Provide by Registering

When you create an account, you provide Personal Information including your email address, username, and password. You authorize us to collect, store, and use this info as described.

3. Lead and Prospect Data

When you use our Service to qualify leads, we collect and process information about your prospects on your behalf, including their name, email address, phone number, and the content of communications exchanged through our platform. This data is collected and processed solely to provide the Service to you and is not sold or shared with third parties except as described in this Policy.

4. Children's Privacy

Our Service is not directed at children under 13, and we do not knowingly collect information from children under 13. If we learn we have, we will delete such data promptly.

II. HOW WE USE AND SHARE INFORMATION

Personal Information:

We do not sell or rent your Personal Information. We share it only with trusted service providers who help us operate the Service, under strict confidentiality. We may disclose your Personal Information when required by law or to protect rights and safety.

Non-Personal Information:

We use it to analyze trends, improve the Service, and customize user experience. We may share aggregated Non-Personal Information with partners.

In case of business transactions (merger, acquisition), your information may be transferred but remain protected under this Privacy Policy.

III. THIRD-PARTY SERVICE PROVIDERS

To operate the Service, we share certain data with trusted third-party service providers. Each provider is bound by their own privacy policies and data processing agreements. Our current service providers include:

Twilio — Used to send and receive SMS messages on behalf of our users. Lead phone numbers are transmitted to Twilio solely for message delivery.

OpenAI — Used to power AI-generated responses. Conversation content may be transmitted to OpenAI for processing. We do not share personally identifiable information beyond what is necessary for response generation.

Clerk — Used for user authentication and account management. Your email address and account credentials are managed through Clerk's secure authentication platform.

Stripe — Used to process subscription payments. We do not store your payment card information. All payment data is handled securely by Stripe.

Resend & Mailgun — Used to send and receive email communications. Lead email addresses and message content are transmitted through these providers solely for email delivery and inbound lead processing.

MongoDB Atlas — Used to store account, property, lead, and conversation data securely in the cloud.

IV. HOW WE PROTECT INFORMATION

We implement standard security measures (encryption, firewalls, SSL) to protect your data but cannot guarantee absolute security. Your account is password-protected; keep your credentials confidential.

V. DATA RETENTION

We retain your data for as long as your account is active or as needed to provide the Service. Specifically:

Account Data: Retained for the duration of your account and deleted within 30 days of account termination upon request.
Lead and Conversation Data: Retained for the duration of your subscription to allow you to access your lead history. Deleted within 30 days of account termination upon request.
Payment Records: Retained as required by applicable law and Stripe's data retention policies.
SMS and Email Logs: Retained for up to 12 months to support dispute resolution, compliance, and service improvement.

You may request deletion of your data at any time by contacting us at info@frontstep.ai.

VI. GOOGLE USER DATA - RETENTION AND DELETION

Gmail API Data Handling:

When you connect your Gmail account to our Service, we access your Gmail data solely to provide email management and automation features. Here's how we handle your Google data:

Data We Access:

Email messages and metadata (subject, sender, date, content)
Gmail account information necessary for API authentication
OAuth tokens required for accessing your Gmail account

Data Retention:

OAuth Tokens: Stored securely until you disconnect your Gmail account or delete your account
Email Data: We do not permanently store your email content. Email data is accessed in real-time when you use our features
Temporary Cache: Email metadata may be temporarily cached for up to 24 hours to improve performance

Data Deletion:

Immediate Deletion: You can disconnect your Gmail account at any time through your account settings, which immediately revokes our access and deletes stored OAuth tokens
Account Deletion: When you delete your frontstep.ai account, all Google user data including OAuth tokens and any cached data is permanently deleted within 30 days
Upon Request: You may request immediate deletion of your Google user data by contacting us at info@frontstep.ai

Limited Use Disclosure:

frontstep.ai's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

VII. YOUR RIGHTS REGARDING PERSONAL INFORMATION

You may opt out of marketing communications at any time by following unsubscribe instructions or adjusting settings on the Site. We will continue to send important administrative emails regardless of marketing preferences.

You have the right to request access to, correction of, or deletion of your Personal Information at any time. To exercise these rights, contact us at info@frontstep.ai.

VIII. CALIFORNIA PRIVACY RIGHTS (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you.
Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
Right to Opt Out: We do not sell your personal information. If this changes, you will have the right to opt out.
Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, contact us at info@frontstep.ai.

IX. SMS COMMUNICATIONS

By submitting a property inquiry through a connected platform (such as Zillow or AppFolio), you consent to receive automated SMS messages from the property manager or agent powered by frontstep.ai. Message and data rates may apply. Message frequency varies. Reply STOP to opt out at any time. Reply HELP for help. Consent is not a condition of purchase or rental.

frontstep.ai uses Twilio to deliver SMS messages on behalf of property managers and real estate agents. All SMS communications are subject to Twilio's Acceptable Use Policy and applicable carrier regulations including A2P 10DLC requirements.

X. REFERRAL PARTNER DATA

If you participate in our Partner Referral Program, we collect and process your contact information, referral activity, and payout information solely for the purpose of administering the program and processing commissions. This information is not sold or shared with third parties except as required to process payments. For questions about the referral program, contact info@frontstep.ai.

XI. LINKS TO OTHER WEBSITES

We are not responsible for the privacy practices of third-party sites linked or compatible with our Service. Please review their policies before use.

XII. AI AND NON-DISCRIMINATION DISCLAIMERS

Important Notice About AI Use and Non-Discrimination:

Our Service uses AI to automate lead messaging and qualification for real estate professionals. While we design our AI to be as fair and unbiased as possible, the AI may generate outputs that inadvertently reflect biases or discrimination related to factors such as language, ZIP code, income, or other proxies.

We explicitly disclaim liability for any discriminatory outcomes generated by our AI or the use thereof. By using our Service, you acknowledge that the AI outputs are automated and that you, as a user, retain responsibility for compliance with all applicable anti-discrimination laws and fair housing regulations.

You agree not to hold FRONTSTEP AI, LLC liable for any claims arising from alleged discriminatory or biased decisions influenced by the AI outputs generated through the Service.

XIII. CHANGES TO OUR PRIVACY POLICY

We may update this Privacy Policy periodically. Significant changes will be communicated via email or prominent notice on the Site 30 days before taking effect.

XIV. CONTACT US

For questions about this Privacy Policy, please contact:

FRONTSTEP AI, LLC

Email: info@frontstep.ai

Address: PO Box 5043, Haverhill, MA 01835