Privacy policy

RoostRunner is a transaction coordinator for real estate agents in Utah: it reads a purchase contract and the documents of a deal, and keeps the agent and their buyers on track to closing. This policy says what we collect, what we do with it, and what you can ask us to do. If anything here is unclear, email hello@roostrunner.com, or write to RoostRunner, RoostRunner · 565 S 3040 W, Lehi, UT 84043.

What we collect

• Your account. Your email address and name. If you choose a password, it is stored only as a one-way hash by our sign-in provider. If you sign in with Google, we receive your name, email address and profile picture from Google, and nothing else.
• If you are an agent. Your name, brokerage, phone number, license number and state, and the photo you upload. We check the license against the state's records.
• Transactions. The contract and related documents an agent adds, what is read from them, the deadlines the agent confirms, and the buyers' names and contact details.
• If you are a buyer. The documents you add on your purchase, the questions you ask your agent or Ask Helix, and when you say the earnest money is sent.
• Email activity. Whether an email we sent was delivered, opened or clicked, or bounced.
• Error reports. When something breaks, a report of the error. These are set to carry no IP address, cookies, request contents or account details, and links that grant access are removed from them.

What we use it for

• To run RoostRunner: reading documents, proposing deadlines for the agent to confirm, the list of what is due, the buyer's page, and answers to questions about the deal.
• To send the emails the service consists of: sign-in codes, a buyer's link, and notices about a purchase, such as a question for the agent or a deadline.
• To find and fix problems, and to keep the service secure.

We do not sell personal information, we show no advertising, and we use no advertising or analytics trackers.

Who can see what

• The agent sees their transactions, and what a buyer adds on a purchase, which is shared with them from the start. A buyer's Closing Disclosure is never shared with the agent unless the buyer shares it.
• A buyer sees only what their agent has confirmed and shared, and what they added themselves.
• Our service providers, listed below, handle data only to provide their part of the service to us.
• The law. We disclose information when the law requires it.

Who else handles it

• Supabase: our database, sign-in and file storage.
• Vercel: hosts the website.
• Resend: sends our emails, and tells us whether they were delivered, opened or clicked.
• Anthropic: reads the documents added to a transaction, and answers questions about the deal. Its terms for businesses do not allow it to train its models on what we send.
• Mapbox: finding an address as you type it.
• Sentry: error reports, as described above.
• Google: sign-in, if you choose it.

Information from Google

If you sign in with Google, we use your name, email address and profile picture only to create and identify your account. RoostRunner's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies

We use cookies only to keep you signed in and to finish signing you in. There are no advertising or tracking cookies.

How long we keep it

We keep your account while you use RoostRunner. Ask us to delete it and we will, except where the law requires a record to be kept: a transaction's documents may need to be kept for the period Utah requires of a brokerage's records. A deal that falls through is kept three calendar years after the year it ended.

Your choices

• See, correct or download what we hold about you, or have your account deleted: email hello@roostrunner.com, or write to RoostRunner, RoostRunner · 565 S 3040 W, Lehi, UT 84043.
• A buyer can stop a document being shared, person by person, at any time.

Security

Everything travels encrypted. Access is controlled in the database itself, so each person can reach only what is theirs or shared with them, and our staff do not browse documents. No system is perfectly secure; if something goes wrong that affects you, we will tell you.

Children

RoostRunner is for adults. We do not knowingly collect information from anyone under 18.

Changes

If we change this policy, the new version will be here with a new date. If a change matters to how your information is used, we will tell you by email first.