Privacy Policy

1. Overview

Transac ("we", "us", or "our") operates the Transac platform, a transaction management service for real estate professionals. This Privacy Policy explains how we collect, use, and protect your information when you use our service at https://transac.agency.

2. Information We Collect

• Account information: name, email address, and password when you register.
• Transaction data: property addresses, deal details, contacts, tasks, and deadlines you enter.
• Billing information: processed securely through Stripe. We do not store payment card data.
• Third-party integration tokens: if you connect Dotloop, Gmail, or Google Calendar, we store OAuth access and refresh tokens to sync your data.
• Google account data — described in detail in Section 8.
• Usage data: log data, IP addresses, browser type, and pages visited.

3. How We Use Your Information

• To provide and maintain the Transac platform.
• To process billing and manage your subscription.
• To sync data with third-party services you authorize (e.g., Dotloop, Gmail, Google Calendar).
• To send transactional emails such as account confirmations and billing receipts.
• To improve and develop new features.

4. Data Sharing

We do not sell your personal data and we do not share it with advertisers. We share data only with trusted service providers necessary to operate our platform, including Supabase (database and authentication), Stripe (payments), Resend (transactional email), Vercel (hosting), Dotloop (if connected), and Google (if Gmail or Calendar is connected). These providers are contractually obligated to protect your data. We never use Google user data to serve advertisements or share it with parties outside the providers needed to deliver the user-facing features you authorize.

5. Data Security

We use industry-standard security measures including encrypted connections (HTTPS), row-level security on our database, and secure token storage. OAuth tokens are stored encrypted and are only used server-side. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us. When you disconnect a third-party integration (Gmail, Calendar, or Dotloop), the corresponding OAuth tokens are immediately deleted from our systems.

7. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights, contact us at the email below. You can revoke any third-party integration (including Gmail and Google Calendar) at any time from the Integrations page in your Transac account, or by visiting myaccount.google.com/permissions.

8. Google API Data — Limited Use Disclosure

When you authorize Transac to connect to your Gmail or Google Calendar account, we request the following Google API scopes:

• gmail.readonly — used solely to scan incoming email for messages related to your active real-estate transactions (offers, counter-offers, inspection reports, lender communications). Identified messages are summarized into alerts and stage updates inside Transac. We do not read messages unrelated to your real-estate transactions and we never display, share, or expose Gmail message bodies outside your own Transac account.
• Google Calendar (calendar.events) — when connected — used to write deadlines and key dates from your Transac transactions into your Google Calendar so they appear alongside your other appointments. We read calendar events only to detect scheduling conflicts when proposing showings.
• openid, email, profile — used only to identify your Google account at sign-in and display your email in the Integrations page.

Limited Use compliance: Transac's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we use Google user data only to provide and improve the user-facing features described above; we do not use Google user data to serve advertisements; we do not transfer Google user data to third parties except as necessary to provide or improve user-facing features, comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users; and we do not allow humans to read Google user data unless we have explicit consent to read specific messages, the data is necessary for security purposes, we are required to do so by law, or the data is aggregated and anonymized for internal operations.

You may revoke Transac's access to your Google account at any time from your Google Account permissions page or from the Integrations page within Transac.

9. Third-Party Integrations

When you connect Dotloop, you authorize Transac to access your Dotloop account data on your behalf to create loops, attach offer documents, and track loop activity tied to your Transac transactions. You can revoke this access at any time from the Integrations page in your Transac account.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or by posting a notice in the app.

11. Contact

If you have questions about this Privacy Policy, or to exercise any of the rights described above, contact us at carson@blaylockgroup.com.