Privacy Policy

Effective: November 23, 2026

1. Who We Are

Elliott Cove ("Cove", "we", "our") is the internal operating platform for Elliott Properties LLC ("Elliott Properties"), used by our agents, brokers, transaction coordinators, marketing staff, and administrators. Access is invitation-only.

2. What We Collect

We collect only the data needed to run your brokerage business:

• Account info: name, email, phone, role, office assignment
• Production data: leads, transactions, listings, marketing requests, eSign documents
• Payment data: Stripe customer ID + payment history (full card data never stored on our servers — it lives only with Stripe)
• Device data: push notification token, platform (iOS/Android), app version
• Usage telemetry: anonymized screen views and feature usage for product improvement

3. How We Use It

• Operate the platform you signed in to use
• Score leads, route deals, generate AI insights tailored to YOUR pipeline
• Send transactional notifications (new lead alerts, eSign updates, payment receipts)
• Bill subscription fees, transaction fees, and marketing orders via Stripe
• Provide aggregated brokerage-level analytics to authorized administrators

We do not sell your data. We do not use it for third-party advertising. We do not share it with competitors.

4. Third-Party Services

We use the following vendors to provide Cove. Each is GDPR/CCPA-compliant and bound by Data Processing Agreements:

• Stripe — payment processing and PCI-compliant card storage
• OpenAI — AI text and image generation. Your prompts are sent to OpenAI but are NOT used to train their models per our Enterprise terms
• Google — Gemini AI for image generation, Gmail / Google Business Profile integrations (only when YOU connect them)
• Expo / EAS — push notification routing and OTA app updates
• Cloudinary — media (photos/videos) hosting for marketing content
• Meta (Facebook / Instagram) and LinkedIn — social posting (only when YOU connect them)
• MongoDB Atlas — encrypted database hosting

5. Data Retention

Account data is retained while your account is active. After deactivation, personal identifiers are removed within 30 days. Aggregated, anonymized statistics may be retained for brokerage analytics. Transaction records subject to legal/regulatory retention requirements (typically 7 years for real estate records) are kept as required by law.

6. Your Rights

You can:

• Access and download your data — email privacy@elliottproperties.com
• Request correction of inaccurate data
• Request deletion of your account (subject to legal retention requirements)
• Opt out of non-essential notifications via Settings → Notifications

California residents: you have additional rights under CCPA. EU residents: you have rights under GDPR. Contact us using the address above.

7. Security

• JWT-based authenticated sessions with secure HTTPS-only cookies
• Encryption at rest (MongoDB) and in transit (TLS 1.2+)
• Role-based access controls (agent / broker / TC / marketing / admin)
• Stripe PCI-DSS Level 1 for payment data
• Regular dependency security scanning and updates

If you believe your account is compromised, contact security@elliottproperties.com immediately.

8. Children

Cove is a business tool exclusively for licensed real estate professionals. We do not knowingly collect data from anyone under 18.

9. Changes to This Policy

We will notify you in-app and by email at least 30 days before any material change to this Privacy Policy. The current effective date is shown at the top of this page.

10. Contact

Elliott Properties LLC
Privacy Inquiries: privacy@elliottproperties.com
Security Issues: security@elliottproperties.com
General Support: support@elliottproperties.com