Privacy Policy

Effective Date: April 3, 2026 — Last Updated: April 3, 2026

GuideAhead Services, LLC, a Georgia limited liability company, doing business as Volaire Studio (“we,” “us,” or “our”), operates the Elevate platform (“Platform”) available at elevate.volairestudio.com, agent websites hosted under the Volaire Studio domain, and related services (collectively, the “Services”).

This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you access or use our Services. By using our Services, you agree to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, phone number, professional license information, brokerage affiliation, and profile details provided during registration and onboarding.
• CRM Data: Contact records, deal/transaction information, activity logs, notes, tags, and communication history that you create or import into the Platform.
• Content: Website content, blog posts, neighborhood guides, market reports, and other materials you create or generate through the Platform.
• Communications: Messages, support requests, and feedback you send to us.
• Payment Information: Billing details processed through our payment processor (Stripe). We do not store full payment card numbers on our servers.

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, click patterns, session duration, and interaction data within the Platform.
• Device Information: Browser type, operating system, IP address, device identifiers, and screen resolution.
• Website Visitor Analytics: Our Signal Intelligence system collects anonymized visitor behavior data on agent websites, including page views, referral sources, time on page, and property interest signals. This data is used to provide agents with visitor insights and lead identification.
• Cookies and Similar Technologies: We use essential cookies for authentication and session management. See Section 7 for details.

1.3 Information from Third-Party Integrations

When you connect third-party services to the Platform, we may receive data from those services:

• CRM Integrations (Follow Up Boss, HubSpot, kvCORE, LionDesk, etc.): Contacts, deals, and activity history from your existing CRM.
• Email & Calendar (via Nylas): Email metadata, calendar events, and contact information from your connected email account. We access email content only as necessary to log communication activities.
• MLS Data (via Home Junction): Property listings, market statistics, and neighborhood data. MLS data is subject to the terms of your MLS board and is not permanently stored beyond authorized cache periods.
• Schools Data (via GreatSchools): School ratings and location data used on agent websites. Per our agreement, this data is cached in-memory only and not stored in our database.
• Google Places: Business reviews and location data for agent profile enrichment.

2. How We Use Your Information

• To provide, maintain, and improve the Elevate Platform and agent websites.
• To process CRM operations including contact management, deal tracking, and communication logging.
• To power AI-assisted features including lead scoring, contact briefs, smart tagging, nurture sequence generation, and content creation using Anthropic’s Claude AI models.
• To generate intelligence insights, analytics, and recommendations for your real estate business.
• To send transactional communications (account verification, password resets, sync notifications).
• To send nurture sequences and automated email communications on your behalf to your contacts.
• To detect, prevent, and address security issues, fraud, and abuse.
• To comply with legal obligations and enforce our Terms of Service.

3. AI Data Processing

The Platform uses artificial intelligence (Anthropic Claude) to provide enhanced features. When AI processes your data:

• Contact data, activities, deals, and visitor behavior may be sent to Anthropic’s API for analysis, scoring, and content generation.
• AI-generated outputs (lead scores, contact briefs, insights, email drafts) are stored on our Platform.
• We do not use your data to train AI models. Anthropic’s API usage policy prohibits using API inputs for model training.
• AI-generated content is clearly identified within the Platform and should not be relied upon as legal, financial, or professional advice.
• All AI interactions are logged for usage tracking and billing purposes in our ai_usage_logs system.

4. How We Share Your Information

We do not sell your personal information. We may share data with:

• Service Providers: Third-party processors that help us operate the Platform:
  • Supabase (database hosting, authentication, storage)
  • Vercel (application hosting and CDN)
  • Anthropic (AI processing)
  • Resend (transactional email delivery)
  • Nylas (email and calendar synchronization)
  • Stripe (payment processing)
  • Inngest (background job processing)
  • Home Junction (MLS data)
  • GreatSchools (school data)
  • Google (Places API, Maps)
• Your Contacts: When you send emails, nurture sequences, or other communications through the Platform, your contacts receive those messages.
• Website Visitors: Information you choose to display on your agent website (name, photo, contact details, listings) is publicly visible.
• Legal Requirements: When required by law, subpoena, court order, or to protect our rights, safety, or property.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.

5. Data Security

• All data is encrypted in transit (TLS) and at rest.
• CRM integration credentials are encrypted using AES-256-GCM before storage.
• Row-level security (RLS) ensures each organization can only access its own data.
• Authentication uses Supabase Auth with support for multi-factor authentication (MFA).
• API keys and secrets are never exposed to client-side code.
• We maintain audit logs of all data access and modifications.
• Account lockout activates after 5 failed login attempts.

6. Data Retention

• Active Accounts: Data is retained for the duration of your subscription.
• Closed Accounts: Upon account closure, we retain data for 30 days to allow for reactivation, then permanently delete it.
• Audit Logs: Retained for 2 years for compliance purposes.
• AI Usage Logs: Retained for 1 year for billing and analytics.
• MLS Data: Cached data is refreshed per MLS board requirements and not retained beyond authorized periods.
• Backup Data: Removed from backups within 90 days of deletion from production.

7. Cookies and Tracking

We use the following types of cookies:

• Essential Cookies: Required for authentication, session management, and security. Cannot be disabled.
• Analytics Cookies: When agents enable Google Analytics (GA4) on their websites, Google’s cookies are set on their agent site. This is configured per-agent.
• Signal Intelligence: Our proprietary visitor tracking script collects anonymized behavioral data on agent websites to provide lead intelligence. This uses first-party cookies only.

We do not use advertising cookies or sell tracking data to third parties.

8. Your Rights

All Users

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and associated data.
• Data Portability: Request your data in a machine-readable format.
• Withdrawal of Consent: Disconnect third-party integrations at any time.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, and shared.
• Right to delete personal information.
• Right to opt-out of the sale of personal information. We do not sell personal information.
• Right to non-discrimination for exercising your privacy rights.

Georgia Residents

Georgia does not currently have a comprehensive consumer data privacy law. We comply with all applicable Georgia state laws regarding data protection and security breach notification (O.C.G.A. § 10-1-912).

9. Children’s Privacy

The Platform is designed for licensed real estate professionals and is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.

10. International Data

Our services are hosted in the United States. If you access the Platform from outside the United States, your data will be transferred to and processed in the United States. By using the Platform, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last Updated” date. Continued use of the Platform after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

GuideAhead Services, LLC dba Volaire Studio
Email: privacy@volairestudio.com
Website: volairestudio.com