Privacy Policy

Who we are

Newmarket Edge LLC ("Newmarket Edge", "we", "us", or "our") operates the Newmarket Edge agent platform at app.newmarketedge.com, our marketing site at newmarketedge.com, our consumer tools at newmarkethq.com, and the Newmarket Edge mobile apps for licensed California real estate agents and their clients (collectively, the "Services"). This policy explains what we collect, how we use and share it, how long we keep it, and the rights you have. It applies to all of the Services above.

Newmarket Edge is based in California and offers the Services to California real estate professionals and consumers. This policy is written to comply with California law, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the "CCPA/CPRA"), the California Online Privacy Protection Act ("CalOPPA"), the CAN-SPAM Act, and the Telephone Consumer Protection Act ("TCPA").

Notice at Collection (California)

At or before the point we collect your personal information, California law requires that we tell you the following. The full detail is in the sections that follow.

• What we collect: identifiers (name, email, phone, DRE license number), account and profile details, client information you enter, connected-account data (Gmail/Outlook/calendar), payment status (via Stripe), device and usage data, consumer lead details, and — only if you enroll — voice samples. See "Information we collect."
• Why: to provide, secure, and improve the Services; match consumers with agents; communicate with you; and meet legal obligations. See "How we use information."
• Sensitive personal information: we collect limited sensitive information (account log-in credentials and, if you enroll, voice recordings). We use it only to provide the Services and for other purposes the law permits without an option to limit. See "Sensitive personal information."
• Do we sell or "share" it? No. We do not sell personal information and do not share it for cross-context behavioral advertising, and we have not done so in the preceding 12 months.
• Website activity: on newmarketedge.com and newmarkethq.com we collect the pages viewed, buttons and links clicked, forms started or finished (not what you type in them), and the referring site or campaign, used to improve our websites; kept 24 months; not sold or shared. See "Cookies and tracking."
• How long we keep it: for the periods described in "Data retention," and no longer than reasonably necessary for the purpose collected.

Information we collect

We collect the following categories of personal information, from the sources noted, over the preceding 12 months:

Payment card numbers are collected and processed directly by Stripe; we never see or store your full card number.

Sensitive personal information

Under the CPRA, some information is treated as "sensitive." The only sensitive personal information we handle is (a) your account log-in credentials, and (b) if you choose to enroll, voice recordings used to attribute speakers in meeting transcripts.

We use sensitive personal information only to perform the Services you request, to secure your account, to prevent fraud and abuse, and for the other limited purposes permitted by California Civil Code § 1798.121 — never to infer characteristics about you and never for advertising. Because we do not use or disclose sensitive personal information beyond those permitted purposes, the CPRA "right to limit" is honored by default; you may still delete voice samples at any time in Settings → Voice.

Voice recordings.If an agent chooses to, they can record a short voice sample, or reuse one of their recorded training answers, so the meeting recorder can tell which speaker is them. A training answer is reused only when the agent taps to do so. We use the recording only to label speakers in that agent's own meeting transcripts, never to identify anyone else and never for advertising. It is stored privately and kept until the agent removes it or closes the account.

How we use information

We use personal information for these business and commercial purposes:

• Provide and operate the Services — authenticate you, sync your data across web and mobile, and generate AI responses scoped to your account.
• Match consumer leads with real estate agents who are licensed and in good standing with the California Department of Real Estate.
• Communicate with you — send transactional messages (verification codes, password resets, receipts, briefing summaries) and, where you have opted in, product news.
• Secure the Services — detect, investigate, and prevent fraud, abuse, and security incidents, and debug and repair errors.
• Improve the Services using aggregated or de-identified usage data.
• Comply with law and enforce our Terms — tax, real estate licensing, anti-fraud, legal process, and dispute resolution.

We will not use personal information for a materially different, unrelated, or incompatible purpose without providing you notice.

How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose personal information only in these ways:

• Service providers / processors who work on our behalf under contract and may use the data only to provide services to us: Supabase (database + hosting, United States), Render (runs our servers, United States; its traffic passes through Cloudflare's network), Cloudflare (network in front of our servers, United States), Vercel (hosts our web app and websites, United States), Functional Software, Inc. / Sentry (error monitoring, United States; we strip email content, passwords and other secrets from error reports before they are sent), Stripe (payments), the AI providers named in the next section, and our transactional email and SMS delivery providers.
• Social posting — Zernio (Spain) publishes posts to Instagram, Facebook Pages, LinkedIn and TikTok on our behalf. Today it carries only Newmarket Edge's own company posts, written by our founders. If you later choose to connect your own social accounts to "Also post to" from your feed, Zernio will hold the connection to each account you link (you approve it on that site's own login screen) and receive the text, photos or video of each post you choose to send there — never your client records, your email or your calendar. Disconnecting an account in the app removes that connection.
• Agent matching — when a consumer uses a gated tool or asks to be matched, we share that consumer's lead details only with the licensed California agent they are matched to or have signed up to work with. We do not distribute lead information more broadly.
• Legal and safety — to comply with law, legal process, or enforceable governmental requests, or to protect the rights, property, or safety of Newmarket Edge, our users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, with notice to you and subject to this policy.
• With your direction or consent — for example, when you connect Gmail or Outlook, or otherwise ask us to share.
• Pictures hosted elsewhere — some pictures in the Services, such as a company's logo kept on its own website, load straight from that website. That website sees your device's IP address, as it would for any picture it sends you.

Categories of personal information disclosed to service providers in the past 12 months include identifiers, customer records, commercial information, device activity, and (for connected accounts) message and calendar content.

AI providers

The AI features in Newmarket Edge — the assistant, drafting, summaries, briefings, voice, and the assistant's web search — run on outside providers. A provider receives what the feature you are using needs to produce its answer, when you use that feature.

• OpenRouter, Inc. (United States) — our main AI provider. It receives the text of your request and the relevant parts of your client and listing data (and any photo you ask a feature to look at), and passes the request to an AI model run by one of the model hosts it works with — an open model, or a model from OpenAI or Anthropic — which returns the answer. It powers the in-app assistant, drafting, and most other AI features, as well as the chat assistants on our websites. It never receives Gmail or Google Calendar content. Whether a request may be retained or used for training is governed by OpenRouter's API terms and those of the model host that serves it.
• Google LLC (United States), through the Gemini API on a paid plan — receives email and calendar content you connect, when you use features that read it (inbox summaries, reply drafts, and briefings); photos and documents you ask a feature to read, such as a receipt or a listing photo; and the text or audio of AI voice features. Under Google's terms for paid Gemini API use, Google does not use this content to improve its products.
• Web search — Tavily, or Brave Search (Brave Software, Inc.) as its backup. When you ask the assistant to look something up on the web, the search words it chooses (or the address of a public page you ask it to read) are sent to the search provider, which returns public web results. Email addresses and phone numbers are removed from the search first, and the assistant never searches with anything from your email or calendar — once it has read your mail or calendar in a reply, web search is switched off for that reply. The search provider receives only those search words or that page address, never your client records.
• TypeSafe AI (United States) — a sorting step for our own staff's internal assistant. When a member of the Newmarket Edge team types a question to that assistant, the text of their question may be sent to TypeSafe's decision model, which answers only whether the question is simple or complex, so that we can choose which AI model writes the reply. It receives nothing else: no client records, no listing data, and never Gmail or Google Calendar content. Under TypeSafe's customer terms it does not train its models on that text.
• Anthropic, PBC (United States) — a backup only. Anthropic is not part of our everyday AI. It remains set up as a fallback for Gmail and Calendar features and for the chat assistants on our websites, used only if the providers above cannot answer. When it is used, it receives the same request the other provider would have, under Anthropic's commercial API terms, which do not permit it to train its models on that data.

To find things in an agent's archive by meaning, short summaries of each item are converted to search codes by Google's Gemini API.

Your AI assistant and what it remembers

Each agent on Newmarket Edge has a personal AI assistant. To make it useful to that agent, it learns from the agent's own work. What it learns belongs to that agent's account only. It is never shown to another agent, never used to answer another agent's or another client's questions, and never used to train general-purpose AI models.

What the assistant keeps, and for how long

• Things it remembers about the agent. Short notes such as “prefers to call clients before texting” or “does not show homes on Sundays”. Some the agent tells it directly; others it notices from the agent's own words and asks the agent to confirm. Kept until the agent edits or deletes them. A deleted note is erased within 30 days.
• The agent's working rhythm. Which days and hours the agent usually works, worked out weekly from when they use the app. Kept until the agent deletes it.
• Chats with the assistant. The agent's conversations with their assistant are kept for 30 days so it can learn from them, then erased. This applies only to plans that include AI learning.
• A searchable archive of the agent's business. The assistant can search the agent's own meeting recordings and summaries, emails, documents, notes, their messages with their clients, and files the agent adds. Email in the archive is kept for 30 days, the same as our email cache. Other items are kept until the agent deletes them, the original is deleted, or the account is closed.
• Ratings and corrections. When the agent rates a reply or writes what it should have said, we keep that for 90 days.
• A writing-style profile. A short description of how the agent writes and speaks, learned from the agent's edits to AI drafts, their messages to clients, and their recorded meetings and voice answers. It describes habits only. We remove names, addresses, phone numbers, email addresses, amounts and dates before it is saved.
• The agent's messages to their clients. The full text of an agent's chat messages to their clients is kept for 30 days to learn the agent's style, then erased.

Seeing and deleting it. In the app, an agent can see everything their assistant remembers, change or delete any item, or clear it all. They can delete anything in their archive. Deleting the account erases all of it. Disconnecting your last connected email account erases everything the assistant learned from your email.

If you are an agent's client.Messages you send your agent, and your agent's notes and meeting recordings about you, can be searched by your agent's assistant to help your agent. Your agent's assistant does not show them to anyone but your agent. When you chat with your agent's assistant in the client app, or with the chat on an agent's public website, it does not use your agent's learned writing style built from other clients' conversations, and it never repeats another client's details.

Google user data — Limited Use disclosure

When you connect Gmail to Newmarket Edge, we request the following Google API scopes:

• gmail.modify — to read messages in your inbox so we can surface them in your Email Intelligence triage view, classify urgency, and identify which clients need a reply; and to act on a message when you tell us to — mark it read or unread, star it, archive it, or move it to Trash. Newmarket Edge never permanently deletes your messages. The one exception is a draft you delete or move in the app, which is deleted from Gmail at your request. We request it instead of the broader https://mail.google.com/ scope precisely because we do not need that level of access.
• gmail.send — to send replies you author or approve from within Newmarket Edge, on your behalf, from your own email address.
• userinfo.email — to associate the connected account with your Newmarket Edge agent record.
• calendar.events.owned — to read the events on your own Google calendar (so we don't double-book you) and to add, update or cancel the showings and meetings you schedule from inside Newmarket Edge. This scope covers events on calendars you own only: it gives us no access to calendars other people share with you, and it does not allow us to delete your calendars or change who they are shared with. We request it instead of the broader calendar.events scope because we never need those shared calendars.

Newmarket Edge's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We use Gmail data only to provide and improve the user-facing features of the Email Intelligence module (triage, summarization, reply drafting).
• We do not transfer Gmail data to third parties except: (a) to the AI provider that generates your summaries and reply drafts on your behalf, Google LLC (United States), on a paid Gemini API plan, and to its one backup, Anthropic, PBC (United States), used only if Google cannot answer — each under API terms that permit it to use the data only to return that result and do not permit training on it. When our assistant reads such text aloud, it is spoken either by Google's voice service (the same paid Gemini API) or by a voice program that runs on our own servers. These two are the only AI providers that ever receive Gmail data (our main provider, OpenRouter, never does), and this is enforced in our code by an allow-list, not by convention: a request carrying Gmail or Calendar content cannot be routed to any other vendor. We use no other AI vendor for this purpose, and when both are unavailable we simply retry later rather than sending your email elsewhere. Our hosting providers above (Supabase, Render, Cloudflare and Vercel) store or carry the data only to run the service; (b) to comply with applicable law; or (c) as part of a merger, acquisition, or sale of assets with notice to you.
• We do not use Gmail data for advertising. We do not display ads in Newmarket Edge.
• We do not use Gmail data to train generalized or non-personalized AI/ML models.
• We do not allow humans to read your Gmail data, including our own staff. Leads and clients that came from your email show to our staff as “Private to the agent”, without their name or contact details. The exceptions are: (a) with your explicit consent for a specific message; (b) when necessary for security purposes such as investigating abuse; (c) to comply with applicable law; or (d) where the data has been aggregated and anonymized for our internal operations.
• You can disconnect Gmail at any time at app.newmarketedge.com → Intelligence → Email, which revokes our access and deletes the stored tokens.
• If you remove our access from your Google account instead (in your Google Account settings), we notice when our access stops working. We warn you by app notification and email the next day and again on day six, and if you haven't reconnected, we delete what we stored from that mailbox 7 days after access stopped, as if you had disconnected it here.
• If Gmail is one of several connected email accounts, disconnecting it deletes that account's emails, our AI's summaries and reply drafts of them, and their follow-up reminders. Older email we can't match to a single account, your edits to drafts, your writing style, your daily briefings and what your assistant remembered stay until you disconnect your last account. If Gmail is your last connected email account, disconnecting it deletes what we stored from it. That means the emails, our AI's summaries and reply drafts, your edits to those drafts, your daily briefings, and what your assistant remembered from your mail and calendar. Deleting your account does the same. Until then, each email's own content is erased 30 days after it arrives and the rest is kept, as set out in “Storage, encryption, and data retention.”

The same posture applies to Microsoft Outlook / Microsoft Graph data when you connect an Outlook account, consistent with Microsoft's API terms.

Text messages and calls (SMS / TCPA)

• We may call the phone number you provide to follow up on a request you made — for example, to talk about joining the waitlist or to connect you with an agent.
• We obtain your prior express consent before sending any autodialed or marketing text messages, and consent is not a condition of purchasing anything.
• Message and data rates may apply. Message frequency varies. Reply STOP to opt out of texts at any time, or HELP for help. Opting out of texts does not opt you out of essential transactional email.
• We do not share phone numbers or SMS opt-in consent with third parties for their own marketing.
• No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-message opt-in data and consent are excluded from every category of sharing described in this policy, including agent matching, and are never shared with any third party.
• We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign.
• How to opt in, what we text, and how to stop are set out in section 10 of our Terms.

Marketing email (CAN-SPAM)

We send marketing email only where permitted. Every marketing email includes a working unsubscribe link and our physical mailing address. You can also opt out by emailing unsubscribe@newmarketedge.com. We honor opt-outs promptly. Transactional messages necessary to operate your account (e.g. verification, receipts) are not marketing.

Storage, encryption, and data retention

• Account and client data is stored in Supabase (Postgres) within the United States.
• OAuth tokens for Gmail / Outlook are encrypted with AES-256-GCM before being written to the database. Decryption happens only at request time on our backend.
• Data in transit is protected with TLS; access to production systems is restricted and logged.

We keep each category of personal information only as long as needed for the purpose it was collected:

• Account & profile data — for the life of your account, then erased within 30 days of account deletion (except records we must keep by law).
• Cached email (triage view) — the email's own content (its text, the names of its attachments, and any part of it we saved to connect it to a deal) is kept for 30 days after the email arrives, then erased. Its headers (sender, recipients, subject and date) are kept for the inbox-state timeline until you disconnect your last connected email account or delete your account.
• What our AI made from your email — our AI's summary of each email, the reply drafts it wrote, your edits to those drafts (which teach it your writing style), and what your assistant remembered from your email or calendar. These are kept after the email's own content is erased, until you disconnect your last connected email account or delete your account. Either one deletes them.
• OAuth tokens — until you disconnect the account, then deleted.
• Daily briefings (which summarize your email, calendar and tasks) — until you disconnect your last connected email account or delete your account.
• Leads and clients that came from your email — they are your CRM records, so they stay until you delete them or close your account. Our staff and our internal AI see them only as “Private to the agent”.
• Voice samples — until you delete them in Settings → Voice.
• AI assistant chats — 30 days.
• An agent's chat messages to clients, full text — 30 days.
• AI assistant ratings and corrections — 90 days.
• Email in the AI assistant's archive — 30 days.
• AI assistant memories, working rhythm, style profile and other archive items — until deleted by the agent, or until the account is closed. Deleted items are erased within 30 days.
• Consumer lead data — for as long as needed to match you with an agent and for a reasonable period thereafter, or until you request deletion.
• Usage / device logs — typically up to 24 months, then deleted or de-identified.
• Website activity (our own analytics on newmarketedge.com and newmarkethq.com) — 24 months, then deleted.
• Billing & tax records — retained as required by tax and financial law (generally up to 7 years), primarily via Stripe.

Data security and breach notification

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption at rest and in transit, access controls, and monitoring. No system is perfectly secure, and we cannot guarantee absolute security. If we experience a breach of personal information affecting California residents, we will notify affected users and any regulators as required by California Civil Code § 1798.82 without unreasonable delay.

Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know / access — the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties to whom we disclose it.
• Delete — the personal information we have collected from you, subject to legal exceptions.
• Correct — inaccurate personal information we maintain about you.
• Opt out of sale / sharing — we do not sell or share personal information, so there is nothing to opt out of; we honor opt-out signals regardless (see "Do Not Track / Global Privacy Control").
• Limit use of sensitive personal information — we already limit our use to permitted purposes only.
• Non-discrimination — we will not deny you services, charge a different price, or provide a different quality of service because you exercised any of these rights.

How to submit a request. Email privacy@newmarketedge.com, or use in-app account deletion. To protect you, we will verify your request by confirming control of the email or account associated with the information; we may ask for additional information to verify identity for access or deletion requests. You may use an authorized agent to submit a request on your behalf by providing the agent written, signed permission; we may still verify your identity directly.

Our response. We confirm receipt within 10 business days and respond within 45 days, extendable by another 45 days with notice. There is no charge for a verifiable request unless it is excessive or repetitive.

California's "Shine the Light" law (Civil Code § 1798.83): we do not disclose personal information to third parties for their own direct marketing.

Do Not Track / Global Privacy Control

Some browsers offer a "Do Not Track" (DNT) setting and a Global Privacy Control (GPC) signal. Because there is no common industry standard for DNT, our sites do not respond to DNT signals; instead we simply do not track you across third-party websites or serve behavioral ads, and we use no Google Analytics, Facebook Pixel, or third-party trackers. We treat a GPC signal as a valid request to opt out of the sale or sharing of personal information — and since we do not sell or share, no data is affected, but we honor the signal.

Cookies and tracking

We use one HttpOnly session cookie (nme_lead_session) on the marketing site to remember signed-in tool users for 30 days. The agent dashboard uses a JWT in localStorage for the session. We do not use third-party advertising cookies or cross-site trackers on newmarketedge.com, newmarkethq.com, or the agent websites we host.

We measure how newmarketedge.com and newmarkethq.com are used with our own analytics, not Google Analytics, Facebook Pixel or any other outside tracker. It records the pages you visit, the buttons and links you click, whether you start or finish a form (not what you type in it), the website or ad campaign that sent you, your browser and device type, and your approximate country and region, which our hosting provider works out from your IP address. Our analytics records do not include your IP address. It uses a random visit ID kept in your browser, not your name or email. We use this only to improve our websites and see which pages help people. We do not sell it or share it with anyone for advertising. We keep it for 24 months.

The websites we host for real estate agents count visits the same first-party way: the page viewed, the site that sent the visitor, and a random identifier kept in the visitor's browser so visits can be counted without identifying anyone. We do not store IP addresses for this, we do not share it, and a browser sending a Global Privacy Control signal is not counted at all. The agent sees only totals for their own site.

Children

The Services are intended for real estate professionals and adult consumers and are not directed to children under 13. We do not knowingly collect personal information from children under 13, and we do not knowingly sell or share the personal information of anyone under 16. If you believe a child has provided us information, contact privacy@newmarketedge.com and we will delete it.

Changes to this policy

We'll post material changes here and update the "Last updated" date above. If a change affects how we handle Gmail / Outlook data, we'll notify connected agents by email at least 30 days before it takes effect.

Contact us

• Privacy / data requests: privacy@newmarketedge.com
• Marketing opt-out: unsubscribe@newmarketedge.com
• Support: support@newmarketedge.com
• Legal: legal@newmarketedge.com
• Mailing address: Newmarket Edge LLC, 21350 Avenue San Luis, Unit 120, Woodland Hills, CA 91364