Privacy Policy

Last updated: April 20, 2026

1. Who we are

RESF.AI (“RESF”, “we”, “us”) is a private customer-relationship tool for real-estate agents. The service is operated by Jorge Guerra Jr.
Email: j@resf.com
Mailing address: 814 Ponce de Leon Blvd #503, Coral Gables, FL 33134, USA

2. What we collect

When you use RESF.AI we store:

Account basics — your Google email, display name, profile photo, and user ID supplied by Google sign-in.
Google Contacts data — names, email addresses, phone numbers, mailing addresses, organizations, birthdays, and biographies pulled via the Google People API when you explicitly run the import.
Google Calendar data — events you create, update, or mark done through RESF. We do not read your personal calendar outside of events RESF itself creates or syncs.
Gmail metadata— thread subjects, dates, and short snippets from messages between you and a given contact, used to display conversation history on that contact’s page. We do not store full message bodies in our database; snippets are fetched on demand and cached briefly.
Data you enter — contact notes, categories, outreach completions, and your daily-goal settings.
Session + usage — a session cookie tied to a server-side session record; timestamps of logins, saves, and outreach actions for reliability and analytics.

3. How we use it

To provide the core CRM features: storing contacts, showing calendar events, drafting outreach messages, tracking your daily goals.
To draft suggested text for your outreach messages using Anthropic’s Claude API. Drafts are generated on demand and not used to train any model. You choose whether to send any draft.
To debug and improve the service. Server logs retain minimal request metadata (path, status, timing) for up to 30 days.

We do not sell your data.We do not use your Google account data for advertising. RESF.AI’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Google data — Limited Use

Data obtained from Google APIs is only used to:

Let you see and manage your own contacts, calendar events, and Gmail threads inside RESF.
Send outreach emails or create calendar events that you explicitly trigger.

Google data is never transferred to third parties except as required by law. Google data is never used to serve advertisements and is neverread by humans except where required by law, to comply with Google’s policies, or with your explicit consent when you ask for support.

5. Where data is stored

Data is stored in a managed SQLite database (Turso) hosted in the United States. The application runs on Vercel (United States). Access to the database is restricted to the operator and is encrypted in transit (TLS) and at rest.

6. How long we keep it

Contact and outreach data persists until you delete it or until your account is removed. If you revoke RESF.AI’s access via your Google Account permissions page, we stop fetching fresh Google data immediately, but previously imported data remains in the database until you delete it in-app or request deletion by emailing j@resf.com. We will complete a deletion request within 30 days.

7. Your choices

Revoke access at any time from your Google Account permissions.
Delete individual contacts or entries from within the app.
Request a full export or deletion of your account by emailing j@resf.com.

8. Children

RESF.AI is not directed at children under 13 and we do not knowingly collect data from anyone under 13.

9. Security

We use TLS for all traffic, Google OAuth for authentication, HTTP-only session cookies, and server-side session revocation. We don’t store passwords. No system is perfectly secure; if you suspect unauthorized access to your account, email j@resf.com immediately.

10. Changes to this policy

Updates to this policy will be posted at this URL with a revised “Last updated” date. Material changes will be highlighted on the home page for at least 14 days.

11. Contact

Questions, complaints, or data requests: j@resf.com.