Privacy Policy

Last updated: January 9, 2026

Bracket Real Estate (“Bracket”, “we”, “our”, “us”) provides Bracket One and Bracket Marketplace (collectively, the “Services”) to brokers, sellers, and buyers of commercial real estate. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information when you use the Services.

1. Information We Collect

Account & Profile. Name, email, password hash, company, role, preferred markets, and other profile details you provide.
Brokerage & Listing Data. Property details, documents, photos, offers/bids, communications, and workflow activity you or your organization submit.
Authentication & Connections. If you connect Microsoft Outlook or Google (Gmail/Calendar), we receive OAuth tokens and the scopes you grant (e.g., Mail.Send, gmail.send, calendar.events). We store tokens securely to send email and create calendar events on your behalf. We do not read your mailbox contents or calendar data except as necessary to perform the specific actions you request.
Usage & Analytics. Device/technical data, pages viewed, actions taken, timestamps. We use Mixpanel to help analyze product usage.
Support & Communications. Messages you send us (e.g., support emails, in-app feedback).

2. How We Use Information

Provide, operate, and improve the Services.
Authenticate users and secure accounts.
Send email and schedule calendar events when you request it (for example: outreach emails, invitations with Zoom or Google Meet links).
Process transactions, offers, bids, and generate reports.
Provide customer support and communicate important updates.
Analyze aggregate usage to improve features and reliability.
Comply with legal obligations and enforce our Terms.

3. Legal Bases (EEA/UK users)

We rely on contract (to provide the Services), legitimate interests (product improvement, security), and consent (where required, such as certain marketing or third-party connections).

4. Sharing & Disclosure

Vendors/Processors. We use service providers to host and operate the Services (e.g., AWS), analytics (Mixpanel), email and calendar integrations (Microsoft, Google), and optional video (Zoom / Google Meet). Vendors process data on our instructions.
Counterparties. When you choose to share listings, offers, or messages with other users, we disclose the information you select to those parties.
Legal. We may share information to comply with law, enforce agreements, or protect rights, safety, and property.
Business transfers. In a merger, acquisition, or asset sale, information may be transferred as permitted by law.

5. Data Retention

We keep personal information for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce agreements. You may request deletion as described below.

6. Security

We implement technical and organizational measures appropriate to the risk, including encryption in transit, token scoping, and restricted access. No method of transmission or storage is 100% secure.

7. Your Choices & Rights

OAuth Connections. You can disconnect Outlook or Google at any time from your settings; we revoke and/or delete stored tokens and cease access.
Marketing. Opt out of non-essential emails via the unsubscribe link.
Access/Deletion/Correction. Contact us to exercise privacy rights available in your jurisdiction.

8. International Transfers

We may process and store data in the United States and other locations where we or our vendors operate. We use appropriate safeguards for cross-border transfers as required by law.

9. Children

The Services are not directed to children under 16. We do not knowingly collect personal information from children.

10. Changes

We may update this Policy from time to time. We will post the updated version and revise the “Last updated” date above; material changes may be communicated through the Services.

11. Contact

Questions or requests: support@bracketre.com