Privacy Policy

Who we are

Vordran ("Vordran," "we," "us") is transaction-coordination software for real estate professionals — transaction coordinators and agents — across the United States. The service is offered to users in the United States. You can reach us about anything in this policy at emppenterprises@gmail.com.

What we collect

We collect what the product needs to coordinate your transactions, and nothing aimed at advertising:

• Account data — your email, name, workspace membership, and role (agent or TC).
• Contracts and transaction documents — PDFs you upload or direct into Vordran. These contain what real estate contracts contain: property addresses, prices, party names, loan details.
• Extracted deal data — the fields our AI reads out of those documents (deadlines, parties, financial terms, risk flags), plus your confirmations and corrections.
• Connected Google data, if you connect Google — Drive file metadata for the folders Vordran organizes, andsend-only mail access used to send drafts you approve from your own account (see the next section — Vordran never reads your inbox).
• Communication records — deal-matched emails, drafts Vordran sent with your approval, and call notes you add.
• Operational records — an immutable audit log of who changed what in your workspace (your accountability trail, not third-party tracking), and per-workspace AI usage counts.
• Analytics — our marketing site uses Vercel Web Analytics for aggregate page-view counts. We do not run ad-tech trackers.

Connected Google: Vordran never reads your inbox

Vordran does not connect to, monitor, or read your mailbox. If you connect Google, the access Vordran requests is deliberately narrow: permission to create and write the deal folders it organizes in your own Drive, and permission to send — so a draft you approve goes out from your own address. Vordran holds no permission to read or label mail in your account.

Earlier versions of Vordran could watch a connected mailbox and file the mail that matched a deal. That capability was removed: Vordran gave up the broader mail permission it required, and the feature is switched off. Any labels it created in your Google account before that change remain there — they are yours — but Vordran creates no new ones and reads no mail.

How AI processing works

Uploaded contracts (or their text) are sent to Google's Gemini API to extract structured fields — Google processes that content on our behalf as a subprocessor under its API terms. The in-app assistant sends only a retrieval-scoped slice of your own deal data to answer your question, and it never changes your data without an explicit approval click from you.

Your contracts are used to run your workspace, not to train AI models, and are never sold. When Vordran learns your recurring contract forms, that learning stays inside your workspace. If we ever build cross-customer extraction improvements, they would use de-identified structural patterns only and require your explicit opt-in first.

Who processes data for us

• Google (Gemini API) — contract field extraction and the deal assistant.
• Google (Drive and Gmail APIs) — connected by your own OAuth grant, to your own Google account; you can disconnect at any time in Settings.
• Supabase — our database and authentication provider; every read is scoped to your workspace at the database layer (row-level security).
• Resend — sends transactional email such as deadline reminders.
• Vercel — application hosting and site analytics.
• Lemon Squeezy — payment processing as merchant of record; card details go to Lemon Squeezy, not to Vordran's servers.
• Slack (only if you configure it) — if you paste your own Slack webhook URL, notification text is sent to your Slack workspace via that URL you control.

We do not sell your data

We do not sell personal information or contract data, and we do not share it for cross-context behavioral advertising. There is no ad-tech or data-broker integration anywhere in the product.

Retention and deletion

Real estate transaction records are subject to state record-keeping requirements, and we are building state-aware retention to honor them. Until automated deletion ships, we handle deletion requests manually: email us at emppenterprises@gmail.com with the subject "Privacy request" and we will action it promptly and confirm when done. Documents stored in your own Google Drive remain in your Google account regardless of Vordran — we organize your Drive, we don't own it.

Your rights

US state privacy laws (such as the CCPA/CPRA) give you the right to know what we hold about you, to correct it, to delete it, and to opt out of sale or sharing — which is moot here, because we don't sell or share for advertising. Exercise any of these by emailing the address above; we will never treat you differently for doing so. The service is offered to US users; we will address other jurisdictions if and when we offer the service there.

Changes to this policy

When this policy changes, we will update the date at the top and, for material changes, notify account holders by email before the change takes effect.