Privacy Policy

◆

1. Introduction

This Privacy Policy explains how Respeno LLC ("Respeno", "we", "us", or "our") collects, uses, discloses, and protects personal information when you use the Respeno platform (the "Platform") or interact with us in connection with our services.

Respeno LLC is an Oklahoma limited liability company with its principal office at 2604 W Idaho Ave, Chickasha, OK 73018.

This Privacy Policy applies to all users of the Platform, including Production Companies that operate on the Platform, Brokerages and their administrators, Agents who use the Platform, FSBO Homeowners who use the Platform directly, homeowners and sellers whose listings are managed through the Platform, report recipients, and anyone who visits Respeno's website or contacts us. By using the Platform, you agree to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

When you create an account, configure your profile, place orders, or otherwise use the Platform, we collect identifying information (full name, email, phone number, postal/business address); professional information (real estate license number, MLS membership(s) and ID(s), brokerage affiliation, production company affiliation, designated broker name and license, Tax ID/EIN for companies and brokerages); listing and property information (addresses, descriptions, owner/seller contact entered by agents on behalf of clients, photos, videos, floor plans, listing status); payment information (card details collected and processed by Stripe and not stored by Respeno, billing addresses, payment history); and communications (messages sent through the Platform, support inquiries).

2.2 Information Generated by Your Use

We collect account activity (login times, IP addresses, browser and device information, pages and features accessed, actions taken); consent records (records of in-platform attestations related to communications, including the disclosure text shown, recipient identity, timestamp, IP address, and user agent — see Section 9); an audit log (platform-side actions for security and accountability — see Section 9); and analytics (aggregate usage patterns, page views, engagement metrics on listing pages and reports, per-photo view tracking on public listing pages).

2.3 Information from Third Parties

Authentication providers (if you sign in via a third party), payment processors (transaction confirmations), and mapping/geocoding services (when we resolve addresses).

2.4 Cookies and Similar Technologies

We use cookies and similar technologies for authentication, preferences, security, and analytics. You may disable cookies in your browser, but doing so may impair Platform functionality.

3. How We Use Information

We use personal information to provide the Services (create and maintain accounts, process orders and deliver media, schedule shoots, manage listings and licensing, generate reports and analytics, facilitate communications); operate the Platform (authenticate users, maintain security, troubleshoot, maintain audit logs and consent records); communicate (transactional emails and SMS, marketing communications where you have opted in, responding to inquiries); comply with law (tax reporting, legal process, defending claims including TCPA and CAN-SPAM); and improve the Platform (aggregate anonymized analytics; AI features use de-identified inputs only — we do not use personally identifying information about homeowners or sellers for AI training).

4. Legal Bases (For Data Subjects Who Require Them)

Where applicable law requires a legal basis for processing, we rely on performance of a contract, legitimate interests, consent (where you have opted into specific processing such as marketing), and legal obligations (tax, audit, regulatory compliance).

5. How We Share Information

5.1 With Other Platform Users

Production Companies see information about Brokerages and Agents who place orders with them; Brokerages see information about their affiliated Agents and listings; Agents see information about their assigned shoots, photographers, and deliveries; Homeowners receive reports and communications generated by Agents through the Platform.

5.2 With Service Providers (Subprocessors)

We use third-party service providers to operate the Platform, each contractually required to use personal information only as needed to provide their services. Current subprocessors include:

Service Provider	Purpose	Location
Supabase, Inc.	Database, authentication, storage	US-West-2 (Oregon, USA)
Resend	Transactional email delivery	USA
Twilio Inc.	SMS delivery	USA
Stripe, Inc.	Payment processing	USA
Dropbox, Inc.	File storage and delivery	USA
Google LLC	Maps and geocoding services	USA
Vercel, Inc.	Web application hosting	USA
AI providers (e.g., OpenAI, Anthropic)	AI-generated content features	USA

This list may change as we add or change service providers. We will update this Privacy Policy when material changes occur.

5.3 For Legal Reasons

We may disclose personal information when required by law or valid legal process, or to protect the rights, property, or safety of Respeno, our users, or others; investigate or prevent fraud, abuse, or security incidents; or enforce our Terms of Service.

5.4 In Connection with a Business Transaction

If Respeno is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred. We will provide notice if such a transfer would materially change the handling of your information.

5.5 We Do Not Sell Personal Information

Respeno does not sell personal information for advertising or any other purpose, as those terms are defined under the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), or similar state laws. We also do not share personal information for cross-context behavioral advertising.

6. Consent Capture for Communications

The Platform includes a built-in consent capture system for communications subject to TCPA, CAN-SPAM, and similar regulations. When an Agent initiates a communication to a homeowner, seller, or other third-party recipient, the Platform requires the Agent to complete an attestation that the recipient has provided consent, including the recipient's identity, the communication type, a clear disclosure of what consent is required, and a required affirmation by the Agent.

Each attestation is recorded as an audit entry containing the Agent's identity, timestamp, IP address, user agent, the disclosure text shown, the recipient identity, the associated listing (if applicable), and subsequent opt-out events. These records support compliance with TCPA, CAN-SPAM, and applicable state laws; response to complaints; defense against regulatory inquiries; and transparency to recipients. Recipients may request copies of consent records, correction, deletion (subject to legal retention), and opt-out. Contact privacy@respeno.com; we will verify identity before responding.

7. Photographic and Video Content

The Platform processes photographs and videos of properties, which may inadvertently include identifiable individuals, personal belongings, or distinctive property features. Production Companies and Agents who upload content represent that they have obtained necessary consents and releases, including authorization to photograph the property and model releases for identifiable individuals.

Respeno strictly prohibits the upload of content depicting minors without verified parental consent and signed model releases. Content believed to violate this policy will be removed and may result in account suspension. Individuals identifiable in property photography may request review or removal by contacting privacy@respeno.com.

8. Data Retention

We retain personal information as long as necessary to provide the Services. Active account data is retained while your account is active. After account termination, a 30-day grace period applies during which data remains accessible, followed by a 60–90 day export window, after which data may be permanently deleted except where retention is required for legal, tax, or audit reasons.

Consent records are retained for seven (7) years from the date of the attestation or last related communication, reflecting the statute of limitations window for TCPA claims. Audit logs are retained indefinitely for security, integrity, and legal defense. Financial records are retained for at least seven (7) years to comply with tax and accounting requirements. Archived listing media is retained per the licensing terms applied at delivery. Anonymized or aggregate data may be retained indefinitely.

9. Audit Log

The Platform maintains an internal audit log of significant actions, including account creation, modification, and deactivation; role assignments and permission changes; production company and brokerage configuration changes; and important operational events. The audit log captures the identity of the user performing the action, before-and-after data states, timestamps, IP addresses, and user agents. Access is restricted to platform administrators with the highest level of authorization and is used for security investigation, compliance, defense against legal claims, and resolution of disputes.

10. Security

We implement administrative, technical, and physical safeguards designed to protect personal information, including encryption of data in transit (HTTPS/TLS), encryption of data at rest in supported subsystems, role-based access controls, authentication and session management, regular security review, and subprocessor security obligations. No security measure is perfect. You are responsible for maintaining the security of your account credentials; notify us promptly of any suspected unauthorized access.

11. Your Privacy Rights

General rights (all users): access a copy of personal information we hold; correction of inaccurate information; deletion (subject to retention in Section 8); opt-out of marketing (unsubscribe link in each email, or reply STOP for SMS); and portability.

California residents (CCPA/CPRA) may additionally have the right to know categories of personal information collected, sold, or shared; receive specific pieces collected; direct us not to sell or share (we do not sell or share); limit use of sensitive personal information where applicable; and non-discrimination for exercising rights. Residents of other states with comprehensive privacy laws (Virginia, Colorado, Connecticut, Utah, and others) may have similar rights. To exercise rights, contact privacy@respeno.com. We will verify identity before responding, generally within 45 days. We may decline or limit requests where required by law, necessary for ongoing legal claims, or where the request relates to information of other individuals.

12. Children's Privacy (COPPA)

The Platform is not directed at children under 13 years of age (or under 16 in jurisdictions with higher thresholds). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will delete it promptly. Parents who believe their child has provided personal information may contact privacy@respeno.com.

13. Marketing Communications

Email: transactional emails (order confirmations, delivery notifications, system alerts) are sent as part of providing the Services; you cannot opt out of transactional emails while maintaining an active account. Marketing emails are sent only with your consent (opt-in) and you may unsubscribe at any time.

SMS (TCPA compliance): SMS communications are sent only with your express opt-in consent, captured at the point of phone number collection. Each SMS includes opt-out instructions ("Reply STOP to opt out"). Once you opt out, you will not receive further SMS unless you re-subscribe. Message and data rates may apply. See our SMS Consent page for full details.

14. International Data Transfers

Respeno is based in the United States, and personal information is processed in the United States. If you access the Platform from outside the United States, your information will be transferred to, processed, and stored in the United States, which may not provide the same level of data protection as your home jurisdiction. The Platform is not currently designed for compliance with EU GDPR or UK GDPR; if you are located in the EEA, UK, or Switzerland, please contact privacy@respeno.com before using the Platform.

15. Third-Party Links and Services

The Platform may contain links to third-party websites or services (such as Production Company websites, MLS systems, or social media). This Privacy Policy does not apply to those third parties. We encourage you to review their privacy practices.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy with a new Effective Date; for material changes, we will provide notice (such as by email or in-Platform notification) at least 30 days before the changes take effect. Continued use after the Effective Date constitutes acceptance.

17. Contact Us

For privacy questions, requests, or concerns:

Email: privacy@respeno.com

Mail:
Respeno LLC
Attn: Privacy
2604 W Idaho Ave
Chickasha, OK 73018

For California residents and other state law requests, please specify your state of residence and the nature of your request. We will verify identity before responding.