Effective Date: December 15, 2025
Last Updated: December 15, 2025
Exphired ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our expired listing letter services, including our AI-powered letter generation, direct mail fulfillment, and related services (collectively, the "Services").
This Privacy Policy applies to all users of our Services, including real estate agents, property owners, and visitors to our website. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.
If you have any questions about this Privacy Policy, please contact us at support@exphired.com.
When you create an account, we collect your name, email address, password (encrypted), business name, brokerage information, phone number, real estate license number, and physical business address.
When you use our expired listing services, we process publicly available property and listing data, including property addresses, owner information, listing histories, and related real estate data obtained from public records and MLS sources.
Payment transactions are processed through Stripe, our third-party payment processor. We do not store your complete credit card information on our servers. We receive and store limited payment information from Stripe, including the last four digits of your card, card type, and billing address.
We collect and process the content of letters you create using our services, including AI-generated content, customizations, and any personal information included in your letter templates.
We collect information about how you use our Services, including features accessed, letters created and sent, campaign analytics, and actions taken within the platform.
We automatically collect certain technical information, including IP addresses, browser type and version, device information, operating system, time zone settings, and cookie data.
We collect information from your communications with us, including support emails, feedback, survey responses, and any other correspondence.
We use the information we collect to:
For users in the European Economic Area (EEA), we process personal data based on the following legal grounds:
Processing is necessary to perform our contract with you, including providing our Services, processing payments, and managing your account.
Processing is necessary for our legitimate interests, including improving our Services, preventing fraud, ensuring security, and conducting analytics—provided these interests are not overridden by your rights.
Processing is necessary to comply with legal obligations, such as tax reporting, responding to legal requests, and maintaining required records.
Where required by law, we obtain your consent before processing, such as for marketing communications. You may withdraw consent at any time.
We share your information with the following categories of third parties:
We may disclose information when required by law, such as in response to valid legal processes, court orders, or government requests.
In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.
Important: We never sell your personal data to third parties for marketing purposes.
We retain your information for as long as necessary to provide our Services and fulfill the purposes described in this Privacy Policy:
If you are in the European Economic Area, you have the following rights:
If you are a California resident, you have the following rights under the CCPA:
To exercise any of these rights, please contact us at support@exphired.com. We will respond to your request within 30 days (GDPR) or 45 days (CCPA).
We implement appropriate technical and organizational measures to protect your personal data:
While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
Your information may be transferred to and processed in countries other than your own. Our primary data storage is located in the United States.
For transfers from the EEA to countries not deemed adequate by the European Commission, we rely on appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.
Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@exphired.com.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.
For material changes that significantly affect your rights, we will provide additional notice, such as an email notification or a prominent notice within our Services.
Your continued use of our Services after any changes constitutes your acceptance of the updated Privacy Policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Data Controller: Exphired
Email: support@exphired.com
Address: 12557 Danbury Way, Rosemount, MN 55068
Data Protection Officer: privacy@exphired.com