Privacy Policy

Last updated: September 11, 2026

Renlo, Inc. ("Renlo", "we", "us", or "our") is a Delaware corporation that provides a software platform for commercial real estate brokers. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit renlo.co or any other domain we operate (the "Website"), use our platform and related applications (the "Service"), or interact with us through sales, marketing, support, or events.

By using the Website or Service you acknowledge that you have read this Privacy Policy. If you do not agree with it, please do not use the Website or Service.

If you use the Service through an account provided by your employer or brokerage (our "Customer"), that Customer controls the content submitted to the Service and may have its own privacy practices. Our processing of that content is governed primarily by our agreement with the Customer, including our Standard Terms and Data Processing Addendum (available at renlo.co/terms).

1. Information We Collect

Information you provide. When you create an account, request a demo, contact support, or otherwise communicate with us, we collect information such as your name, email address, phone number, company name, job title, and the contents of your messages. If you pay for the Service directly, our payment processor collects billing details; we do not store full payment card numbers.

Content submitted to the Service. Customers and their users upload documents, property data, financial information, contact lists, and other materials to the Service ("Customer Content"). Customer Content may include personal information about third parties, such as property owners, tenants, and counterparties. We process Customer Content on behalf of the Customer as described in Section 3.

Call and meeting recordings. The Service can record, transcribe, and summarize phone calls and video meetings when a user enables that feature. Recordings and transcripts, including the voices and statements of all participants, are Customer Content. Customers and their users are responsible for informing participants and obtaining any consent required by law before recording. If you take part in a call or meeting with a Renlo user and have questions about a recording, please contact that user's organization, which controls the recording.

Information collected automatically. When you use the Website or Service we collect:

• Log and usage data: IP address, browser type and version, operating system, pages viewed, features used, links clicked, referring URLs, and the dates and times of your activity.
• Device information: device type, unique device identifiers, and settings.
• Cookies and similar technologies: see Section 6.

Information from third parties. We may receive information from identity providers (such as Google, if you sign in with Google), from business partners and data providers, and from publicly available sources, such as company websites and professional networking sites.

2. How We Use Information

We use the information we collect to:

• provide, operate, secure, maintain, and improve the Website and Service;
• create and administer accounts and authenticate users;
• generate Outputs, transcripts, summaries, and CRM records, and deliver the other features you or your organization request;
• respond to inquiries, support requests, and feedback;
• send administrative messages such as policy updates, security alerts, billing notices, and service announcements;
• send marketing communications about our products, events, and offers, where permitted by law (you can opt out at any time using the link in the message or by contacting us);
• monitor and analyze usage, trends, and performance;
• develop new products, services, and features;
• detect, investigate, and prevent fraud, abuse, security incidents, and other harmful activity; and
• comply with legal obligations and enforce our agreements.

3. Customer Content, AI, and Single Sign-On

How we handle Customer Content. We use Customer Content to provide the Service to the Customer that submitted it. We do not make Customer Content available to users outside that Customer's organization without the Customer's authorization.

Improving the Service. Unless a Customer has opted out under our Standard Terms, we may use Customer Content to improve the Service, including to develop, train, and evaluate the models and features that power it. We do not use Customer Content to train our own general-purpose AI models. The Service currently generates Outputs using models from third-party AI providers, who are contractually prohibited from training their models on Customer Content.

Anonymized and aggregated data. We may derive anonymized, de-identified, or aggregated data from Customer Content and usage information. Such data does not identify any individual or Customer, and we may use it for any lawful purpose, including benchmarking, market analysis, and developing data products.

Single sign-on. If you sign in using Google or another identity provider, we receive your name, email address, and profile identifier from that provider and store the authentication tokens needed to keep you signed in. Your use of the identity provider is subject to its own privacy policy.

4. How We Share Information

We share personal information in the following circumstances:

• Service providers. With vendors that host our infrastructure, process payments, provide AI model inference, send email, deliver analytics, or otherwise support our operations, under contracts that restrict their use of the information to the services they provide to us. We may add, replace, or remove service providers as the Service develops.
• Analytics and advertising providers. Through cookies and similar technologies on the Website, as described in Section 6.
• Within a Customer's organization. With other authorized users in your Customer's workspace, according to the permissions set by your Customer.
• At your or your Customer's direction. When you or your Customer instruct us to share information, for example by exporting an Output or connecting a third-party integration.
• Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business, including during negotiations, subject to confidentiality obligations.
• Legal requirements. When we believe disclosure is required by law, regulation, subpoena, court order, or governmental request.
• Protection of rights and safety. When we believe disclosure is necessary to enforce our agreements, establish or defend legal claims, investigate or prevent fraud or security issues, or protect the rights, property, or safety of Renlo, our users, or others.
• Affiliates and advisors. With our corporate affiliates and professional advisors, under confidentiality obligations.

We do not sell personal information.

5. Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at support@renlo.co.

6. Cookies and Tracking Technologies

We and our service providers use cookies, pixels, local storage, and similar technologies to keep you signed in, remember your preferences, understand how the Website and Service are used, and measure the effectiveness of our marketing. Some of these technologies may be set by third-party analytics or advertising providers.

You can control cookies through your browser settings and, where offered, through our cookie preferences tool. Blocking some cookies may affect how the Website or Service functions. We do not currently respond to browser "Do Not Track" signals. Where the law requires it, we will honor opt-out preference signals such as Global Privacy Control.

7. Data Retention

We keep personal information for as long as needed to fulfill the purposes described in this Privacy Policy, to comply with legal, accounting, or reporting requirements, to resolve disputes, and to enforce our agreements. Customer Content is retained for the duration of the Customer's subscription and for 30 days afterwards to allow export, as described in our Data Processing Addendum, unless we agree with the Customer to delete it earlier or we are required to retain it by law. When we no longer need personal information, we delete it or anonymize it.

8. Processing Location

Renlo, Inc. is a U.S. company. We process information in the United States, the United Kingdom, and other countries where we or our service providers operate. Our Service is currently offered to customers in the United States. If you are located outside the United States, be aware that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

9. Your Privacy Rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct inaccurate or incomplete information;
• delete your personal information, subject to legal exceptions;
• receive a copy of your information in a portable format;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent; and
• lodge a complaint with a privacy regulator.

Residents of California and other US states with comprehensive privacy laws also have the right to know what personal information we collect and how we use and share it, and to not be discriminated against for exercising their rights. We do not sell personal information. If our use of advertising cookies on the Website amounts to "sharing" for cross-context behavioral advertising under your state's law, you can opt out through our cookie preferences tool or by emailing support@renlo.co. We do not use or disclose sensitive personal information for purposes other than those permitted by law.

To exercise any of these rights, email support@renlo.co. We will verify your identity and respond within the time required by applicable law. If your information was submitted to the Service by a Customer, we may direct your request to that Customer, or ask you to contact them directly, since they control that information.

10. Children

The Website and Service are intended for business users and are not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Third-Party Links and Integrations

The Website and Service may link to, or integrate with, third-party websites, tools, and services that we do not control. Their privacy practices are governed by their own policies, and we are not responsible for them. We encourage you to review the privacy policy of any third-party service you connect to the Service or visit through our links.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top and may also let you know by email or through the Service. Changes take effect when posted. Your continued use of the Website or Service after that indicates your acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or our data practices, contact us at:

Renlo, Inc. Email: support@renlo.co