Privacy Policy

Last updated: 8 September 2026

Renlo, Inc. ("Renlo", "we", "us", or "our") is a Delaware corporation that provides a software platform for commercial real estate brokers. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit renlo.co or any other domain we operate (the "Website"), use our platform and related applications (the "Service"), or interact with us through sales, marketing, support, or events.

By using the Website or Service you acknowledge that you have read this Privacy Policy. If you do not agree with it, please do not use the Website or Service.

If you use the Service through an account provided by your employer or brokerage (our "Customer"), that Customer controls the content submitted to the Service and may have its own privacy practices. Our processing of that content is governed primarily by our agreement with the Customer, including our Standard Terms and Data Processing Addendum.

1. Information We Collect

Information you provide. When you create an account, request a demo, contact support, or otherwise communicate with us, we collect information such as your name, email address, phone number, company name, job title, and the contents of your messages. If you pay for the Service directly, our payment processor collects billing details; we do not store full payment card numbers.

Content submitted to the Service. Customers and their users upload documents, property data, financial information, contact lists, and other materials to the Service ("Customer Content"). Customer Content may include personal information about third parties, such as property owners, tenants, and counterparties. We process Customer Content on behalf of the Customer as described in Section 3.

Call and meeting recordings. The Service can record, transcribe, and summarise phone calls and video meetings when a user enables that feature. Recordings and transcripts, including the voices and statements of all participants, are Customer Content. Customers and their users are responsible for informing participants and obtaining any consent required by law before recording. If you take part in a call or meeting with a Renlo user and have questions about a recording, please contact that user's organisation, which controls the recording.

Information collected automatically. When you use the Website or Service we collect:

• Log and usage data: IP address, browser type and version, operating system, pages viewed, features used, links clicked, referring URLs, and the dates and times of your activity.
• Device information: device type, unique device identifiers, and settings.
• Cookies and similar technologies: see Section 6.

Information from third parties. We may receive information from identity providers (such as Google, if you sign in with Google), from business partners and data providers, and from publicly available sources, such as company websites and professional networking sites.

2. How We Use Information

We use the information we collect to:

• provide, operate, secure, maintain, and improve the Website and Service;
• create and administer accounts and authenticate users;
• generate Outputs, transcripts, summaries, and CRM records, and deliver the other features you or your organisation request;
• respond to enquiries, support requests, and feedback;
• send administrative messages such as policy updates, security alerts, billing notices, and service announcements;
• send marketing communications about our products, events, and offers, where permitted by law (you can opt out at any time using the link in the message or by contacting us);
• monitor and analyse usage, trends, and performance;
• develop new products, services, and features;
• detect, investigate, and prevent fraud, abuse, security incidents, and other harmful activity; and
• comply with legal obligations and enforce our agreements.

3. Customer Content, AI Models, and Single Sign-On

How we handle Customer Content. We use Customer Content to provide the Service to the Customer that submitted it. We do not make Customer Content available to users outside that Customer's organisation without the Customer's authorisation.

Improving our models. Unless a Customer has opted out under our Standard Terms, we may use Customer Content to train, fine-tune, and evaluate the machine-learning models that power the Service and to improve the quality of the Outputs we generate. When we do so we apply access controls and security measures, and we honour the broker-specific safeguards in our Standard Terms, including not disclosing property-owner identities and not surfacing property-level details of active deals to third parties during the applicable cooling-off period.

Anonymised and aggregated data. We may derive anonymised or aggregated data from Customer Content and usage information. Such data does not identify any individual, Customer, or Customer's client, and we may use it for any lawful purpose, including benchmarking and market analysis.

Single sign-on. If you sign in using Google or another identity provider, we receive your name, email address, and profile identifier from that provider and store the authentication tokens needed to keep you signed in. Your use of the identity provider is subject to its own privacy policy.

4. How We Share Information

We share personal information only in the following circumstances:

• Service providers. With vendors that host our infrastructure, process payments, provide AI model inference, send email, deliver analytics, or otherwise support our operations, under contracts that restrict their use of the information to the services they provide to us.
• Within a Customer's organisation. With other authorised users in your Customer's workspace, according to the permissions set by your Customer.
• At your or your Customer's direction. When you or your Customer instruct us to share information, for example by exporting an Output or connecting a third-party integration.
• Business transfers. In connection with a merger, acquisition, financing, reorganisation, or sale of all or part of our business, including during negotiations, subject to confidentiality obligations.
• Legal requirements. When we believe disclosure is required by law, regulation, subpoena, court order, or governmental request.
• Protection of rights and safety. When we believe disclosure is necessary to enforce our agreements, investigate or prevent fraud or security issues, or protect the rights, property, or safety of Renlo, our users, or others.
• Affiliates. With our corporate affiliates, who will handle the information in accordance with this Privacy Policy.

We do not sell personal information, and we do not share personal information with third parties for their own direct marketing.

5. Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorised access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at support@renlo.co.

6. Cookies and Tracking Technologies

We and our service providers use cookies, pixels, local storage, and similar technologies to keep you signed in, remember your preferences, understand how the Website and Service are used, and measure the effectiveness of our marketing. Some of these technologies are set by third-party analytics and advertising providers.

You can control cookies through your browser settings and, where offered, through our cookie preferences tool. Blocking some cookies may affect how the Website or Service functions. We do not currently respond to browser "Do Not Track" signals. Where the law requires it, we will honour opt-out preference signals such as Global Privacy Control.

7. Data Retention

We keep personal information for as long as needed to fulfil the purposes described in this Privacy Policy, to comply with legal, accounting, or reporting requirements, to resolve disputes, and to enforce our agreements. Customer Content is retained for the duration of the Customer's subscription and for a reasonable period afterwards to allow export, as described in our Data Processing Addendum, unless the Customer requests earlier deletion or we are required to retain it by law. When we no longer need personal information, we delete it or anonymise it.

8. Processing Location

We are based in the United States and process information there and in other countries where our service providers operate. Our Service is currently offered to customers in the United States. If you are located outside the United States, be aware that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

9. Your Privacy Rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct inaccurate or incomplete information;
• delete your personal information, subject to legal exceptions;
• receive a copy of your information in a portable format;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent; and
• lodge a complaint with a privacy regulator.

Residents of California and other US states with comprehensive privacy laws also have the right to know what personal information we collect and how we use and share it, and to not be discriminated against for exercising their rights. We do not sell personal information or share it for cross-context behavioural advertising, and we do not use or disclose sensitive personal information for purposes other than those permitted by law.

To exercise any of these rights, email support@renlo.co. We will verify your identity and respond within the time required by applicable law. If your information was submitted to the Service by a Customer, we may direct your request to that Customer, or ask you to contact them directly, since they control that information.

10. Children

The Website and Service are intended for business users and are not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Third-Party Links and Integrations

The Website and Service may link to, or integrate with, third-party websites, tools, and services that we do not control. Their privacy practices are governed by their own policies, and we are not responsible for them. We encourage you to review the privacy policy of any third-party service you connect to the Service or visit through our links.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top and, for material changes, make reasonable efforts to notify Customers. Changes take effect when posted. Your continued use of the Website or Service after that indicates your acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or our data practices, contact us at:

Renlo, Inc. Email: support@renlo.co