Broker Matrix, LLC operates Qsells and related voice, messaging, IDX, and transaction services (together with Call Animal and Qsells-branded surfaces where applicable, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices available to you and your organization.

The Service is designed for real estate professionals and the organizations that employ or supervise them — including brokerages, teams, franchise organizations, and independent agents — as well as consumers and transaction participants who interact with our customers through portals, showings, signing flows, and communications features.

By creating an account, accepting an invitation, connecting an integration, or otherwise using the Service, you acknowledge this Privacy Policy. If you do not agree, do not use the Service.

The information we process depends on how your organization uses the Service. In a multi-tenant environment, each brokerage or team's data is logically separated, but the categories below generally apply across the platform.

We use information to operate, secure, and improve the Service, including to:

• Provide CRM, pipeline, task, and collaboration features for your organization.
• Manage contacts, leads, properties, listings, opportunities, deals, and related workflows.
• Deliver communications features such as calling, SMS, email, and AI-assisted outreach.
• Host documents, generate signing requests, capture signatures, and maintain audit trails.
• Power search, reporting, automation, campaigns, and AI-assisted recommendations or drafting.
• Authenticate users, enforce permissions, and maintain multi-tenant organization isolation.
• Process payments, manage subscriptions, and provide customer support.
• Monitor performance, debug issues, prevent fraud and abuse, and meet legal obligations.
• Send service announcements, security alerts, and — where permitted — product updates.

Where the General Data Protection Regulation (GDPR), UK GDPR, or similar laws apply, we process personal data on the following bases:

• Contract performance — to provide the Service under our agreement with your organization or, for consumer portal users, to deliver requested services.
• Legitimate interests — to secure the platform, prevent abuse, improve features, and support integrations, balanced against your rights.
• Consent — where required for certain marketing, cookies, or optional AI features, or where your organization instructs us to rely on consent for specific contact outreach.
• Legal obligation — to comply with law, respond to lawful requests, and maintain records required for real estate, telecommunications, or tax regulations.

For contact and consumer data uploaded by brokerages, the brokerage or team is typically the controller and Qsells acts as a processor or service provider, as described in Section 15.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We disclose information only as described below.

Listing and market data displayed through the Service is licensed from MLSs, boards, brokers, and IDX vendors. That data is subject to separate license terms, display rules, attribution requirements, and refresh intervals imposed by the data source.

Your organization is responsible for maintaining valid MLS/IDX agreements, using data only for permitted purposes, displaying required disclaimers, and honoring opt-out, VOW, and consumer privacy rules applicable to your market.

We process MLS and IDX data on your instructions to sync listings, power search and websites, and display market information to authorized users and, where configured, consumers. We do not assert independent ownership over third-party listing content.

When your organization uses document or e-signing features, we store documents, field placements, signer routing, authentication steps, signature captures, and event timestamps needed to evidence execution under the ESIGN Act, UETA, and similar laws.

Signers who are not platform users may receive unique links or tokens to review and sign documents. We collect signer contact details, device metadata, and audit events associated with those sessions.

Retention of signed documents and certificates is governed by your organization's settings and applicable transaction recordkeeping requirements. Completed documents may remain available to authorized deal participants and administrators for the life of the account unless deleted in accordance with Section 9.

The Service includes AI-assisted features such as voice agents, chat assistants, lead scoring, note summarization, suggested responses, and workflow automation. These features may process contact, property, communication, and transaction context to generate outputs for your organization.

AI outputs are provided for productivity and decision support. Your organization remains responsible for reviewing AI-generated content before relying on it in client communications, contracts, or compliance-sensitive workflows.

Depending on configuration, automated systems may initiate or route calls and messages. Where required by law or your organization's policies, you must provide appropriate disclosures to consumers and honor do-not-contact requests.

We may use human review on a limited basis to investigate abuse, improve safety, or resolve support issues. We do not use your organization's confidential deal documents to train public foundation models without a separate written agreement.

We retain information for as long as needed to provide the Service, fulfill the purposes described in this policy, and comply with legal obligations. Typical retention practices include:

• Active account data — retained while your organization maintains an active subscription or account, plus a limited wind-down period after termination.
• Transaction and signing records — retained according to your organization's settings and applicable real estate, brokerage, and tax recordkeeping requirements, which may extend several years.
• Communications logs — call, SMS, and messaging records retained based on product settings and operational needs, unless earlier deletion is requested and permitted by law.
• Backups — encrypted backups may persist for a limited period after deletion from production systems.
• Legal holds — we may preserve data longer when required for litigation, investigations, or regulatory inquiries.

Upon verified request from an authorized organization administrator, we will delete or return customer data in accordance with our data processing terms, subject to legal retention requirements.

We implement administrative, technical, and organizational measures designed to protect information, including encryption in transit, encryption at rest for stored data, access controls, role-based permissions, and logical tenant isolation between organizations.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we work to maintain safeguards appropriate to the sensitivity of real estate transaction and consumer data processed through the Service.

If we become aware of a security incident affecting personal information, we will notify affected customers without undue delay and in accordance with applicable law, including state breach notification statutes.

For additional detail, see our Information Security Policy.

Depending on your location and relationship to the Service, you may have rights to access, correct, delete, restrict, or port personal information, and to object to certain processing.

The Service is not directed to individuals under 16 years of age, and we do not knowingly collect personal information from children under 16. If you believe a child has provided personal information through the Service, contact us at privacy@qsells.com and we will take appropriate steps to delete the information.

Broker Matrix, LLC is based in the United States. If you access the Service from outside the U.S., your information may be transferred to, stored in, and processed in the United States and other countries where we or our service providers operate.

Where required, we rely on appropriate safeguards for cross-border transfers, such as Standard Contractual Clauses and supplementary technical and organizational measures, for personal data subject to GDPR or UK GDPR.

When a brokerage, team, or agent uploads contact, lead, or consumer information, that organization is generally the data controller (or "business" under CCPA) for those records. Broker Matrix, LLC acts as a processor / service provider processing data on the customer's instructions to deliver the Service.

Customers are responsible for:

• Providing required notices and obtaining lawful bases or consents for collection and outreach.
• Honoring opt-out, do-not-call, and do-not-contact requests.
• Configuring retention, access, and sharing settings appropriate to their brokerage policies.
• Ensuring MLS, IDX, and integration use complies with vendor agreements and applicable law.
• Responding to consumer privacy requests for data they control, with our assistance where contracted.

Enterprise customers may use our Data Processing Agreement (DPA) describing subprocessors, MLS data handling, security measures, and cross-border transfer mechanisms. Countersigned copies are available on request.

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy on this page, update the effective date above, and — where appropriate — notify organization administrators by email or in-product notice at least fifteen (15) days before the changes take effect.

Your continued use of the Service after the effective date constitutes acceptance of the revised policy. If you disagree with an update, you should discontinue use and contact your organization administrator about account termination.

Questions about this Privacy Policy, our subprocessors, or your privacy rights can be sent to: