Privacy Policy

What this covers

The Lewis marketing site, and the Lewis application an agent signs into. Two quite different things, so they are described separately.

The marketing site loads no trackers

No analytics, no advertising pixels, no tag manager, no session recorder, no third-party fonts. The pages you are reading are static files and a stylesheet served from the same origin, and the only script on them animates the page. Nothing here identifies you, and there is no cookie banner because there is nothing to consent to.

What the application stores

About you, the agent

• Your name and phone number. The phone number is the login: there is no password, and verification is done with a signed session cookie.
• Your role, and the settings on your account, including your autonomy level.
• Whichever Google account you connect, if you connect one, and only for the scopes you grant.

About your leads

Whatever is in the CSV export you import. In practice that is names, phone numbers, email addresses where present, and the free-text notes column, which is the part Lewis makes the most use of.

Numbers that are not textable, and anyone marked do-not-contact, are dropped at import and are not stored as contactable records.

What happens in a conversation

• Every message sent and received, on the thread it belongs to.
• Every decision, on an append-only event log: what was drafted, what was held, what was blocked and by which rule, what was sent and when.
• What each conversation cost to run.

Who else processes it

Each of these is a processor doing one job, and there are no others:

• Vercel: hosting and serving the application.
• Supabase: the Postgres database the application stores everything in.
• OpenRouter: routes the model calls that draft and read messages. Message content is sent to it, and through it to the model provider it routes to.
• Linq: the iMessage transport, where an account is texting rather than using the browser.
• Mapbox: routing, and only when a lead asks how far something is. A street address or landmark name is sent; nothing about the lead is.
• Follow Up Boss: only if you connect it.
• Google: only if you connect it, and only for the scopes you grant.

There is no advertising network, no data broker, and nothing is sold. Lead data is not used to train models.

How long it is kept

For as long as your account is open. Messages, threads and the event log are the product; deleting them is deleting the thing you are paying for.

The event log is append-only by design: entries are added and none is rewritten, which means log tidying is not a thing that can happen, either by us or by you.

Deleting it

You can have your account and its data deleted. The log’s append-only property applies to normal operation, not to a deletion request: a deletion removes the records rather than annotating them.

This is the part that needs a real address. There is no support inbox published yet, and a policy whose exercise-your-rights section names no route is a policy with a hole in it. Until there is one, the way to reach a human is the contact page.

Cookies

One, and it is the session: the signed cookie that keeps you logged in. It is not shared, not read by anybody else, and there is nothing else set.

Children

The application is for licensed real-estate professionals and is not directed at anyone under 18.

Changes

The date at the top of this page is when it last changed. Material changes will be said out loud on Updates rather than only reflected in a new date.

The honest caveat

This describes the software accurately and it has not been reviewed by counsel. It is not a substitute for your own legal advice, and where your brokerage’s obligations are stricter, theirs govern.