AgentRoute AI Privacy Policy

Effective Date: March 31, 2026

AgentRoute AI ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App"). Please read this policy carefully. By using the App, you consent to the practices described in this Privacy Policy.

1. Information We Collect

We collect the following types of information to provide and improve our services:

1.1 Account Information

• Name: Your full name for account identification
• Email Address: For account login, password recovery, and communications
• Phone Number: Optional, for account recovery and contact purposes
• Password: Securely hashed using bcrypt encryption (never stored in plain text)

1.2 Profile Information

• Profile Photos: Images you upload for identification within the App
• Role: Your role within your organization (Admin, Manager, or Agent)
• Organization Data: Team membership and hierarchy information when connected to a team

1.3 Lead & Customer Data

• Contact information (names, phone numbers, email addresses, addresses)
• Notes and comments about leads and customers
• Appointment details and scheduling information
• Pipeline stage and status information
• Scope of Appointment (SOA) form data and signatures

1.4 Device & Usage Information

• Location Data: GPS coordinates for route optimization (only with your explicit permission)
• Camera Access: For document scanning, business card capture, and profile photos (only when you initiate these features)
• Device Information: Device type, operating system version, and app version for troubleshooting
• Usage Analytics: App interaction data and feature usage patterns to improve our services

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the App's functionality
• Enable lead management and CRM features
• Generate and manage Scope of Appointment (SOA) documents with digital signatures
• Power AI-driven sales coaching and assistance features
• Optimize route planning and appointment scheduling
• Send push notifications, appointment reminders, and important updates
• Facilitate team collaboration when in hierarchy/connected mode
• Process subscription payments through Apple's App Store
• Respond to your requests and provide customer support
• Analyze usage patterns to enhance user experience
• Comply with legal obligations

3. Data Storage & Security

Our security measures include:

• All passwords are securely hashed using bcrypt encryption
• Data transmission is protected using HTTPS/TLS encryption
• Profile images are stored as encrypted data
• Role-based access control protects team data boundaries
• Regular security audits and updates are performed
• MongoDB database with encryption at rest

4. Role-Based Data Access

When you join a team or organization, data visibility is determined by role:

• Admins: Can view all team member activity, leads, performance metrics, and manage the organization
• Managers: Can view data for agents directly under their supervision, including leads, appointments, and activity
• Agents: Can only view their own records unless explicit sharing is enabled

Your personal profile information (email, password) remains private regardless of role. Profile photos are visible to team members within the same organization.

5. Account Modes

6. Offline Data Handling

AgentRoute AI includes offline functionality:

• When you lose internet connectivity, data is temporarily stored locally on your device
• Offline-created leads and edits are saved securely on your device with encryption
• When internet connectivity is restored, your offline data automatically syncs with our servers
• Local offline data is deleted from your device after successful synchronization
• You can view sync status in the app to know if data is pending upload

7. Data Ownership & Portability

• Records you create as an agent are owned by you
• If you leave a team, your agent-owned records remain with you
• Your former team loses access to your records immediately upon separation
• Only records explicitly marked as team-owned remain with the organization
• You can export your data at any time

8. Third-Party Services

We use the following third-party services to provide our App:

• AI Processing: OpenAI GPT and Google Gemini for AI coaching and document analysis
• Payment Processing: Apple App Store for subscription billing (RevenueCat)
• Email Services: Resend for transactional emails (password reset, notifications)
• Push Notifications: Expo notification services for alerts and reminders
• Analytics: Usage analytics to improve app performance

These services have their own privacy policies and data handling practices. We encourage you to review them.

9. Your Rights

You have the right to:

• Access: View and export your personal data at any time
• Correction: Update or correct your personal information
• Deletion: Request deletion of your account and all associated data
• Portability: Export your data in a readable format
• Opt-out: Opt out of marketing communications
• Restrict: Control push notification preferences
• Withdraw Consent: Revoke camera and location permissions at any time through device settings

10. Account Deletion

You can delete your account at any time through the Settings screen in the App. When you delete your account:

• Your personal information will be permanently removed
• Your profile photo will be permanently deleted
• Your leads, appointments, and documents will be deleted
• Any locally stored offline data will be cleared
• This action cannot be undone

Note: Leaving a team does NOT delete your account. Your agent-owned data moves with you into Solo mode.

11. Children's Privacy

AgentRoute AI is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we discover that we have collected personal information from a child under 18, we will delete it immediately.

12. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal purposes.

13. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or via email. Your continued use of the App after changes become effective constitutes acceptance of the revised policy.

15. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to request deletion of personal information
• Right to non-discrimination for exercising your privacy rights