Privacy Policy

Supra eKEY Systems ("Company," "we," "us," or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our property access platform, website, and mobile application (collectively, the "Services").

Please read this policy carefully. If you disagree with its terms, please discontinue use of the Services.

1. Information We Collect

Information You Provide Directly

• Account Information: Name, email address, phone number, and professional credentials when registering.
• Access Requests: Property addresses, inspection times, and identity verification documents submitted for access authorization.
• Communications: Messages, support tickets, and other correspondence with our team.

Information Collected Automatically

• Device & Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and language settings.
• Usage Data: Pages visited, features used, access timestamps, click patterns, scroll depth, and session duration.
• Location Data: Approximate geographic location derived from your IP address (country, region, city). We do not collect precise GPS location without your explicit consent.
• Log Data: Server logs, error reports, and performance metrics collected automatically when you interact with our Services.
• Cookies & Tracking Technologies: See our Cookie Policy for details.

Information From Third Parties

• Property listing platforms and MLS services may provide property and agent information in connection with authorized access grants.
• Identity verification partners may provide confirmation of professional credentials.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve our property access services.
• Verify your identity and professional authorization before granting property access.
• Send access confirmations, security alerts, and operational notifications.
• Monitor for fraudulent, unauthorized, or illegal use of the platform.
• Comply with legal obligations, court orders, and law enforcement requests.
• Analyze usage patterns to improve platform performance and security.
• Respond to your requests, questions, and support inquiries.
• Enforce our Terms of Service and other applicable agreements.

We do not sell your personal information to third parties, nor do we use it for targeted advertising.

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process personal data on the following legal bases:

• Contract Performance: Processing necessary to provide the Services you have requested.
• Legitimate Interests: Security monitoring, fraud prevention, and platform analytics.
• Legal Obligation: Compliance with applicable laws and regulations.
• Consent: Where required by law, with your explicit consent.

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information only in the following circumstances:

• Service Providers: Trusted third-party vendors who assist us in operating the platform (hosting, analytics, payment processing) under strict data processing agreements.
• Property Stakeholders: Listing agents, property managers, or authorized parties may receive access logs related to their specific properties.
• Legal Compliance: When required by law, subpoena, or other legal process, or when necessary to protect our rights or the safety of users.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to you.
• With Your Consent: In any other circumstances, only with your express consent.

5. Data Security

We implement comprehensive technical and organizational security measures to protect your personal information, including:

• AES-256 encryption for data at rest.
• TLS 1.3 encryption for all data in transit.
• Access controls with multi-factor authentication for administrative systems.
• Regular security audits and penetration testing.
• Intrusion detection and real-time monitoring systems.
• Strict employee access controls and security training.

No method of transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. Please see our Security Policy for more detail.

6. Data Retention

We retain personal information for as long as necessary to provide our Services and comply with legal obligations. Specifically:

• Access logs and eKey usage records are retained for a minimum of 3 years for property security and audit purposes.
• Account information is retained while your account remains active and for 2 years thereafter.
• Analytics data is aggregated and anonymized after 12 months.

7. Your Privacy Rights

All Users

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your data, subject to legal retention obligations.
• Opt out of non-essential communications.

California Residents (CCPA)

California residents have the right to know what personal information is collected, to request deletion, to opt out of sale (we do not sell data), and to non-discrimination for exercising these rights.

EEA / UK Residents (GDPR / UK GDPR)

You have rights to access, rectification, erasure, restriction of processing, data portability, and to object to processing. You may also lodge a complaint with your national data protection authority.

8. Cookies

We use cookies and similar tracking technologies to enhance your experience. Please review our Cookie Policy for full details.

9. Children's Privacy

Our Services are intended exclusively for real estate professionals and are not directed to children under 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

10. Third-Party Links

Our Services may contain links to third-party websites. This Privacy Policy does not apply to those sites, and we encourage you to review the privacy practices of any third-party site you visit.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for any international transfers, including Standard Contractual Clauses where applicable.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our platform or sending you an email. Continued use of our Services after changes become effective constitutes acceptance of the revised policy.