Privacy Policy

Effective date: October 10, 2026

ClosingIO is a lead and showing inbox: your lead sources send notification emails to addresses we give you (or post to our webhooks), and we turn them into leads and showings you can work in one place. This policy explains what we collect and how we handle it.

1. Information We Collect

Account data. When you register we store your email address and a hashed password, or an Apple identifier if you use Sign in with Apple. API tokens you create are stored so the service can authenticate your requests.

Lead and showing content. Processing message content is what ClosingIO is for. Emails sent to your @in.closingio.com ingest addresses - and JSON posted to your webhook URLs - are processed and stored. That content typically includes lead names, phone numbers, email addresses, property and message details, and showing times and statuses.

Connected accounts. If you connect a third-party integration (for example dotloop, when available), we store the OAuth tokens needed to keep that connection working. Tokens are stored encrypted.

2. How We Use Your Data

We use your account data to sign you in and operate the service. We use lead and showing content to do what you signed up for: turn it into leads and showings in your dashboard, send your digest email, serve it through the API, and sync it to Closing CRM when you connect it.

We do not sell your data, share your leads with other users, or use lead content for advertising.

3. Third-Party Services

Resend - receives inbound email for your ingest addresses and sends your digest emails. Privacy policy: resend.com/legal/privacy-policy

Apple - authenticates you if you choose Sign in with Apple.

Dotloop - only if you connect it; governed by your agreement with dotloop and its own policies.

4. Your Responsibilities

Only route lead and showing emails to ClosingIO that you are authorized to process - typically emails addressed to you about your own leads and showings. How you may use the contact details inside those leads is governed by the terms of the lead source and applicable law.

5. Data Security & Retention

The service runs over HTTPS, passwords are hashed, and integration tokens are stored encrypted. No system is perfectly secure, but we take reasonable measures to protect your data.

Your data is kept while your account is active. To delete your account and stored data, email us and we will take care of it.

6. Changes & Contact

We may update this policy; the effective date above reflects the current version. Questions or deletion requests: [email protected].