Privacy
What CREXOS collects, who receives it, and how to get it removed. Written from the system as it actually behaves.
This is a draft, and here is exactly why.
- CREXOS Technologies is not yet a registered company. Until it is, no entity is bound by this document.
- This text has not been reviewed by a lawyer. It describes how the system actually works; it is not legal advice and makes no compliance claim.
Who this is about
Two different groups of people appear in CREXOS, and they are owed different explanations.
Account holders are brokers and staff who sign in. If that is you, you gave us your details yourself.
Everyone else — property owners, company contacts, decision-makers — never signed up. Information about them is compiled from public records and commercial data vendors so that a broker can decide whether to get in touch. Most of the personal data in this product is about this second group, and the rest of this page says so plainly rather than describing only the people who agreed to be here.
What we hold about account holders
- Your email address and display name. Supplied at sign-up, or by Microsoft if you sign in with a work account.
- A password, if you set one. It is stored hashed by our authentication provider; we never see it.
- Sign-in records — when you last signed in, and a session cookie that keeps you signed in.
- The work you do in the product — your lists, notes, calls logged, campaigns, and which records you own.
- Mailbox content, only if you connect a mailbox. Replies to your campaigns are pulled in so they can appear in your inbox. Disconnecting the mailbox stops this.
We do not run analytics or advertising trackers in this application. There is no Google Analytics, no advertising pixel, and no session recording. The only cookie we set is the one that keeps you signed in.
What we hold about people who are not account holders
Business contact information and property records: names, business email addresses and phone numbers, job titles, employers, and the properties an entity owns or occupies. It comes from:
- Florida Department of Revenue tax rolls and county property appraiser records
- Florida Division of Corporations (Sunbiz) filings
- Florida DBPR licence records
- County official records, permits and UCC filings
- FMCSA carrier registrations
- USAspending federal award records
- Published company websites and news
- The commercial data vendors listed above
This is compiled for business-to-business outreach about commercial property. We do not knowingly collect information about consumers in a personal capacity, and we do not build profiles of private individuals outside their business role.
Accuracy. Much of this comes from tax rolls and registries that are themselves wrong or out of date, and vendor matching is imperfect. The product flags figures it cannot stand behind, and you should verify anything before relying on it. If information about you here is wrong, tell us and we will correct or remove it.
Who else receives it
CREXOS is not one system. These companies process data on our behalf, each for a stated reason:
Running the product
Hosting, database and sign-in. These hold account data and everything in the workspace.
Vercel (web app hosting) · Fly.io (API hosting) · Supabase (database and authentication)
Sending and receiving email on your behalf
Only when you connect a mailbox or run a campaign.
Instantly (outbound campaigns and replies) · Microsoft Graph (your Outlook mailbox, if you connect it)
Building and checking contact data
These receive a company name, a domain, an address or an email in order to return information about it.
Apollo · Hunter · Findymail · MailVeri · Datablist · PredictLeads · BatchData · ATTOM · Regrid · Apify · Firecrawl · Brave Search
Generating text
Draft emails, summaries and property write-ups. Prompts may contain data from your workspace.
Anthropic (via Helicone)
Syncing your CRM, if you connect it
Zoho
We do not sell personal information, and we do not share it for advertising.
Property pages embed a map from Google. Loading that map tells Google you viewed the page. If that matters to you, the rest of the page works without scrolling to it.
Text generation
Draft emails, summaries and property write-ups are generated by a large language model. The prompt can include data from your workspace — a property, a company, a reply you received. This is sent to Anthropic to produce the text and is not used to train their models.
How long we keep it
Account data and your work stay for as long as the account exists. When an account or a workspace is closed, we delete or anonymise its data within a reasonable period, except where a record must be kept — for example proof that someone asked not to be contacted, which we must retain in order to keep honouring it.
Asking us to stop, or to delete
Write to privacy@crexos.io. You can ask what we hold about you, ask us to correct it, ask us to delete it, or ask us not to contact you again. You do not need an account to ask, and you do not need to give a reason.
Every outreach email we send includes a way to unsubscribe, and an unsubscribe is applied to the address across the product rather than to a single campaign.
Security
Traffic is encrypted in transit. Access to a workspace requires sign-in, and records are scoped so that a member sees their own work and what has been shared with them.
We are not making a certification claim. CREXOS Technologies holds no security certification, and this page will say so until that changes.
Changes
If this page changes in a way that affects you, we will say so rather than quietly editing the date at the top.