Privacy Policy

01 Who We Are

Closr is an AI-powered real estate lead management platform developed and operated by Husig, an AI consultancy registered in Nepal. For the purposes of this policy, "we," "us," and "our" refer to Husig and the Closr service.

Closr is designed for real estate agents and brokerages to manage, score, and track property leads. Our users ("Agents") may input personal information about third-party property enquirers ("Leads") into the platform.

02 Information We Collect

Information you provide directly

• Agent account data: First name, last name, email address, phone number, and password (stored as a secure hash).
• Lead data: Full name, contact information (email, phone, preferred contact method), property preferences, budget range, location preferences, motivation type, mortgage status, and appointment details.
• Notes & messages: Any notes or messages you create or send through the platform in relation to a lead.
• Property listings: Property details, images, and associated metadata you add to the platform.

Information collected automatically

• Usage data: Actions taken within the platform, pages visited, features used, and timestamps.
• Device & technical data: IP address, browser type, operating system, and device identifiers.
• Push notification tokens: If you enable push notifications, we collect and store your Firebase Cloud Messaging (FCM) device token.
• Log data: Server logs including request metadata and error reports for diagnostic purposes.

Scores and derived data

Our AI scoring engine derives a "hotness score" and dimensional LPMAMA breakdown from the lead data you provide. This derived data is stored alongside the lead record.

03 How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Closr platform and its features.
• Authenticate users and manage account access securely.
• Calculate AI lead scores and surface insights to agents.
• Match leads to property listings based on recorded preferences.
• Send push notifications, reminders, and in-platform alerts.
• Provide customer support and respond to queries.
• Analyse usage patterns to improve platform performance and features.
• Detect, prevent, and address technical issues, fraud, or abuse.
• Comply with applicable legal obligations.

We do not sell your personal data or the personal data of leads entered into the platform to any third party.

04 Legal Basis for Processing

Where applicable data protection law requires a legal basis for processing personal data, we rely on the following:

• Contract performance: Processing necessary to provide the service you have signed up for.
• Legitimate interests: To improve the platform, ensure security, and prevent fraud.
• Consent: Where you have explicitly opted in to optional features such as push notifications.
• Legal obligation: Where we are required to process data to comply with applicable law.

Where agents enter personal data about third-party leads into the platform, the agent is responsible for ensuring they have an appropriate legal basis to process and share that data with us.

05 Sharing Your Information

We do not sell, rent, or trade your personal information. We may share data only in the following limited circumstances:

• Service providers: Trusted sub-processors who help us operate the platform (e.g., cloud hosting, database services, push notification infrastructure). These parties are bound by data processing agreements and may not use your data for their own purposes.
• Firebase / Google: We use Firebase Cloud Messaging for push notifications. Device tokens and notification content are transmitted to Google's servers in accordance with Google's Privacy Policy.
• Legal requirements: If required by law, court order, or governmental authority, we may disclose information as necessary.
• Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred. We will notify affected users in advance.

06 Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Specifically:

• Agent accounts: Retained for the duration of the account and for up to 90 days after account deletion, to allow for recovery and to satisfy any outstanding obligations.
• Lead records: Retained as long as the associated agent account is active. Agents may delete individual lead records at any time.
• Audit logs: Retained for up to 12 months for compliance and dispute resolution purposes.
• Usage and log data: Typically retained for 30–90 days.

After the applicable retention period, data is securely deleted or anonymised.

07 Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse. These include:

• Encrypted data transmission via HTTPS/TLS.
• Securely hashed passwords (no plaintext password storage).
• Token-based authentication with short expiry windows.
• Restricted database access with role-based permissions.
• Regular security reviews and dependency updates.

While we take these measures seriously, no system is completely immune to security risks. We encourage you to use strong, unique passwords and to contact us immediately if you suspect unauthorised access to your account.

08 Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that inaccurate or incomplete data be corrected.
• Deletion: Request erasure of your personal data (subject to certain legal exceptions).
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, please contact us at the address in Section 13. We will respond within 30 days.

09 Cookies & Tracking

The Closr web application uses minimal cookies, primarily to maintain your authenticated session. We do not use advertising or third-party tracking cookies.

• Session cookies: Required for authentication. These expire when you close your browser or log out.
• Preference cookies: Store optional user preferences such as display settings.

You may configure your browser to reject cookies, but this may prevent you from logging in or using certain platform features.

10 Third-Party Services

Closr integrates with or relies upon the following third-party services:

• Firebase (Google): Push notification delivery. Governed by Google's Privacy Policy.
• Redis: Session and cache management (self-hosted; no data leaves our infrastructure).
• Cloud hosting provider: Infrastructure hosting for the application and database. Details are available on request.

We are not responsible for the privacy practices of third-party services. We encourage you to review their respective privacy policies.

11 Children's Privacy

Closr is a professional business platform and is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us and we will take steps to delete that information promptly.

12 Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Notify active users via in-platform notification or email.

Continued use of the platform after the effective date of any changes constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

13 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us: