Privacy Policy

1. Scope

This Privacy Policy describes how Loom Realty collects, uses, stores, discloses, and protects information associated with loomrealty.com, inquiries, account registration, the client dashboard, document vault, billing, communications, and California Broker of Record or Designated Officer services. It applies to visitors, leads, invited users, applicants, approved clients, client personnel, and authorized representatives.

2. Categories of Information Collected

Depending on your interaction and approved scope, Loom may collect:

• Identity and contact data: name, email, telephone number, mailing address, city, state, title, company, and relationship to the client.
• Authentication and access data: Firebase user identifier, login events, password-reset requests, approval status, invitation status, access role, acceptance timestamps, security events, and session-related data. Loom does not receive your plaintext Firebase password.
• Entity and licensing data: entity name, ownership, officers, designated broker information, DRE license data, DBAs, business addresses, formation and corporate documents, personnel rosters, and approved activities.
• Operating data: service locations, properties and units managed, properties added or removed, leases executed, residential sales closed, management and lease records, advertising, vendors, and workflow information.
• Compliance and supervision data: monthly certifications, trust-account counts and reconciliation confirmations, complaints, claims, disputes, demands, litigation, DRE or governmental notices, insurance changes, personnel changes, broker review notes, corrective actions, and issue-resolution records.
• Documents: BOR/DO agreements, insurance records, endorsements, corporation and license filings, management agreements, leases, transaction files, trust-account materials, billing authorizations, and related metadata.
• Commercial and billing data: service tier, onboarding and recurring fees, Stripe customer or subscription identifiers, invoice status, payment events, failed-payment status, and payment history. Complete card data is handled by Stripe rather than stored in the Loom client database.
• Lead and communication data: inquiry details, source and campaign data, follow-up status, correspondence, call or text history voluntarily provided, communication preferences, marketing consent, and suppression records.
• Technical data: IP address, device and browser characteristics, cookies, local storage, referral URL, page activity, approximate location, analytics events, timestamps, logs, and suspected-abuse signals.

3. Sources of Information

We collect information directly from you and your company; from authorized owners, officers, employees, contractors, agents, and advisors; automatically from the site and service providers; from payment, authentication, email, analytics, and hosting providers; from public records and DRE sources; and from third parties you authorize or that contact Loom regarding an active matter.

4. Purposes of Processing

We may use information to:

• Respond to inquiries, evaluate fit, prevent lost leads, schedule follow-up, and administer invitations.
• Create and secure accounts, verify identity, reset passwords, enforce approval status, and prevent unauthorized access.
• Perform onboarding, document collection, service-scope review, broker supervision, monthly reporting, issue escalation, and compliance recordkeeping.
• Review insurance, entity, licensing, advertising, trust-fund, management, leasing, transaction, personnel, and operational information within the approved scope.
• Administer fees, subscriptions, invoices, failed payments, collections, and Last Year, YTD, and MTD business reporting.
• Send required operational, security, legal, billing, regulatory, and BOR/DO communications.
• Send optional educational or marketing communications when consent or another lawful basis applies.
• Maintain an audit trail, investigate misuse, enforce agreements, establish or defend legal claims, cooperate with regulators, and meet legal obligations.
• Operate, analyze, troubleshoot, secure, and improve the site, Portal, client experience, and internal business processes.

5. BOR/DO Records and Reliance

Client submissions may become part of Loom’s supervision, compliance, audit, insurance, dispute, or legal record. Loom may compare submissions over time, preserve prior versions, flag missing reports, associate documents with properties or transactions, and record administrative or broker review. A request to correct information does not necessarily require Loom to erase the historical version when retention is reasonably necessary to preserve an accurate audit trail or meet legal, contractual, insurance, or regulatory obligations.

6. Disclosure of Information

We may disclose relevant information to:

• Loom Realty personnel, including David Levine Bramante and Kayla Jane Bramante, and authorized contractors who need it for their work.
• Authentication, cloud hosting, database, storage, payment, email, analytics, security, document, and communication providers.
• Attorneys, accountants, insurers, brokers, banks, technology providers, consultants, and other professional advisors assisting Loom or an approved client matter.
• The California DRE, courts, law enforcement, governmental agencies, insurers, claimants, counterparties, or other persons when reasonably necessary for legal process, compliance, supervision, safety, fraud prevention, a complaint, claim, investigation, or dispute.
• A successor, purchaser, financing source, or advisor in connection with a proposed or completed reorganization, merger, financing, asset transfer, or similar business transaction, subject to appropriate protections.
• Other parties at your direction, with your consent, or as reasonably apparent from the service you request.

Loom does not sell personal information for money and does not knowingly share personal information for cross-context behavioral advertising.

7. Service Providers and Platforms

Loom’s current technology stack may include Firebase for authentication, Supabase for database and private storage services, Stripe for payments, Resend for email delivery, Vercel for hosting, and analytics providers such as Google Analytics. Providers may process information under their own terms, privacy notices, security practices, and geographic infrastructure. Loom may replace or add providers as its systems evolve.

8. Data Minimization and Restricted Information

Submit only information reasonably necessary for the requested or approved scope. Unless Loom specifically requests it through an approved secure workflow, do not upload Social Security numbers, complete payment-card numbers, online-banking credentials, passwords, medical records, biometric identifiers, unrelated consumer files, or other highly sensitive information. If prohibited or unnecessary data is submitted, Loom may restrict, delete, quarantine, or preserve it as reasonably necessary for security or legal purposes.

9. Security

Loom uses administrative, technical, and organizational safeguards designed for the nature of the system, including third-party authentication, approval-based access, row-level database controls, private storage, and restricted administrative roles. No transmission, storage, identity system, or vendor is completely secure. You must protect credentials and devices, use a monitored email account, limit internal access, and report suspected unauthorized access promptly. Do not use ordinary email for sensitive records when Loom directs you to a secure upload workflow.

10. Retention

Retention depends on the record, relationship, and applicable requirements. Loom may retain lead records, account information, acceptance evidence, agreements, communications, billing events, supervision records, monthly certifications, documents, issue logs, and audit trails for the active relationship and afterward as reasonably necessary for DRE or other legal obligations, limitation periods, insurance, audits, disputes, security, suppression lists, tax and accounting, and legitimate business records. Backup and provider copies may persist for a limited period after deletion from active systems.

11. Communication Choices

Required service communications and optional marketing are treated separately. You may withdraw optional marketing consent without losing eligibility for client access. Approved clients may still receive account, security, billing, legal, regulatory, document, monthly reporting, and supervision communications. Review the Communication Preferences for details.

12. Cookies and Analytics

Loom may use essential cookies, local storage, analytics tags, and similar technologies to maintain sessions, remember preferences, measure traffic, attribute inquiries, detect abuse, and improve performance. Browser controls may block some technologies, but doing so can impair authentication or Portal functionality.

13. California Privacy Rights

Subject to applicability, verification, exceptions, and legal limitations, California residents may request information about collection, use, and disclosure; access to specific personal information; correction; deletion; or information concerning sale or sharing. Loom will not unlawfully discriminate for exercising an applicable privacy right. Business-to-business, employee, legal-claim, regulatory, security, and other exceptions may apply. An authorized agent may submit a request where permitted, but Loom may require proof of authority and direct identity verification.

14. Other Jurisdictions and International Access

Loom provides California-focused services and operates from the United States. If you access the site from another jurisdiction, information may be transferred to and processed in the United States, where laws may differ. The availability of a website does not mean Loom offers BOR/DO Services outside California.

15. Children

The site and services are intended for adults and business users. Loom does not knowingly collect personal information from children under 13 and does not knowingly provide dashboard accounts to minors.

16. Changes

Loom may update this Policy by posting a revised version and changing the effective date. Material Portal or client-policy changes may require renewed acknowledgment before access continues. Prior versions or acceptance records may be retained for legal and audit purposes.

17. Requests and Contact

Privacy questions and verifiable requests may be submitted to hello@loomrealty.com, by calling or texting 310-906-5459, or by writing to Loom Realty, 26565 Agoura Road, Suite 200, Calabasas, CA 91302. Describe the request and the email associated with your account. Loom may require additional information to verify identity and authority before acting.