Privacy Policy

Overview

RE:Writeoff ("we," "our," or "the Service") provides automated activity tracking and tax deduction discovery for real estate investors. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service.

By using RE:Writeoff, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

Information We Collect

Account information

When you create an account, we collect your name and email address through our authentication provider (Clerk). We do not store passwords — authentication is handled entirely by Clerk.

Email content

When you connect a Google account, you grant us read-only access to your email via the Gmail API. We fetch email headers (sender, recipient, subject, date) and message content to identify property management activities. Raw email content is stored encrypted and used solely for activity classification.

Calendar data

If you grant calendar access, we read your Google Calendar events (read-only) to identify property-related appointments such as inspections, showings, and contractor meetings.

Contact data

If you grant contacts access, we read your Google Contacts (read-only) to improve name and role matching when classifying activities.

Drive data

If you grant Google Drive access, we read documents (read-only) such as leases, contracts, and property management records to identify and classify related activities.

Usage data

We collect anonymized usage metrics including feature usage counts, sync frequency, and error rates to improve the Service.

How We Use Your Information

• Activity classification: We analyze email, calendar, and document content using AI to identify and categorize property management activities by IRS-recognized types.
• Report generation: We compile classified activities into time-stamped logs suitable for tax documentation.
• Service improvement: Anonymized, aggregated data helps us improve classification accuracy and user experience.

We do not use your email content for advertising, marketing, or any purpose unrelated to the core Service functionality.

Data Storage and Security

Your data is stored in secure, encrypted databases hosted on infrastructure providers with SOC 2 compliance. Email content and attachments are stored in encrypted object storage. OAuth tokens are stored encrypted at rest.

We implement industry-standard security measures including encrypted connections (TLS), access controls, and regular security reviews. No system is 100% secure, and we cannot guarantee absolute security, but we take commercially reasonable steps to protect your data.

Third-Party Services

We use the following third-party services:

• Clerk — Authentication and user management. Subject to Clerk's Privacy Policy.
• Google APIs — Email, calendar, contacts, and drive access via OAuth 2.0. Subject to Google's Privacy Policy.
• Cloudflare R2 — Object storage for email content and attachments.

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

Google API Disclosure

RE:Writeoff's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google data for the purposes described in this policy and do not use it for serving advertisements.

Data Retention

We retain your data for as long as your account is active. When you delete your account or disconnect a mailbox, associated email content, classified activities, and stored tokens are permanently deleted within 30 days.

You can revoke our access to your Google account at any time through your Google Account permissions page.

Your Rights

• Access: Request a copy of the data we hold about you.
• Deletion: Request deletion of your account and all associated data.
• Revocation: Disconnect your Google account at any time, immediately stopping further data collection.
• Portability: Export your classified activity data at any time.

To exercise any of these rights, email [email protected].

Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

Contact

For questions about this Privacy Policy, contact us at [email protected].