Draft — this document is a placeholder pending legal review and is not yet in effect.

Privacy Policy

Last updated: August 1, 2026

1. Overview

Just Big Wins ("Company," "we," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information when you use our website, platform, and related services (the "Service"). Please read this policy carefully. By accessing and using the Service, you consent to the practices described herein.

2. Information We Collect

We collect information in several categories:

  • Account and Contact Information: Name, email address, business name, phone number, and billing address when you create an account or update your profile.
  • Buyer Identity Details: Information you provide to configure buyer profiles, including your business entity type, financing capacity, property acquisition criteria, and geographic preferences.
  • Campaign Configuration: Parameters, guardrails, and instructions you set to control how offers are drafted and sent, including offer amounts, terms, and targeting criteria.
  • Email Content: Offer emails drafted and sent through the Service, emails received from listing agents and other contacts in response to your campaigns, and message metadata. If you connect your mailbox via OAuth, we access and process emails only as necessary to send offers and read replies related to your campaigns.
  • Listing Data: Property information collected from public sources and configured search parameters used to identify and qualify potential deals for your campaigns.
  • Usage and Device Data: Log data including IP address, browser type, pages visited, timestamps, and other standard web analytics data. We also collect device information such as device type, operating system, and app version.

3. How We Use Information

We use the information we collect to:

  • Provide, operate, and maintain the Service;
  • Generate and send offer emails on your behalf based on your configuration;
  • Classify, prioritize, and escalate incoming lead responses;
  • Improve the reliability, performance, and features of the Service;
  • Provide customer support and respond to inquiries;
  • Process billing and subscription management;
  • Detect, prevent, and address fraud or other unlawful activity;
  • Comply with legal obligations and enforce our Terms of Service;
  • Send transactional and service-related communications.

4. Email Account Access

If you choose to connect your Gmail or Microsoft email account to the Service, we request OAuth access to send offer emails and read incoming replies on your behalf. This access is used solely to support your campaigns through Just Big Wins. We do not use your connected mailbox for any other purpose. OAuth tokens are stored securely in an encrypted format. You may revoke access to your email account at any time through your account settings or your email provider's security dashboard. Alternatively, you may use our manual download mode to provide campaign data without connecting your mailbox directly.

For Google accounts, we comply with the Google API Services User Data Policy, including its Limited Use requirements, which restrict our use of Google user data to the purposes you authorized and prohibit selling or sharing data with third parties except as necessary to provide your requested services.

5. Information About Listing Agents and Other Recipients

Most of this policy describes our relationship with our customers — investors and wholesalers who use the Service. The Service is also used to send offer communications to listing agents and other real estate professionals on a customer's behalf, and to receive and process their replies. In connection with that, we collect and store the recipient's name, email address, and the content of any reply they send.

We use this information solely to facilitate the specific communication a customer initiated — matching a reply to the correct offer, drafting and sending relevant follow-ups within that customer's configured guardrails, and escalating a reply to the customer for their own review and response. We do not use this information for advertising, and we do not sell it. Every offer email includes a physical mailing address and a one-click unsubscribe link; unsubscribing adds the recipient to a permanent suppression list that stops all future outreach to that address through the Service. Message content involving recipients is subject to the same retention schedule described in Section 7. If you are a listing agent or other recipient with questions about a communication you've received, you can use the unsubscribe link in that email or contact us directly at support@justbigwins.com.

6. Service Providers

We work with third-party service providers to operate the Service. These providers may have access to personal information as necessary to provide their services, but are obligated to use it only for those purposes. Our service providers include:

  • Anthropic: Provides AI services for drafting and classifying communications.
  • RentCast: Property listing data, matched against the search criteria you configure for each campaign.
  • Supabase: Database and authentication infrastructure.
  • Vercel: Hosting and deployment services.
  • Stripe: Payment processing and billing.
  • Resend: Email delivery infrastructure.
  • Google Cloud: Infrastructure and data processing services.
  • Microsoft: OAuth authentication and email access for Microsoft accounts.
  • Inngest: Workflow orchestration and task scheduling.
  • Sentry: Error tracking and monitoring.

7. Data Retention

We retain your personal information for as long as necessary to provide the Service and as required by law. Our systems are built around an archive, not delete model: records are marked inactive (for example, a cancelled account or an archived campaign) rather than removed from our systems, so that audit trails, dispute history, and compliance records stay intact. Specifically:

  • Message content (email communications and AI-generated offers): The text content of messages is automatically cleared approximately three years after it was sent or received. The underlying record (that a message existed, when, and its outcome) is retained as part of your account and campaign history.
  • Audit logs and transaction records: Retained for seven years and not deleted or modified during that period, to comply with legal and tax obligations and to preserve a reliable record of account activity.
  • Account and configuration data: Retained for the duration of your account. A cancelled or suspended account is deactivated, not erased.

Because of this architecture, we are not currently able to fully erase an account or its history on request — we can deactivate an account and stop all further processing, and message content is cleared automatically on the schedule above, but the underlying activity record persists for the retention periods described. If you have questions about what this means for your specific situation, contact us at the address below.

8. Security

We implement industry-standard security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit using TLS/SSL protocols;
  • Encryption of sensitive data at rest;
  • Access controls and authentication mechanisms;
  • Regular security audits and updates;
  • Audit logging of system access and data usage.

While we strive to protect your information using reasonable security measures, no system is completely secure. We cannot guarantee absolute security of your personal information. If a security breach occurs, we will notify affected users in accordance with applicable law.

9. Your Rights and Choices

Depending on your location, you may have rights regarding your personal information, including the right to access, correct, or request a copy of your data, and to object to certain uses of your information or restrict processing. As described in Section 7 above, our ability to fully erase data is limited by our retention architecture — where full erasure is legally required and not already accommodated by our standard retention schedule, we will evaluate the request individually. To exercise any of these rights, please contact us at support@justbigwins.com.

You may also control certain aspects of your information through your account settings, including email preferences and connected integrations.

10. Children

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided personal information, we will take steps to delete such information and terminate the child's account.

11. Changes to This Policy

Just Big Wins reserves the right to update this Privacy Policy at any time. Material changes will be communicated via email or through the Service at least 30 days in advance. Your continued use of the Service after such notice constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or our privacy practices, please contact us at support@justbigwins.com.