Privacy Policy

1. Who We Are and What This Policy Covers

CRELookup, LLC, doing business as CRElookup ("CRElookup," "we," "us," or "our"), operates a commercial real estate marketplace and related tools. This Privacy Policy explains how we collect, use, share, and protect personal information when you use crelookup.com, our CRM and marketing tools, our mobile applications, our social feed and messaging features, our AI features, and any other service that links to this policy (together, the "Services"). It also applies when you interact with us by email, phone, text message, or at events.

By using the Services you agree to this policy and our Terms of Service. If you do not agree, do not use the Services.

Information that becomes public. Some information you give us is meant to be seen by others: your public profile, broker directory entry, Listings and the contact details attached to them, and posts and comments on the feed. Once you make information public, other people may copy or share it, and we cannot control how they use it.

2. Information We Collect

2.1 Information you give us

• Account and profile data: name, email address, phone number, business or mailing address, company, job title, role (for example buyer, seller, broker), photo, biography, and password (stored in hashed form).
• Broker information: license number and state, brokerage, specialties, markets served, and website.
• Listing and deal data: property details, photos, videos, offering memoranda and other documents, pricing, tenant and financial information you upload, and contact details you add to a Listing.
• Social content: posts, comments, reactions, shares, follows, and profile content.
• Communications: messages you send through the Services, inquiries about Listings, tour requests, support requests, survey responses, and your consents and opt-outs.
• CRM and marketing data: contacts, notes, pipeline and deal records, and email or message content that you or your team enter or sync into our tools. For this data we act as your service provider (see Section 7.2).
• Payment data: billing name, billing address, and the last four digits and type of your card. Full card numbers are collected and processed by our payment processor, not by us.
• Information about other people: if you give us someone else's details (for example to invite a colleague or add a contact), you confirm that you have the right to do so.

2.2 Information collected automatically

• Usage and behavior data: pages and Listings viewed, time on page, searches and filters, saved items, documents opened or downloaded, clicks, messages opened, tour requests, and other actions in the Services.
• Device and log data: IP address, device identifiers, browser and operating system type, language, referring and exit pages, crash and performance data, and timestamps.
• Approximate location from your IP address, and precise location from your mobile device only if you enable location features (such as nearby properties).
• Cookies and similar technologies: see Section 8.
• Mobile app data: with your permission, the app may access your camera, photos, contacts, notifications, microphone, and location. You can change these permissions in your device settings.

2.3 Information from other sources

• Public records and government sources, such as property, ownership, flood zone, zoning, and census data. Most of this is not personal information, but owner names and addresses may be.
• Professional licensing records used to verify or enrich broker profiles.
• Business data providers and partners that supply contact and company information for professionals in the commercial real estate industry.
• Sign-in providers, such as Google, Apple, LinkedIn, or Facebook, if you choose to use them.
• Other users, who may send us information about you, for example when they add you as a contact on a Listing or invite you to join.

2.4 Sensitive information

We do not intentionally ask for health information. Except for bidder verification in Auctions (Section 2.5), please do not upload government ID numbers or biometric data. Precise geolocation and account log-in credentials can be sensitive under some state laws. We use precise location only to provide the feature you request, and we do not use sensitive information to infer characteristics about you.

2.5 Auction and bidder verification information

If you register to bid in or sell through an Auction, we and our verification providers collect information needed to verify and clear you, such as your legal name, date of birth, address, government-issued ID details and a photo of the ID, entity and beneficial-ownership documents, signing authority, proof of funds or bank or financing letters, sanctions-screening results, and your bids, deposits, watch lists, buying-power tier, and Auction history. We use this information to verify identity, prevent fraud and money laundering, screen against sanctions lists, administer deposits, and complete the sale. Please do not send us full bank account numbers or card numbers by email or chat; use the secure upload or payment tools we provide.

3. How We Use Information

We use personal information to:

• create and manage accounts, verify brokers, and provide the Services;
• publish Listings, directory entries, and feed content, and deliver messages, alerts, and saved-search emails;
• connect Buyers with Brokers and Sellers and share your inquiry and activity with them as described in Section 4;
• provide CRM, marketing, and AI features to our customers;
• personalize search results, recommendations, and the feed, and measure which features work;
• send transactional notices, service announcements, and, with the consent the law requires, marketing communications;
• process payments and Auction deposits, verify and clear Auction bidders and sellers, prevent fraud and money laundering, enforce our Terms, and keep the Services safe and secure;
• investigate abuse reported through our reporting tools and moderate content;
• research, analyze, and improve the Services, including by creating de-identified or aggregated data;
• comply with legal obligations and respond to lawful requests.

We do not use your personal information in ways that are materially different from the purposes above without telling you and, where required, getting your consent.

4. Information Shared Through the Services

4.1 Brokers and Sellers. When you contact a Broker or Seller, request a document, schedule a tour, or opt in to share your details with matching Listings, we share your name, contact details, and your message with them. We may also share relevant activity, such as which of their Listings you viewed and whether you opened a document, so they can follow up. Brokers and Sellers use this information under their own privacy practices and the law, and CRElookup is not responsible for how they use it.

4.2 Listing contacts and directory. Contact information you add to a Listing, and your name, photo, brokerage, and contact details in the broker directory, may be visible to anyone who views the Listing or directory. You can ask us to remove or limit your directory entry (Section 12), though Brokers may be required to remain visible where a Listing is active.

4.3 Feed and profile visibility. Posts, comments, reactions, and public profile fields are visible to other users and may be visible to people who are not logged in and to search engines. Settings may let you limit who can message you or see parts of your profile.

4.4 Email alerts. If you opt in to sharing your contact details in connection with saved searches, we may share them with users whose Listings match your criteria.

4.5 Messages. Messages between users are visible to the sender and recipient. We may review messages in limited cases, such as abuse reports, security, legal process, or support requests, and we may process them with automated tools to detect spam, fraud, and policy violations.

4.6 Auctions. During an Auction, other users may see your bids, bid amounts, and a bidder number or screen name. We share your identity, verification status, buying-power tier, deposit status, and, if you win, your contact and entity details with the Seller, the escrow agent, title and closing providers, and brokers involved in the transaction so they can complete the sale. A Broker who registers a Bidder or client may also see that person's Auction activity and status.

5. AI and Automated Processing

5.1 We use artificial intelligence and automated tools to run features such as document summaries, answers about Listings and offering memoranda, lead scoring and buyer-intent insights, tour scheduling, and assistants that draft or send messages on behalf of Brokers and Sellers.

5.2 These features may process your content and activity, including messages, uploaded documents, and behavior data such as pages visited and time spent. We use service providers that host or run AI models for us, and they may process information only to provide services to us under contract.

5.3 We will tell you when you are communicating with an automated assistant where the law requires. You can ask to speak with a human at any time.

5.4 We do not use your private messages or non-public documents to train generative AI models for other customers without your permission. We may use de-identified and aggregated data to improve our products.

5.5 Lead scores and buyer-intent insights are tools for Brokers and Sellers and are not used to make decisions about credit, housing eligibility, employment, insurance, or similar legally significant matters about you. If we ever offer such features, we will update this policy and provide any opt-out or appeal rights the law requires.

6. Messaging: Email, Text, WhatsApp, and Calls

6.1 Transactional messages. We send account, security, Listing, inquiry, and service notices. You cannot opt out of these while you hold an account.

6.2 Marketing. We send promotional, newsletter, and partner emails where permitted by law and, where required, with your consent. You can unsubscribe using the link in any marketing email or in your account settings.

6.3 Text messages and WhatsApp. If you provide your mobile number and agree to be contacted, we and the Brokers and Sellers you contact may send texts and WhatsApp messages about your inquiries, saved searches, tours, and account, and, if you agreed, marketing. Message and data rates may apply. Reply STOP to opt out and HELP for help. Consent to marketing texts is not a condition of any purchase. We do not share mobile phone numbers or text-messaging opt-in data with third parties or affiliates for their own marketing purposes.

6.4 Calls. Calls may be made using automated technology and may be recorded or transcribed. We will give notice of recording where the law requires.

6.5 Referral invitations. If a user invites someone who is not a member, we send that person a limited invitation and use their email address only for that purpose and for tracking whether the invitation worked. The recipient can ask us to delete the address at info@crelookup.com.

7. How We Disclose Information

We do not sell personal information for money. We disclose personal information as follows:

7.1 Service providers. We share information with companies that provide services to us, such as cloud hosting, databases, email and SMS delivery, WhatsApp and messaging platforms, payment processing, identity verification and sanctions screening, escrow and title services, analytics, customer support, security, mapping, document processing, and AI model providers. They may use the information only to provide services to us and are bound by contract.

7.2 Our customers (when we act as a service provider). When you or your team use our CRM and marketing tools, the contacts and records you enter belong to you and your organization. We process them on your behalf, and we do not use your contact lists to market to those contacts.

7.3 Brokers, Sellers, and other users as described in Section 4.

7.4 Partners. With your consent or at your request, we may share information with partners that offer related services (for example financing, title, or inspection providers). Their use is governed by their own privacy policies.

7.5 Legal and safety. We may disclose information to comply with law, court orders, subpoenas, or government requests, to enforce our Terms, to investigate fraud or security incidents, and to protect the rights, property, and safety of CRElookup, our users, or the public.

7.6 Business transfers. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction, subject to this policy or a successor policy that provides at least equivalent protection.

7.7 Aggregated or de-identified data. We may share aggregated or de-identified information, such as market statistics, that cannot reasonably be used to identify you.

7.8 With your consent or at your direction.

8. Cookies, Tracking Technologies, and Advertising

8.1 We and our providers use cookies, pixels, tags, scripts, SDKs, local storage, and similar technologies to keep you signed in, remember preferences, secure the Services, measure traffic, understand how people use Listings and features, and deliver and measure advertising.

8.2 Advertising. We and advertising partners may use these technologies to show you ads for CRElookup on other sites and apps based on your activity. Under some state laws this is sharing of personal information for cross-context behavioral advertising. You can opt out using the cookie choices in the Services, or through a browser or device setting.

8.3 Your choices. You can block or delete cookies in your browser, use the cookie choices in the Services, and use the settings on your mobile device to limit ad tracking or reset advertising identifiers. If you block cookies, some features may not work.

8.4 Analytics. We may use analytics services, including Google Analytics, to understand how the Services are used. These providers may collect usage data through cookies or SDKs.

8.5 Social media features. Buttons and widgets from social networks may collect your IP address, the page you visit, and cookies. Your interactions with them are governed by the privacy policy of the company providing them.

8.6 Log files. We keep log files containing IP address, browser, device, referring pages, and timestamps for security, troubleshooting, and analytics. We may link log data with other information we hold about you.

9. Imported Contacts and Connected Accounts

9.1 If you connect an email, calendar, or contacts account (for example Google) to sync contacts or messages into our CRM tools, or to invite contacts, we connect using the provider's secure authorization process. We do not ask for or store your email account password.

9.2 We access only the data you authorize, and use it only to provide the feature you requested, such as showing your messages in the CRM and logging activity. You can disconnect an account at any time in your settings or through the provider's permissions page, and we will stop syncing. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

9.3 You are responsible for having the right to import and contact the people in the accounts you connect.

10. Retention

We keep personal information for as long as needed to provide the Services and for the purposes in this policy. Account and profile data is kept for the life of the account and for a limited period afterward. Listing data is kept after a Listing is removed for as long as needed to operate the Services and resolve disputes. Messages and CRM records are kept while the account is active and for a limited period after closure. Log and security data is kept for a limited period needed for security and troubleshooting. Billing records are kept as required by tax and accounting law (generally seven years). Auction verification, bidding, and transaction records are kept after the Auction or closing for as long as needed for legal, audit, and dispute purposes. De-identified data may be kept indefinitely. We may keep information longer if needed to comply with law, resolve disputes, enforce our agreements, prevent fraud, or if it is in backups until the backups are overwritten.

11. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, encryption at rest where supported, access controls, and monitoring. No system is perfectly secure, so we cannot guarantee absolute security. Use a strong, unique password and tell us promptly at info@crelookup.com if you suspect unauthorized access. If a breach affects your personal information, we will notify you and regulators as the law requires.

12. Your Choices and Privacy Rights

12.1 Account controls. You can view and update your profile, adjust notification and messaging settings, manage connected accounts, control cookies, and delete your account from your account settings or in the mobile app. You can also email info@crelookup.com.

12.2 Rights. Depending on where you live, you may have the right to: know and access the personal information we hold about you; correct it; delete it; obtain a portable copy; opt out of targeted advertising, the sale or sharing of personal information, and certain profiling; limit the use of sensitive personal information; and not be treated unfavorably for using these rights. Some of these rights apply under the laws of California and other states, including Indiana, and we will honor them for all U.S. users where practical.

12.3 How to exercise them. Submit a request at info@crelookup.com or by phone at 1-800-649-1850. We may need to verify your identity, for example by confirming your account email. An authorized agent may submit a request for you with your written permission. We respond within 45 days (or the time the law allows) and may extend once if we tell you why.

12.4 Appeals. If we deny your request, you may appeal by replying to our response or emailing info@crelookup.com with the subject "Appeal." We respond within the time the law requires. If you are unsatisfied, you may contact your state attorney general.

12.5 Limits. We may decline a request where the law allows, for example where we must keep records, where the information belongs to a customer for whom we act as service provider (you should contact that customer), or where it is public information you posted. Deleting information may stop you from using some features. We cannot remove content other users have copied or shared.

13. Additional Disclosures for California Residents

13.1 Categories collected in the past 12 months. Identifiers (name, email, phone, address, IP address, device ID); customer records and commercial information (account, subscription, and transaction data); internet and network activity (usage, searches, and interactions); geolocation (approximate, and precise only with your permission); professional information (employer, title, license); audio, electronic, or visual data (photos, uploaded media, ID photos, call recordings); financial information provided for bidder verification (Auction users only); inferences (lead scores and interest in property types); and the content of communications. Sensitive personal information: account log-in credentials, precise geolocation (only where you enable it), and, for Auction users, government identification information.

13.2 Sources and purposes. The sources are described in Section 2 and the purposes in Section 3.

13.3 Disclosures. We disclose these categories to the recipients described in Section 7 for business purposes. We do not sell personal information for money. We may share identifiers, internet activity, and inferences for cross-context behavioral advertising, and you can opt out as described in Section 8. We do not knowingly sell or share the personal information of anyone under 16.

13.4 Retention is described in Section 10.

13.5 Shine the Light. California residents may request information about disclosures of personal information to third parties for their direct marketing purposes by contacting us. We do not make such disclosures.

13.6 Nevada residents may opt out of the sale of certain information by contacting info@crelookup.com. We do not sell covered information for monetary consideration.

14. Children

The Services are for business users and are not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

15. International Users and Transfers

The Services are operated in the United States and are intended for users in the United States. Personal information is stored and processed in the United States, which may have different data protection laws than your country. If you access the Services from outside the United States, you do so at your own initiative and consent to the transfer of your information to the United States.

16. Links to Other Sites and Services

The Services link to or integrate with websites and services we do not control, including those of Brokers, Sellers, payment providers, and social networks. Their privacy practices differ from ours. Please read their policies before giving them information.

17. Changes to This Policy

We may update this policy from time to time. We will post the new version with a new "Last updated" date and, for material changes, notify you by email or in the Services before the change takes effect. Your continued use after that date means you accept the updated policy, except where the law requires your consent.

18. Contact Us

CRELookup, LLC, doing business as CRElookup

• Address: 325 S College Avenue, Indianapolis, IN 46202
• Email: info@crelookup.com
• Privacy requests: info@crelookup.com
• Phone: 1-800-649-1850