Privacy

What we collect

• Your account: name, email, phone (optional), company (optional), and a password — or, if you sign in with Google, the name and email Google gives us.
• Your listings: whatever you put on the board — the property, note, or cash you describe, the numbers, the photos and files you attach, and what you say you want for it.
• Offers and messages: offers you make or receive, replies, and notes you send us from the site.
• Attendance and dues: when you were checked in at a session and what was paid. Card details go straight to Stripe; we keep only the card's last four digits and brand.
• Basic technical records: the kind every website keeps — when you signed in, and a hashed (unreadable) form of your address when you use the help assistant, so it can't be overused.

Who sees what

• Other approved members see your listings, your name, and your company. They do not see your email or phone unless you tick “show my phone number” on a listing, or you make or accept an offer — an offer carries your email to the other party so you can talk directly.
• The organizers see everything above plus contact details and dues, because they run the room.
• The public sees nothing from the member area — unless you choose to make a public flyer link for one of your listings. That page shows the listing and your name, never your email.

Services we use

• Cloudflare hosts the site and stores your data and files in the United States.
• Stripe handles payments. We never see your card number.
• Resend sends our email (sign-in links, offers, the weekly digest).
• Anthropic's Claude powers the AI helpers: it reads the text, photos, or documents you hand it to write up a listing, a flyer, or a reply. It is given only what you choose to submit, and it does not train on your data.
• Google, if you choose “Continue with Google” or one of the Google pickers. Exactly what that involves is spelled out in Google user data below.
• The U.S. Census Bureau, for the “show me the area” figures. Only the listing's location is sent — never your name.

Google user data

Three things on GEMS can involve your Google account. Each one is optional, each asks you on Google's own consent screen first, and none of them lets us look around inside your Google account.

• Continue with Google (Google sign-in): Google tells us your name, your email address, and an account identifier. We save those three things on your GEMS account so you can sign in again. That is all we receive.
• From Google Drive (the Drive picker, scope drive.file): Google shows you its own file picker. We receive only the files you pick, and we copy them to the listing you were editing. We cannot see, list, or open any other file in your Drive.
• From Google Photos (the Photos picker, scope photospicker.mediaitems.readonly): Google shows you its own photo picker. We receive only the photos you select, and we copy them to the listing you were editing. We cannot browse your library.

How we use it

Only to do the thing you asked for: sign you in, or put the files you picked on your listing so other members can see them with the rest of the listing. We do not use Google user data for advertising, we never sell it, and we do not share it with anyone except as described in “Who sees what” above — the files you attach to a listing are visible to approved members like the rest of that listing. We do not use any Google user data to develop, improve, or train artificial-intelligence or machine-learning models.

How we protect it

• Everything between your browser, Google, and GEMS travels over HTTPS (TLS). Our database and file storage are hosted by Cloudflare in the United States and encrypted at rest.
• The temporary Google access token that lets us copy what you picked lives only in an encrypted, httpOnly cookie in your own browser. It expires within one hour, is never written to our database, and we do not request “offline” (refresh) tokens, so we cannot reach your Google account later.
• Access to the systems that hold your data is limited to the GEMS organizers, and only for running the group. No Google user data is shared with the AI helpers unless you yourself attach a copied file to a listing and ask the helper to read it.

How long we keep it, and how to delete it

• Sign-in details (name, email, Google account identifier) stay on your GEMS account until you close it.
• Copied files and photos stay on the listing you attached them to. Remove any of them at any time from the listing's edit page; they are deleted from our storage right then. Deleting the listing deletes its files too.
• The temporary token is gone within an hour, or the moment the copy finishes, whichever comes first.
• To disconnect Google from GEMS, remove GEMS at myaccount.google.com/permissions. Your GEMS account keeps working with a password.
• To delete everything, email info@gemsrei.com from your account address and ask. We delete your account, your listings, every copied file, and the Google details within 30 days; records of dues paid are kept for accounting, with no Google data in them. Database backups age out within a further 30 days.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

What we never do

• We never sell your information or share it with advertisers.
• We never share your contact details with another member without an action you took (an offer, a phone-number tick, an accepted offer).
• We never send marketing on anyone else's behalf.

Email

Emails about your own account, listings, and offers always arrive. The Monday digest and board alerts can be switched off from your Profile or with the link at the bottom of any of those emails.

Your choices

You can edit or remove any listing, remove your card, stop sharing a flyer, or close your account by emailing us. When an account is closed we delete it, its listings, and its files within 30 days; records of dues paid are kept for accounting.

Questions

Email info@gemsrei.com. A person answers.