Privacy Policy

This policy explains how Attune Technologies, Inc. ("Attune," "we," "us," or
"our") collects, uses, discloses, and protects personal information through Sorted.
Sorted includes our websites, web and native applications, AI assistant, connected CRM,
capture, and messaging features. This policy also applies to people who communicate with a
Sorted Customer through the service.

Who this policy covers

• Sorted Customer. An individual real estate professional, brokerage, team, or other
  organization that subscribes to or receives access to Sorted.
• Sorted User. A person whom a Sorted Customer permits to use its Sorted account, such
  as an employee, agent, or contractor.
• Contact. An end consumer, such as a current or prospective client or lead, whose
  information a Sorted Customer manages or with whom it communicates through Sorted.

Information we collect

The information we collect depends on the features a Sorted Customer enables:

• Account and organization information. Names, email addresses, authentication
  identifiers, organization membership, roles, and account settings.
• CRM and contact information. Connected CRM credentials and records such as contacts,
  phone numbers, email addresses, lead details, and account metadata.
• Communications and notes. Emails; SMS, MMS, and other messages; attachments; call and
  meeting metadata; notes; prompts; responses; consent records; and conversation history.
• AI and enrichment information. Assistant conversations, tool results, compacted
  conversation history, and information returned from public-web searches.
• Device and capture information. Device tokens, app configuration, and, when capture
  is enabled, messages, emails, and call records made available from an authorized device
  or connected account.
• Service and technical information. IP address, browser or device type, session and
  security events, delivery status, carrier information, error details, and service usage
  metadata.

Sorted is designed for ordinary CRM and client-relationship information. Do not submit
passwords, payment-card data, government identification numbers, health information, or
other regulated sensitive data.

Where information comes from

We receive information directly from you, from the organization that provides your Sorted
account, from other people who communicate through Sorted, from connected services and
authorized devices, and from public sources used for lead enrichment. A Sorted Customer is
responsible for having authority to provide information about its contacts and personnel.

How we use information

We use this information to:

• Provide, authenticate, personalize, maintain, and support Sorted.
• Connect and synchronize CRM data and enrich contacts from public sources.
• Transmit, store, search, and organize communications across enabled channels.
• Generate AI responses, summaries, recommendations, titles, and requested actions.
• Protect accounts, prevent abuse, troubleshoot failures, and enforce our terms.
• Administer private-beta and paid-pilot relationships.
• Comply with applicable law and enforce our agreements.

AI processing and product improvement

Sorted sends the content needed for an AI request to the selected AI provider and may use
temporary secure computing environments for requested tool work. By default, we use
providers and settings that do not permit content from a Sorted Customer to train shared
provider models. If we offer an option with different provider data-use terms, we will
disclose those terms and require the Sorted Customer to choose that option before enabling
it.

Attune may create and retain aggregated or de-identified information to analyze, secure,
and improve Sorted, including its models and product behavior. We do not use identifiable
content from a Sorted Customer to train shared models. We may retain genuinely
de-identified information indefinitely and will not attempt to re-identify it.

How we disclose information

We disclose information as needed to operate Sorted:

• Sorted Customers, Sorted Users, and Contacts. A Sorted Customer controls its account
  and directs which Sorted Users and Contacts participate. Participants can see the
  information exchanged with them.
• AI model providers. Depending on the features a Sorted Customer enables, we may use
  the following providers to process the content needed for an AI request: OpenAI OpCo,
  LLC; Anthropic, PBC; X.AI LLC; or Meta Platforms, Inc.
• Other key service providers. Clerk, Inc. provides authentication; Railway Corporation
  provides hosting and database infrastructure; Daytona Platforms Inc. provides temporary
  tool sandboxes; SideGuide Technologies, Inc. d/b/a Firecrawl provides public-web search
  and extraction; and Apple Inc. and Google LLC provide sign-in,
  device, or notification services. These providers process information for the services
  they provide to us.
• Connected data systems. Sorted may integrate with CRMs and other data systems used by
  a Sorted Customer. We use access provided by the Sorted Customer and interact with each
  connected system according to its terms and policies.
• Legal and safety needs. We may disclose information when law requires it or when
  reasonably necessary to protect people, rights, systems, or the service.
• Business transactions. Information may transfer as part of a merger, financing,
  acquisition, reorganization, or sale of assets, subject to applicable law.

**We do not sell personal information or share it for targeted advertising. Mobile numbers,
messaging opt-in data, and consent will not be shared with third parties or affiliates for
marketing or promotional purposes. No mobile information will be shared with third
parties/affiliates for marketing/promotional purposes. All other categories exclude text
messaging originator opt-in data and consent; this information will not be shared with any
third parties.**

Retention

We keep information while an account is active and as needed to provide Sorted. After an
account or organization ends, we delete or de-identify its content within 30 days, unless
we must retain information for security, legal compliance, an unresolved dispute, or an
enforceable agreement. Residual copies may remain in backups until overwritten through the
normal backup cycle. We retain opt-out records as needed to honor messaging choices.

During the 30-day period, a Sorted Customer may request a reasonable machine-readable
export of its content. De-identified information may be retained as described above.

Security

We use administrative, technical, and physical safeguards designed to protect the
information we hold. These include access controls, encrypted transport, tenant and member
boundaries, and credential protection. No transmission or storage system is completely
secure.

Your privacy choices

You may ask to access, correct, export, or delete personal information by contacting the
Sorted Customer responsible for your record or by emailing
team@attunehq.com. We may verify your identity and coordinate
with the responsible Sorted Customer before completing a request. We may retain information
when the law permits or requires it.

Communications with Contacts

Sorted Customers may use Sorted to communicate with Contacts by email, and to capture the
phone calls and the SMS, MMS, and other messages they exchange with Contacts through their
own devices and accounts. We process the content, participants, delivery data, and related
metadata needed to provide the features the Sorted Customer selects.

A Sorted Customer may pair a Mac with Sorted. With the Sorted Customer's own messaging
account signed in on that Mac, Sorted reads the text messages (including attachments and
reactions) and the call records the Sorted Customer exchanges with the Contacts the Sorted
Customer selects, and stores them in Sorted. Sorted reads nothing for a Contact the Sorted
Customer has not selected, and the Sorted Customer chooses for each selected Contact whether
messages and call records from before the selection are included. The Sorted Customer can
stop syncing a Contact or disconnect the Mac at any time; records already stored remain
subject to this policy.

A Sorted Customer may authorize an AI agent to draft or send communications on its behalf.
The Sorted Customer remains the sender and is responsible for the content, recipients,
consent, and opt-outs.

The Sorted Customer determines whom to contact and why. The Sorted Customer must provide
required notices, obtain and preserve valid consent for each channel and purpose, and honor
a Contact's withdrawal or opt-out. Consent to one channel or subject does not authorize
unrelated communications or outreach through another channel.

Calls

Sorted does not record, transcribe, or summarize calls. When a Sorted Customer captures a
call from its own device, Sorted stores the call's metadata (the participants, direction,
outcome, duration, and time) and may prompt the Sorted Customer for a note. That note is
the Sorted Customer's content and receives the protections and retention treatment
described in this policy.

Text messaging

Sorted Messaging supports non-promotional, one-to-one messages about property inquiries,
requested property or listing updates, showing coordination, follow-ups, support, and
account or service updates. These messages may be drafted by an AI agent acting on behalf
of the Sorted Customer. If a Contact messages a Sorted Customer first, the message permits
replies within that conversation. It does not authorize
unrelated or recurring outreach. Before a Sorted Customer sends the first outbound or
recurring message, the Sorted Customer must record valid prior consent.

Message frequency varies based on your conversations and service activity. Message and
data rates may apply. Reply STOP to opt out and HELP for help, or email
team@attunehq.com.

Messaging consent is specific to the identified Sorted Customer and subject. Mobile
numbers, messaging opt-in data, and consent will not be sold or shared with third parties
or affiliates for marketing or promotional purposes.

U.S. service and children

Sorted is currently offered in the United States and is intended for business users who are
at least 18 years old. It is not directed to children.

Changes to this policy

We may update this policy as Sorted changes. We will post the revised policy here, update
its effective date, and provide additional notice when required by law.

Contact us

Contact Attune at team@attunehq.com with questions about this
policy or our messaging practices.

Sorted is provided by Attune Technologies, Inc. Contact
team@attunehq.com.