Accruu

Privacy Policy

Effective Date: May 14, 2026

Accruu, LLC, a Texas limited liability company ("Accruu," "we," "us," "our"), operates the Accruu Vision platform. This Privacy Policy describes how we collect, use, share, and protect your information when you use our website, mobile applications, APIs, and related services (collectively, the "Service"). This policy applies to all users of the Service, including real estate agents ("Agents"), individuals who view shared listing links ("Buyers"), and business contacts in our agent outreach pipeline ("Prospects").

1. Information We Collect

1.1 Agent Account Information

When you are onboarded as an Agent, we collect:

  • Full name and email address
  • Brokerage name and affiliation
  • Real estate license number (where provided)
  • Phone number (where provided)
  • Account credentials (managed by a third-party authentication provider; we do not store passwords in plaintext)
  • Billing and payment information (processed by our payment provider or the applicable app-store billing provider; we do not store full card numbers). For subscriptions purchased through an app store, we may receive transaction receipts, subscription status, and entitlement information from the app store or subscription-management provider, but we do not receive or store your app-store payment details.

1.2 Listing Data

When you add listings to the Service, we collect:

  • Property addresses, MLS numbers, and metadata (beds, baths, square footage, year built, listing price, zip code)
  • Listing photos you upload (originals)
  • AI-generated renovation visualization images
  • Room classification data (determined by automated image analysis)

1.3 Buyer Interaction Data

When Buyers view shared listing links, we collect engagement data including:

  • Pages viewed and duration of visit
  • Renovation styles interacted with (clicks, time on each style)
  • Cost breakdowns expanded or downloaded
  • Device type, browser, and operating system
  • General location (city-level, derived from IP address)
  • Referring URL

This data is collected without requiring Buyers to create accounts or log in. We do not use tracking cookies to follow Buyers across other websites. If a Buyer voluntarily submits their name, listing feedback, budget adjustments, or contact information through a buyer gate or lead capture form, we collect the information they provide and may link it to that Buyer's listing interactions for the listing Agent. Buyer engagement data is pseudonymous unless the Buyer voluntarily submits identifying information.

1.4 Device and Technical Data

We automatically collect:

  • IP addresses (used for rate limiting, security, and approximate geolocation)
  • Browser type and version
  • Operating system and device type
  • Request timestamps and API usage logs
  • Error logs and performance data

1.5 Cookies and Similar Technologies

Cookie TypePurposeDuration
AuthenticationSession management for logged-in AgentsSession
SecuritySecurity and abuse preventionSession
PreferencesUI settings (e.g., sidebar state)Up to 30 days

We do not use advertising cookies, social media tracking pixels, or third-party analytics cookies. We do not participate in cross-site tracking or advertising networks.

Our buyer share pages maintain a pseudonymous session identifier for engagement analytics during your visit when your browser privacy settings and choices permit analytics. If you submit your name or contact information, we may link that buyer-submitted identity to your listing interactions for the listing Agent. Session identifiers are stored in your browser session storage and are cleared when you close your browser tab or use the share-page deletion control.

1.6 Sensitive Personal Information

We may collect limited categories of sensitive personal information as defined by certain state privacy laws, including: account credentials (managed securely by a third-party authentication provider) and payment information (processed by our payment processors, app-store billing providers, or subscription-management provider; we do not store full card numbers or security codes). We do not collect Social Security numbers, government IDs, precise geolocation, racial or ethnic origin, health data, sexual orientation, or biometric data. We do not sell or share sensitive personal information, and we do not use it for purposes beyond what is necessary to provide the Service.

1.7 Biometric Information

Our mobile app supports optional biometric authentication for app access. Biometric authentication is handled by your device. No biometric data is transmitted to, received by, or stored on Accruu servers. We receive only a pass/fail result from the device's local authentication framework.

1.8 Diagnostic Data

When the Service encounters an error or crash, we collect diagnostic information such as app version, operating-system version, device model, error details, and performance data via our error-tracking service provider. We filter diagnostic events to reduce personal information before transmission. Our error-tracking provider acts as a Service Provider under the California Consumer Privacy Act and does not use this data for any purpose beyond providing the error-tracking service to us.

1.9 Prospective Agent Outreach Data

For business-to-business outreach, we may collect publicly available professional contact information for real estate agents and brokerages, including name, brokerage, business email, business phone number, license or profile metadata where available, territory, outreach status, suppression or do-not-contact flags, and contact-log notes. We use this data only for Accruu business outreach, suppression, compliance, and audit purposes. A Prospect may request suppression or deletion by contacting support@accruu.io.

2. How We Use Your Information

Data CategoryPurposeLegal Basis
Agent account infoAccount creation, authentication, billing, customer support, service communicationsContract performance
Listing photosAI renovation visualization generation, room classificationContract performance
Property metadataCost estimation, regional pricing adjustment, room size calculationContract performance
Buyer engagement dataPseudonymous or buyer-identified listing interaction data provided to listing Agent when permitted; aggregate product improvementLegitimate interest; consent where required
Buyer lead capture dataShared with listing Agent when voluntarily submittedConsent
Prospective agent outreach dataBusiness-to-business outreach, suppression, compliance, and audit recordsLegitimate interest; legal compliance
Device/technical dataSecurity monitoring, rate limiting, abuse prevention, debuggingLegitimate interest
Usage patternsProduct improvement, feature development, aggregate analyticsLegitimate interest

We do not use your listing photos or personal data to train AI models. Photos are processed by our AI partner solely to generate the requested visualization and are not retained for model training purposes.

3. How We Share Your Information

We do not sell your personal information to anyone. We do not share personal information with third parties for their marketing purposes. We share information only in the following circumstances:

3.1 Service Providers

We use the following third-party services to operate the platform:

ProviderPurposeData Shared
Cloud infrastructure and security providersHosting, storage, authentication, compute, network delivery, DNS, security, and abuse preventionService data and request metadata as needed to operate and secure the Service
AI image generation providerRenovation visualization generationListing photos (processed for image generation and not used for model training)
AI analysis providerRoom photo classificationPhotos transmitted for classification (not retained after processing)
Property data providerProperty valuation and records lookupProperty addresses (not retained after processing)
App-store billing providersIn-app purchase processingTransaction receipts and subscription status (payment details handled by the app-store provider)
Subscription-management providerSubscription entitlement management across app stores and platformsAccount identifier, app-store transaction identifiers, receipt data, subscription tier, and entitlement status
Web payment processorPayment processing for web portal subscriptionsName, email, and payment method details (we do not store full card numbers)
Error monitoring providerCrash reporting and performance monitoringDevice info, OS version, error data (no personal data intentionally collected)
Transactional email providerAccount verification, password reset, MFA and security codes, account and billing notifications, and other service-related email deliveryName and email address, account identifiers, and the message content necessary to deliver the email

Each service provider processes data only as necessary to perform their function and is subject to their respective privacy policies and terms of service.

3.2 Agent-to-Buyer Sharing

When an Agent creates a Share Link, the following listing data becomes viewable by anyone with the link: property address, listing photos (original and generated), renovation visualizations, cost estimates, and listing metadata. Agents control which listings are shared.

3.3 Legal and Safety

We may disclose information if we believe in good faith that disclosure is necessary to: (a) comply with applicable law, regulation, or legal process; (b) protect the rights, property, or safety of Accruu, our users, or the public; (c) enforce our Terms of Service; or (d) respond to a government request.

3.4 Business Transfers

If Accruu is involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.

4. Automated Decision-Making and AI Processing

The Service uses automated processing in the following ways:

  • Room Classification: Our AI analysis provider analyzes uploaded photos to automatically identify room types (kitchen, bathroom). This classification determines which renovation styles and cost models are applied. No personal data or faces are used in this analysis.
  • Image Generation: AI models generate renovation visualizations based on the uploaded photo and selected design style. This is a creative generation process, not a decision about you.
  • Cost Estimation: Renovation costs are computed algorithmically based on property metadata (square footage, year built, zip code) and published industry pricing data. No personal data is used in cost calculations.

None of these automated processes make decisions that produce legal effects or similarly significant effects on individuals.

5. Data Retention

Data TypeRetention Period
AI-generated images365 days from generation, then automatically deleted from storage
Original listing photos365 days from upload, then automatically deleted from storage
Agent account dataDuration of active account, then deleted within a commercially reasonable time after account closure
Listing metadataDuration of active account, then deleted within a commercially reasonable time after account closure
Buyer engagement data (session identifier, hashed IP address, pages viewed, dwell time, style preferences, cost interactions, and buyer-submitted identity where provided)12 months from last activity, then aggregated or deleted
Buyer lead capture data (name, email, phone if voluntarily submitted)12 months, until Agent deletes, or until a verified deletion/suppression request is completed
Prospective agent outreach dataDuration of outreach need, then deleted or suppressed; do-not-contact/suppression records may be retained as needed to honor opt-out requests
Server and security logs90 days
Billing records7 years (legal/tax requirement)
Consent and attestation timestamps (Terms of Service and Privacy Policy acceptance; compliance and fair housing acknowledgments)Duration of your account plus five (5) years after account deletion, retained as evidence of consent, compliance, and abuse prevention. After account deletion we keep only a minimal pseudonymous tombstone — a one-way hashed reference to your account and (where available) email, the Terms and Privacy Policy versions you accepted, and the relevant acceptance, acknowledgment, and deletion timestamps. We do not retain your name, raw email address, address, photos, listing content, or any other profile or content data alongside the tombstone.

6. Data Security

We implement industry-standard security measures to protect your information:

  • Encryption: We use encryption in transit and at rest where appropriate.
  • Authentication and access control: We use account-based access controls and authentication safeguards.
  • Application security: We use technical controls to help prevent unauthorized access, abuse, and common web attacks.
  • Infrastructure security: We rely on managed cloud infrastructure and service-provider safeguards to support secure operations.

While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data Breach Notification

In the event of a data breach that affects your personal information, we will:

  • Notify affected users via email without unreasonable delay and as required by applicable state and federal law.
  • Notify applicable state attorneys general and regulators as required by law.
  • Provide a description of the breach, the types of data involved, and steps we are taking to address it.

8. Your Rights

8.1 All Users

Regardless of your location, you may:

  • Request access to the personal information we hold about you.
  • Request correction of inaccurate personal information.
  • Request deletion of your account and associated data.
  • Withdraw consent for optional data processing (e.g., lead capture).

8.2 California Residents (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act and California Privacy Rights Act:

  • Right to Know: You may request the categories and specific pieces of personal information we have collected, the sources, the business purpose, and the categories of third parties with whom we share it.
  • Right to Delete: You may request deletion of your personal information, subject to certain legal exceptions.
  • Right to Correct: You may request correction of inaccurate personal information.
  • Right to Opt Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising.
  • Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information for purposes beyond what is necessary to provide the Service.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
  • Right to Data Portability: You may obtain a copy of your personal information in a portable format.

CCPA Categories Disclosure:

Category (per CCPA)CollectedSoldShared for Advertising
Identifiers (name, email)YesNoNo
Commercial info (transactions, plan)YesNoNo
Internet activity (logs, usage)YesNoNo
Geolocation (city-level from IP)YesNoNo
Professional info (license, brokerage)YesNoNo
Sensory data (photos)YesNoNo
Inferences (engagement scoring, browsing patterns)YesNoNo

To exercise your rights, you may: (a) email support@accruu.io with the subject line "California Privacy Request," or (b) submit a request through your account settings in the Agent Portal. We will verify your identity and respond within 45 days. You may designate an authorized agent to make a request on your behalf with signed written authorization or power of attorney.

Notice of Financial Incentive

We may offer promotions, free trial extensions, referral credits, or other incentives that involve the collection of personal information. Participation in any financial incentive program is voluntary and opt-in. You may withdraw at any time by following the program instructions or contacting support@accruu.io. The value of the incentive is reasonably related to the value of the data collected, considering the costs of collection, storage, and program administration.

8.3 Texas Residents (TDPSA)

If you are a Texas resident, beginning July 1, 2024, you have the right to:

  • Access your personal data.
  • Correct inaccuracies in your personal data.
  • Delete your personal data.
  • Obtain a copy of your data in a portable format.
  • Opt out of targeted advertising, sale of personal data, or profiling that produces legal or similarly significant effects. (We do not engage in these activities.)

To exercise these rights, email support@accruu.io. We will respond within 45 days. If we decline a request, you may appeal by emailing the same address with "Appeal" in the subject line.

8.4 Virginia Residents (VCDPA)

Virginia residents have substantially similar rights to those described in the Texas section above, effective January 1, 2023. To exercise these rights, email support@accruu.io. We will respond within 45 days. If we decline a request, you may appeal by emailing the same address with "Appeal" in the subject line. If your appeal is denied, you may contact the Virginia Attorney General.

8.5 Colorado Residents (CPA)

Colorado residents have substantially similar rights, effective July 1, 2023, including the right to opt out of targeted advertising, profiling, and the sale of personal data. To exercise these rights, email support@accruu.io. We will respond within 45 days. If we decline a request, you may appeal by emailing the same address with "Appeal" in the subject line. If your appeal is denied, you may contact the Colorado Attorney General.

8.6 Connecticut Residents (CTDPA)

Connecticut residents have substantially similar rights, effective July 1, 2023. To exercise these rights, email support@accruu.io. We will respond within 45 days. If we decline a request, you may appeal by emailing the same address with "Appeal" in the subject line. If your appeal is denied, you may contact the Connecticut Attorney General.

8.7 Nevada Residents

Nevada residents may opt out of the future sale of certain personal information by emailing support@accruu.io with the subject line "Nevada Opt-Out Request." We do not currently sell personal information as defined by Nevada Revised Statutes Chapter 603A, but we will honor opt-out requests in the event our practices change.

9. Do Not Track and Global Privacy Control

We honor Do Not Track (DNT) browser signals. When DNT is enabled, our buyer share pages will not collect engagement analytics for that session. DNT does not prevent you from voluntarily submitting your name, lead information, or other form content needed to use a buyer share link.

We also honor the Global Privacy Control (GPC) signal as an opt-out of the sale or sharing of personal information, as required under the California Consumer Privacy Act. When we detect a GPC signal from your browser, we treat it as a valid opt-out request. Because we do not sell or share personal information for advertising, no additional action is required, but the signal is recognized and logged as required by law.

When we detect a GPC signal, we configure buyer share analytics not to run for that session and treat the signal as a valid privacy preference where applicable.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at support@accruu.io.

11. International Data Transfers

The Service is hosted in the United States. If you access the Service from outside the United States, your data will be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer. We process data in accordance with applicable U.S. privacy laws. We do not currently transfer data to countries outside the United States.

12. De-Identified and Aggregated Data

We may create de-identified or aggregated data from personal information by removing identifiers that would allow the data to be linked back to you. We use de-identified data for product analytics, industry benchmarking, and service improvement. We commit to maintaining and using de-identified data only in de-identified form and will not attempt to re-identify it, except as permitted by law for the purpose of determining whether our de-identification processes are effective.

13. Third-Party Links

The Service may contain links to third-party websites or services (e.g., MLS listings). We are not responsible for the privacy practices of third-party sites. We encourage you to review the privacy policies of any external sites you visit.

14. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you at least 30 days in advance via email or through the Service. The "Effective Date" at the top of this page indicates when the policy was last revised. Continued use of the Service after the updated policy takes effect constitutes acceptance.

15. Marketing Communications

We send two categories of electronic communications to users who have accounts with us:

  • Transactional messages. Account receipts, purchase confirmations, generation-complete notifications, password resets, and similar operational messages. These are part of the Service and cannot be suppressed without closing your account.
  • Marketing messages. Product updates, promotions, and similar optional content. Marketing is off by default. You can opt in via Settings → Notifications → "Marketing & offers" at any time, and opt out at any time from the same screen or by using the unsubscribe link in any marketing email.

When you opt out, we will stop sending marketing messages within the time required by law. Marketing emails include unsubscribe mechanisms so you can opt out directly. This section does not apply to transactional messages.

We do not send marketing text messages (SMS) today. If that changes, we will seek separate prior express written consent as required by the Telephone Consumer Protection Act (TCPA) and this section will be updated before any marketing SMS is sent.

16. Contact Us

For privacy-related questions, data access requests, or to exercise your rights:

Accruu, LLC
5900 Balcones Drive #29693
Austin, TX 78731

Email: support@accruu.io

17. Version History

  • March 24, 2026: Initial publication.
  • April 13, 2026: Updated third-party service-provider descriptions and added appeal procedures for certain state privacy rights.
  • April 14, 2026: Updated agent account data and listing metadata retention language in Section 5 to use commercially reasonable deletion timeline.
  • April 15, 2026: Updated technical and service-provider descriptions to use functional categories.
  • April 20, 2026: Added Section 15 (Marketing Communications) describing transactional and optional marketing communications.
  • April 21, 2026: Added Section 1.8 (Diagnostic Data), clarified consent and attestation timestamp retention, and updated privacy-signal handling.
  • May 12, 2026: Clarified that buyer engagement data is pseudonymous unless a Buyer voluntarily submits identity or contact information; added Prospective Agent Outreach Data; updated retention and DNT/GPC descriptions to match share-page controls.
  • May 13, 2026: Updated payment and service-provider disclosures to cover Android subscriptions, Google Play Billing, and subscription-management entitlement processing.
  • May 14, 2026: Added transactional email provider disclosure and clarified post-deletion consent tombstone retention.

This Privacy Policy was last reviewed on May 14, 2026.

Accruu Vision See what any home could become.
Terms of Service Privacy Policy Do Not Sell My Info DMCA Policy Accessibility