Overview

Trevy LLC (“Trevy,” “we,” “us”) works real estate teams’ Follow Up Boss databases. Trevy writes follow-up emails and sends them through each team’s own Follow Up Boss account, hosts monthly market report pages, takes tour requests, alerts agents when a contact is ready to talk, and sends the team lead a weekly or daily report.

This Privacy Policy explains what data we collect, how we use it, who we share it with, how long we keep it, and your rights. It covers the Trevy app (ai.trevy.io), the report and tour booking pages we host for our customers (reports.trevy.io), and our marketing website (trevy.io). It applies to two groups of people: our customers, meaning the team leads and agents who use Trevy, and their contacts, meaning the people in a customer’s Follow Up Boss database. Contacts’ information comes from our customers’ Follow Up Boss accounts and from contacts’ use of the emails and pages Trevy sends them, and we handle it on our customer’s behalf (see section 3). If you have questions, email us at support@trevy.io.

1. Information We Collect

Account Information

When you sign up or join a team, we collect:

Your name, email address, and what you’d like Trevy to call you
Your password, if you create one (hashed with bcrypt — we never store your actual password)
If you sign in with Google or Microsoft: your name, email address, the account ID the provider gives us, and, from Google, your profile photo. We ask only for basic sign-in information (the openid, email, and profile scopes) and keep no access tokens. Trevy does not connect to Gmail, Outlook, or any mailbox or calendar.
Your settings: time zone, email tone, quiet hours, which stages and tags Trevy works, and your alert, report, and tour settings
Your team: the Follow Up Boss users added to your team (name, email address, Follow Up Boss user ID, and role)
Agent profiles for report pages: name, photo, logo, company, title, license number, phone, email, bio, brand colors, and social links, and any email signature settings saved when Trevy offered signatures. Profiles appear publicly on your report and tour booking pages, and uploaded photos and logos are stored at public web addresses.
Your answers to the weekly report’s questions, including any comment you write, and settings you change from the report’s links

Follow Up Boss Data

Trevy works only with Follow Up Boss. A team lead connects it by signing in to Follow Up Boss or by entering an API key, and team members use their team lead’s connection. Through that connection, Trevy reads, and keeps a copy of:

Contacts — every contact in the account, with the record as Follow Up Boss provides it: names, email addresses, phone numbers, addresses, stages, sources, tags, assigned agent, pond and lender, price range, timeframe, background notes, custom fields, and activity dates
Events — the website, property, and inquiry events Follow Up Boss records (such as homes viewed, saved, or searched, and inquiries), which Trevy stores as Follow Up Boss provides them, including any message sent with an inquiry
Communication and other activity — calls, texts, emails, notes, appointments, and tasks. For calls, texts, emails, and notes, Trevy keeps when they happened, who on the team made them, and which way they went (for example, that a contact replied), not what was said. For calls it also keeps the outcome and length, and for appointments and tasks, their titles.
Deals — names, stages, and status
Account setup — users, groups, ponds, stages, sources, tags, pipelines, custom fields, templates, automations, and email campaign events (used to confirm sends and find unsubscribes)

Trevy also writes to your Follow Up Boss account:

The emails it writes — each subject and message goes into Trevy’s custom fields on the contact, and Trevy starts your “Trevy Send” automation so Follow Up Boss sends the email from the agent’s connected mailbox
Tags, notes, tasks, appointments, and custom fields — for example, the “Trevy Hot” tag, hot-lead tasks and notes, a suggested text for the agent to send, and tour appointments
Events — report page visits, searches, and email opens and clicks, including a “Viewed Property” event when a contact clicks a listing
The contact’s price, from what they enter in a report page’s payment calculator
Moving a hot lead nobody on the team reached to another agent or into a pond, the way your settings say
New or updated contacts from the forms on report pages
Setup items — Trevy’s custom fields, its “Trevy Send” email template and “Trevy: suggested text” text template, and webhooks so Follow Up Boss tells Trevy about changes

Your Follow Up Boss API key or sign-in tokens are encrypted at rest using AES-256-GCM.

Contact Activity and Tracking

Trevy keeps a profile for each contact in your Follow Up Boss, built from Follow Up Boss data and from how the contact engages with what Trevy sends. Besides the Follow Up Boss details above, a profile includes:

Email engagement — Trevy adds a tracking pixel to the emails it writes and sends each link through a short Trevy link, keeping the address it leads to. We record whether and when an email was opened, which links were clicked and when, and, for a listing link that includes the home’s address, that address. A Trevy link only ever forwards to the address saved when the email was sent. Opens and clicks are also sent to Follow Up Boss.
Report page activity — described below
What Trevy did — each email it wrote and what happened to it, hot-lead alerts and whether someone on the team reached the contact, leads moved because nobody reached them, replies waiting on the team, and unsubscribes (kept on a do-not-contact list)

Trevy uses these profiles to decide what to send each contact, to tell agents when a contact is ready to talk, and to report to the team lead. They are visible to the team they belong to and never to other Trevy customers.

Tour Requests

Tour requests start off, and the team lead or a team admin can turn them on from the Emails page. When they’re on, listing emails offer times to see each home: open times under the first home, checked against the agent’s Follow Up Boss appointments, and a “Pick a time” button for every other home. Each booking link identifies the contact it was sent to, so the booking page doesn’t ask for a name, email, or phone number, and the link works for 14 days. A contact who books gives us the time they want, any other homes they add (a listing link or an address), and an optional note for the agent. Trevy stores the request with the home’s details, the contact’s first name, and the agent’s name and phone number. It creates an appointment and a task in Follow Up Boss (Follow Up Boss may sync the appointment to the agent’s calendar) and emails the agent. Confirmations and reminders to the contact go out through Follow Up Boss, and a confirmed tour can be added to the contact’s calendar with a calendar file.

Report Pages and Intake Forms

Our customers can send their contacts a monthly market report, which starts only once someone on the team switches it on. The report email links to a page we host for the agent, and market update emails link to the contact’s own report page the same way. When someone visits a report page:

If they came from an email, the link carries a code that tells us which contact it was sent to
We set a first-party cookie (trevy_visitor) holding a random ID, which lasts one year, so we can recognize a returning visitor. Once a browser’s visit is tied to a contact, its later visits count as that contact’s, as long as no more than 30 days pass between them.
We record page views, time on the page, ZIP codes and places searched for, nearby ZIP codes clicked, what’s entered in the payment calculator (price, down payment, and loan term), and clicks on the buttons that ask for homes or for a home’s value
For a known contact, this activity goes into their Trevy profile and into the team’s Follow Up Boss as tags, events, notes, and the contact’s price

Report pages have buyer and seller forms. They ask for first and last name, email address, an optional phone number, and either a price range and preferred area (buyers) or the property’s address (sellers). Submitting a form creates or updates the contact in the team’s Follow Up Boss, links earlier visits from that browser to the contact, and emails the agent the details.

The sample report at reports.trevy.io/sample is the same page under a sample agent. It sets no cookie and records nothing, and its buttons explain what they do instead of opening a form.

Billing

Payments are processed by Stripe. We store your Stripe customer and subscription IDs and your plan. Card details are entered into Stripe’s payment form and go directly to Stripe; we don’t store card numbers. The Billing page shows your card’s brand, last four digits, and expiry date, which it gets from Stripe.

Marketing Site and Website Chat

Our marketing website (trevy.io) uses analytics tools, described under Cookies & Analytics. The “Ask Trevy” chat on the site sends your messages, with up to the last ten messages of the conversation, to Anthropic to write a reply. We don’t save chat conversations: they live only in your browser tab and are gone when you close or reload the page. Please don’t put sensitive personal information in the chat.

Data From Trevy’s Earlier Versions

Trevy used to include a chat assistant, and used to send email through a connected Gmail or Outlook account. Both are retired. We have deleted the assistant’s saved conversations and memories and the Gmail and Outlook access tokens, and cleared the content of old email records that Trevy no longer uses. We keep the records of emails sent that way that may have reached contacts, so their links and unsubscribe links keep working.

2. How We Use Your Information

To run Trevy for your team: choose which contacts to email and what to send, write the emails, and send them through Follow Up Boss
To host report pages and take tour requests
To spot hot leads, alert agents in Follow Up Boss, follow up when nobody reaches a lead, and send the team lead’s weekly or daily report
To track email and report engagement, so the next email fits the contact and your team can see what’s working
To learn which ways of writing a subject line get more clicks, and to write new ways to try, from counts of sends and clicks across all teams, never who sent, received or clicked them
To honor unsubscribes and stop emailing contacts who reply
To process payments, manage your plan, and count active contacts and the emails Trevy sends
To send you service emails: email confirmation, password resets, team invites, trial, billing, and account deletion notices, and notices about leads and tours
To protect and operate the service: rate limiting, bot checks, monitoring, troubleshooting, and tracking AI usage and costs
To support you and improve Trevy, including from your answers to the weekly report’s questions

3. Trevy’s Role for Your Contacts’ Data

For the people in a customer’s Follow Up Boss, Trevy is the customer’s service provider. We process contacts’ information on the customer’s behalf, to provide Trevy to that customer, and not for our own purposes. The customer decides what’s in their Follow Up Boss, which contacts Trevy works, and what Trevy sends them, and is responsible for having the right to share their contacts’ information with us.

We don’t sell contacts’ information, use it for advertising, or use one customer’s contacts for another customer. If you’re a contact and want to see, correct, or delete your information, see sections 9 and 10.

4. How We Share Your Information

AI Writing (Anthropic)

Trevy uses Anthropic’s Claude API to write its follow-up emails, such as introductions, listing alerts, and check-ins. For each one, we send Anthropic what it needs to write that email: the contact’s name and what Trevy knows about them (such as what they’re looking for, stage, source, city and ZIP code, budget, tags, timeframe, background notes from Follow Up Boss, homes they’ve viewed, what they’ve looked up on their report page, their most recent activity, and whether they’ve called or texted), the listings or mortgage rate the email is about, the subject of an earlier email when it follows one up, your tone setting, and the names of the contact’s agent and of the sender. We don’t send the contact’s email address or phone number.

Market updates are different. Trevy’s code writes every figure in them, from public housing market statistics and the day’s mortgage rate. Anthropic words only the subject line, greeting, opening line, closing question, and sign-off, and for those we send only the contact’s name, what kind of contact they are (for example, a buyer or a homeowner), the place’s name, your tone setting, and the sender’s name — never the figures.

Monthly market report emails, timely emails, tour emails, and suggested texts are built from Trevy’s templates rather than written by AI, and Trevy’s code writes the report pages. Claude may write a new way to word a template’s subject line for Trevy to test; for that we send only the ways tried so far and counts of their sends and clicks across all teams, never a contact, an agent or a team. We also use Claude to answer questions in the website chat. See Anthropic’s Privacy Policy for how Anthropic handles data.

Follow Up Boss

Follow Up Boss is the system Trevy works in and sends through. What Trevy writes back, including the emails it writes, tracking events, and report form submissions, lands in your team’s Follow Up Boss account. Follow Up Boss sends Trevy’s emails from your agents’ connected mailboxes and adds your account’s unsubscribe footer. Its handling of that data is governed by Follow Up Boss’s own terms and privacy policy.

Service Providers

We share data with the following providers solely to operate the platform:

Anthropic — AI writing and the website chat (described above)
Vercel — hosting and serverless functions for the Trevy app and report pages, and storage for uploaded agent photos and logos
Supabase — database hosting (all stored data)
Stripe — payment processing and subscription management
Mailgun — Trevy’s own emails to you and your team (confirmations, password resets, invites, alerts, weekly and daily reports, and trial, billing, and deletion notices), which can include contact details such as a report form submission or a tour request
Google and Microsoft — sign-in, if you choose it
Cloudflare — Turnstile bot check on the signup form
Slack — internal alerts to our team about the health of the system
Google Tag Manager / Google Analytics, Microsoft Clarity, and Follow Up Boss — marketing site analytics (marketing site only; see Cookies & Analytics)

Trevy also gets listing, neighborhood, housing market, and mortgage-rate data from outside sources, such as Zillow, Walk Score, public housing market statistics, the U.S. Census Bureau, and FRED (Federal Reserve Bank of St. Louis). Those requests carry only places, search filters, and listing addresses or coordinates — never a contact’s name, email address, or phone number.

Within Your Team

Data in a team’s account is shared with that team. For example, the team lead sees agents’ follow-up on hot leads in the weekly report. One customer’s data is never shared with another customer.

If Trevy Is Sold or Merged

If Trevy is part of a merger, acquisition, or sale of all or part of its business, the information we hold may be transferred as part of that deal. Whoever receives it must keep protecting it as this policy describes.

We Do NOT

Sell your data or your contacts’ data
Share your data or your contacts’ data with advertisers
Use customer data to train AI models
Share your CRM data with other Trevy customers
Read or send mail through your Gmail or Outlook account
Use your data for anything beyond running, supporting, protecting, and improving Trevy

Legal Requirements

We may disclose information if required by law, subpoena, or court order, or to protect the rights, safety, or property of Trevy, our users, or the public.

5. AI and Model Training

Trevy does not use customer data — your account, your contacts, or the emails Trevy writes — to train AI models.

We use Anthropic through its commercial API. Anthropic’s commercial terms do not permit it to train its models on inputs and outputs sent through the API by default. Anthropic may keep API data for a limited time under its own policies, for example to operate the service and to check for misuse. See Anthropic’s Privacy Policy for details.

6. Google User Data and Limited Use Disclosure

Trevy’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Trevy uses Google only for “Sign in with Google.” We request the basic sign-in scopes (openid, email, and profile) and nothing else: no access to Gmail, Google Calendar, Google Drive, or Google Contacts. Specifically:

We receive your name, email address, profile photo, and Google account ID
We use this information only to create your Trevy account and sign you in
Your name becomes part of your Trevy account. If you haven’t set a preferred name, it can be used as the sign-off on emails Trevy writes for your contacts, and so can be included in what we send Anthropic to write those emails
We do not use Google user data for advertising, sell it, or use it to train AI models
We do not keep Google access or refresh tokens
We do not transfer Google user data to third parties except our service providers as needed to run Trevy (such as our database host), as described above, or as required by law
You can remove Trevy’s access from your Google Account settings at any time. To keep using Trevy afterward, set a password with “Forgot password” on the sign-in page.

Sign in with Microsoft works the same way: Trevy requests only the openid, email, and profile scopes, has no access to your mail or calendar, and keeps no tokens.

7. Data Security

Follow Up Boss API keys and sign-in tokens encrypted at rest with AES-256-GCM
No Google or Microsoft tokens kept — those accounts are used for sign-in only
Passwords hashed with bcrypt (never stored in plaintext)
Password reset links (valid 1 hour) and email confirmation links (valid 24 hours) are single-use and stored only as hashes
New password signups must confirm their email address before they can sign in
Sign-in sessions use signed tokens in an HTTP-only cookie that is sent only over secure (HTTPS) connections
Google and Microsoft sign-ins are tied to the browser that started them, and only addresses the provider has verified are accepted
Stripe webhook signatures verified; Follow Up Boss webhook signatures verified with HMAC-SHA256
Account pages and APIs require a signed-in session; public links in emails and on report and booking pages use random or signed codes
Signup, email confirmation, report forms and searches, tour booking, and unsubscribe are rate-limited
Multi-tenant isolation — each account’s records are looked up by account, so one customer can’t see another’s data
Internal admin pages are limited to an approved list of Trevy staff

Our Security page has more detail.

8. Data Retention

While Your Account Is Active

We keep your account’s data while you use Trevy. Some things have their own, shorter lifetimes:

Unsubscribes stay on your account’s do-not-contact list for as long as the account exists, so an unsubscribed contact isn’t emailed again
Session cookies expire after 30 days, and the report page visitor cookie after one year
Tour booking links work for 14 days after the email goes out, or after the agent answers a request made from one, if that’s later
Rate-limit records, which include IP addresses, are deleted in a daily cleanup once their time window has passed

After Your Plan or Trial Ends

When your paid plan ends (after you cancel, at the end of the period you paid for) or your free trial ends without a plan, we keep your account’s data for 30 days, then permanently delete it. That includes your account and its logins, your settings, team, and sequences, the profiles and activity Trevy recorded about your contacts, email and report tracking, tour requests, and uploaded photos and logos. Team members’ logins that exist only for your team are deleted with it. We also remove the webhooks Trevy added to your Follow Up Boss.
Before deleting an account whose plan or trial ended, we email the account owner about a week ahead. Accounts that had already ended when we started these deletions are deleted without that email.
If you subscribe before the deletion date, nothing is deleted and Trevy picks up where it left off.
Signups that never connect Follow Up Boss are deleted, with their login and settings, 30 days after they’re created.
An account that connects a Follow Up Boss account which already had its free trial gets no trial of its own. Unless it subscribes, its data is deleted 30 days after it connected, with the same email a week ahead.
You can ask us to delete your account sooner by emailing support@trevy.io.
What Trevy wrote into your Follow Up Boss (emails, notes, tags, tasks, and events) stays there. It’s your Follow Up Boss data, and deleting your Trevy account doesn’t touch it.

What We Keep After Deletion

So that we keep honoring unsubscribes and the one-trial-per-Follow Up Boss account rule, we keep scrambled records (keyed hashes) of the addresses that asked Trevy to stop (those Follow Up Boss doesn’t already hold), of whether your Follow Up Boss account had a free trial, and of your account’s ID, so unsubscribe links in its old emails still work. A keyed hash can’t be turned back into an address or ID; it only lets us recognize the same one if it comes up again.
Stripe keeps its own billing records under its own policies.
Mailgun and our hosting providers keep their own logs for their own retention periods.
Deleted data can remain in database backups until they roll off on our database host’s schedule.

9. Your Rights

You can:

Access your data — request an export by contacting support@trevy.io
Correct your data — update your name and preferred name in Settings and your agent profile on Your page. Once Follow Up Boss is connected, your time zone comes from your Follow Up Boss profile. Contact details are corrected in Follow Up Boss, and Trevy picks up the change.
Delete your data — request deletion by contacting support@trevy.io. Otherwise, your data is deleted 30 days after your plan or trial ends (see Data Retention).
Turn features off — automated follow-up, timely emails, market reports, and tour requests can be switched off on the Emails page, and hot-lead alerts and the team lead’s report in Settings. Market reports and tour requests stay off until someone on your team switches them on.
Stop Trevy’s access to Follow Up Boss — Trevy’s Settings can update or reconnect the connection but has no disconnect option yet. Contact us, or remove the API key or Trevy’s access in your Follow Up Boss account.
Cancel your subscription — from Settings → Billing at any time, effective at the end of the paid period

If you’re a contact of a Trevy customer:

Use the unsubscribe link at the bottom of any email to stop emails. Trevy won’t email that address for that team again.
To access, correct, or delete your information, contact the real estate team you’re working with, since they control your record in Follow Up Boss. You can also email support@trevy.io and we’ll help.

10. U.S. State Privacy Rights

Depending on where you live, your state’s privacy law (California’s, for example) may give you the right to know what personal information we have about you and get a copy, to correct it, to delete it, and to opt out of its sale or its use for targeted advertising.

We don’t sell personal information, and we don’t share it for cross-context behavioral advertising or use it for targeted advertising.
To make a request, email support@trevy.io and tell us what you’d like. We’ll confirm it’s you before we act, for example by writing back to the email address we have for you. You can also have someone you authorize make the request for you.
We won’t treat you differently for using these rights. If we turn down a request, we’ll tell you why, and you can ask us to reconsider by replying.
If you’re a contact of a Trevy customer, we hold your information for that real estate team (see section 3), so your request should usually go to them. If you write to us instead, we’ll help.

11. Cookies & Analytics

Trevy App and Report Pages

session-token — keeps you signed in. A first-party, HTTP-only cookie, sent only over secure connections, that expires after 30 days.
Short-lived sign-in cookies — set for up to 15 minutes while you sign in with Google or Microsoft or connect Follow Up Boss, to protect the sign-in
trevy_visitor — on report pages, a random ID that recognizes a returning visitor, kept for one year. The sample report doesn’t set it.

The Trevy app and report pages don’t use advertising cookies or third-party analytics. The app loads Stripe’s payment form on the Billing page and Cloudflare Turnstile on the signup page, and those services may set their own cookies to prevent fraud and bots.

Analytics (Marketing Site Only)

Our marketing website (trevy.io) uses the following third-party analytics services to understand how visitors find and interact with our site:

Google Tag Manager / Google Analytics — page views, traffic sources, and site events such as button clicks and how far you scroll. Google may set cookies. See Google’s Privacy Policy.
Microsoft Clarity — session recordings, heatmaps, and site events to improve site usability. Recordings can capture what’s shown on the page, except the website chat, which is masked from them. Clarity may set cookies. See Microsoft’s Privacy Statement.
Follow Up Boss tracking — records page views on our site in Trevy’s own Follow Up Boss account, which we use as our CRM. If you’re already one of our contacts there, those visits can be linked to your record. It may set cookies.

These analytics tools are only present on the marketing site (trevy.io). They are not on the Trevy app or on report pages.

12. Trevy Is for U.S. Businesses

Trevy is offered to businesses in the United States. This policy is written for them, for the people who use Trevy on their behalf, and for the people in their contacts.

13. Children’s Privacy

Trevy is designed for real estate professionals. You must be at least 18 years old to use the platform. We do not knowingly collect information from anyone under 18.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the platform. Continued use after changes take effect constitutes acceptance.

15. Contact

For privacy-related questions or requests, contact us at support@trevy.io.

Trevy LLC
Florida, United States