1. Who We Are
BrokerReady is operated by S-DUB Media LLC ("we," "us," or "our"). We provide a white-label training and compliance management platform for real estate brokerages.
For purposes of the Tennessee Information Protection Act (TIPA) and other privacy laws, your brokerage is the "Controller" of your data, and BrokerReady is the "Processor" acting on your brokerage's behalf.
2. What Data We Collect
Information You Provide
- Account information: Name, email address, phone number, role
- License information: License number, state, expiration date
- E&O insurance: Carrier, policy number, expiration date, coverage amount
- NAR membership: Member ID, local board, expiration date
- Compliance documents: Uploaded PDFs and images of licenses, E&O declarations, membership cards
- Profile information: Bio, photo (if uploaded)
Information Generated By Use
- Training progress: Module completion, video watch time, track assignments
- Certificates: Completion certificates with your name, track, and date
- Activity data: Last login time, training streak, compliance status
- Audit logs: Record of compliance-relevant actions (track assigned, module completed, certificate issued)
Information From Third Parties
- Your brokerage: Your name and email when your account is created
- Supabase (authentication): Session tokens for login security
3. How We Use Your Data
- Deliver training content and track your progress
- Monitor compliance status (license, E&O, NAR expiration tracking)
- Send automated reminders before credentials expire (6, 3, 2, and 1 month)
- Generate completion certificates
- Provide dashboards to your broker showing team compliance status
- Send email notifications (training assigned, completed, weekly digest)
- Process subscription billing for your brokerage
- Maintain audit logs for compliance verification
We never sell your personal data. We never use your data for advertising. We never share your data with other brokerages.
4. Who Can See Your Data
| Your Data | Who Sees It |
|---|
| Name, email, office | Your broker, office manager, and agents in your directory |
| License / E&O / NAR info | Your broker and brokerage owner only |
| Training progress | Your broker and brokerage owner |
| Compliance documents | Your broker and brokerage owner |
| Certificates | You control — shareable via public verify link |
| Phone, bio | Agents in your office directory (if enabled) |
5. Third-Party Services
We use the following third-party services to operate the Platform:
- Supabase — Database hosting and authentication (AWS US-East-2)
- Vercel — Application hosting and deployment
- Resend — Email delivery for notifications and reminders
- Stripe — Payment processing for brokerage subscriptions
- Vimeo — Video hosting for training content
Each provider maintains their own privacy practices. We select providers with strong security and privacy standards.
6. Data Retention
- Active accounts: Data retained while your brokerage subscription is active
- Archived agents: Data retained but hidden from non-management users
- After brokerage cancellation: Data retained for 90 days, then permanently deleted
- Audit logs: Retained for 7 years for compliance purposes
- Certificates: Retained permanently (public verification remains available)
7. Your Rights
Under the Tennessee Information Protection Act (TIPA) and other applicable laws, you have the right to:
- Access: Request a copy of all personal data we hold about you
- Correct: Update inaccurate information in your profile
- Delete: Request deletion of your personal data
- Portability: Receive your data in a portable format (CSV export)
- Opt out: Opt out of non-essential email communications
To exercise these rights, contact your brokerage administrator or email us at privacy@brokerready.net. We will respond within 45 days.
8. Data Security
We protect your data with:
- Encryption in transit (HTTPS/TLS) and at rest
- Multi-tenant data isolation — your brokerage's data is never accessible to other brokerages
- Role-based access controls — agents, brokers, and owners see only what they're permitted to
- Supabase Row Level Security (RLS) policies on all database tables
- Daily automated security audits via CI/CD pipeline
- Passwords hashed with bcrypt — we never store or see your password
9. Children's Privacy
BrokerReady is not intended for use by anyone under 18 years of age. We do not knowingly collect data from minors.
10. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or applicable laws. Material changes will be communicated via email or in-app notification. The "Last updated" date at the top reflects the most recent revision.
11. Contact Us
For privacy-related questions or data requests:
S-DUB Media LLC
Email: privacy@brokerready.net
Website: brokerready.net
NOTICE: This document is a template and should be reviewed by a qualified attorney before use. It is not legal advice.