Skip to content

Privacy policy

Last updated: July 1, 2026

Scope of this privacy policy

Back At You, Inc. ("Back At You" or "BAY," also "Company," "we," "us," or "our") respects your privacy. This policy explains how we collect, use, and disclose information that we collect and control as a business through www.backatyou.com, our product login portals and applications (including Back At You Social, Back At You Websites, Back At You Office, Back At You Financial, and Design Studio; references in any agreement or order form to our former product names SocialBAY, ClientBAY, SitesBAY, or FinancialBAY refer to these same products), and the services we provide to our customers (the "Services").

This policy does not apply to the websites we build, host, or operate for our brokerage and agent customers ("Customer Sites"), or to information we process on behalf of those customers, including personal information customers collect through their Customer Sites or store in our products (such as their CRM contacts, leads, and transaction records). For a Customer Site, the customer (the brokerage or agent) is the business responsible for that site's data practices. That information is governed by our agreement with the customer and by the customer's own privacy policy, and we act as a service provider or processor acting on the customer's instructions. If you interacted with a real estate brokerage or agent website and have a privacy request about it, please contact that brokerage or agent.

This policy explains our information practices. Your use of the Services is governed by our Terms of Service, which contain the terms you agree to when you use the Services.

Information we collect

The categories below describe data we collect and control as a business from our own account holders and the visitors to our corporate site. They do not describe consumer data that we process on behalf of customers on their Customer Sites, for which the customer is the responsible business or controller (see "Scope" above). We collect personal and business data when you sign up, log in, interact with the Services, or connect third-party applications. The categories we collect include:

  1. Personal and business information: full name, business name, email address, phone number, mailing address, and other professional or business details.
  2. Account and authentication information: login credentials (email, username, password, authentication tokens, session keys), single sign-on (SSO) information from third-party providers (for example Google or Meta), and account preferences and settings.
  3. Financial and payment data: billing information and payment details (credit card, ACH, invoicing), purchase history and subscriptions, and transaction details or commission reports for brokerage clients using those modules.
  4. Usage and technical data: IP address, browser type, device information, operating system, general location, interactions with the platform, pages viewed, and service usage logs.
  5. Lead generation and CRM data: leads generated through our software (names, contact details, inquiry history), customer relationships and transaction history, and data imported from third-party CRM or lead sources. We process this category primarily on our customers' behalf as a service provider; it is listed here for transparency and is governed by our customer agreements and our Data Processing Addendum.
  6. Social media and marketing data: connected social media accounts (Facebook, Instagram, TikTok, YouTube, X, LinkedIn, and others), post engagement and analytics, and ad campaign performance and spend.
  7. Transaction and commission management (for brokerages using this service): real estate transaction details, property listings, contracts, commission breakdowns, automated calculations, and brokerage compliance documents. We process this category on the brokerage's behalf as a service provider; it is listed here for transparency and is governed by our customer agreements and our Data Processing Addendum.

How we collect information

We collect information from three sources:

  • Directly from you, when you create an account, enter information into the Services, or communicate with us.
  • Automatically, when you interact with the Services, for example when you log in, use marketing tools, track leads, or manage transactions. As with any internet service, your browser and our servers exchange standard technical information (such as IP address, device and browser type, and requested pages) so that pages can load and the Services can function and stay secure.
  • From third parties, when you connect social media, CRM, payment processors, or other tools.

How we use your information

  1. Provide, support, and manage the Services, including access, customer support, and billing.
  2. Optimize marketing and lead generation using data-driven insights.
  3. Enable social media management, including scheduling, posting, and analyzing performance.
  4. Enable CRM functionality so users can manage leads, contacts, and transactions.
  5. Support compliance with legal, financial, and brokerage requirements.
  6. Enhance security, fraud prevention, and data protection.
  7. Improve platform functionality, personalization, and user experience.

We may send marketing emails or text messages, service updates, newsletters, or promotional offers. You can opt out of marketing communications at any time by updating your preferences or using the unsubscribe control in the message.

How we share your information

We do not sell your personal information for monetary or other valuable consideration, except to the extent any disclosure described below as "sharing" is treated as a "sale" under some state laws. We may disclose personal data in these ways:

  • With service providers that help us deliver the Services, subject to contractual confidentiality and data-protection obligations appropriate to the service (for example cloud hosting, payment processors, analytics providers, MLSs, and other integrations).
  • With business partners, such as lead-generation partners that help supply leads to you, your brokerage if it purchased the Services for you, or other industry partners important to your account. We do not sell, rent, or distribute your Leads to third parties.
  • For legal compliance, if required by law, subpoena, court order, or government request.
  • In business transfers, in connection with a merger, acquisition, financing, or sale of assets.

Advertising and "sharing" disclosure. To the extent we make online identifiers, activity information, or contact information (such as hashed email addresses or phone numbers used to build matched or custom advertising audiences) available to advertising or analytics companies for cross-context behavioral advertising or retargeting (see "Cookies and tracking technologies" below, which references tools such as Google Ads and Meta Ads), that activity may be treated as "sharing" (and in some states "selling") under California and other state privacy laws, and you may opt out as described below. Our advertising partners include Google Ads, Meta, and AdRoll (NextRoll). Whether a given analytics tool is a "service provider" (and therefore not a "sale" or "share") depends on the current terms and configuration of that tool, so we review this periodically and do not treat that status as guaranteed.

Cookies and tracking technologies; your choices

We and our authorized partners use cookies and similar technologies to improve experience and functionality, measure analytics and performance, and, where enabled, provide advertising (for example Google Ads, Meta Ads, and AdRoll). You can manage cookies through your browser settings.

On our own website and app, we are moving our core product analytics to privacy-protective, first-party or cookieless measurement. How advertising technologies operate depends on your location, which we use reasonable measures to detect when you visit. If you visit from a jurisdiction that requires opt-in consent (for example Quebec), non-essential advertising and profiling technologies are designed to remain off until you opt in. Elsewhere, including in the United States, advertising technologies operate on an opt-out basis: you can opt out at any time using the choices below, and we honor the Global Privacy Control signal.

  • Global Privacy Control (GPC). Where required, we honor the GPC browser signal as a valid request to opt out of "sharing" (and "sale") for cross-context behavioral advertising. See globalprivacycontrol.org.
  • Your Privacy Choices. Use the "Your Privacy Choices" link in our website footer to manage your consent preferences, including opting out of advertising and data-sharing cookies.
  • Analytics choices. Where non-essential analytics are used, you can decline them through the "Your Privacy Choices" consent preferences, and, where required by law, they are designed to load only after you consent.
  • Advertising opt-outs. Google Ads Settings (adssettings.google.com), Meta Ads (facebook.com/about/ads), the Digital Advertising Alliance (optout.aboutads.info), and the Network Advertising Initiative (optout.networkadvertising.org). These controls are specific to each browser and device.

Your California privacy rights (CCPA/CPRA)

This section supplements the policy and applies to California residents. It does not apply to information we process on behalf of our customers as a service provider (see "Scope" above).

Categories of personal information collected in the last 12 months: identifiers; California Customer Records categories (such as name, contact, and payment information); commercial information; internet or network activity; general geolocation (from IP address); professional or employment information; audio or visual information where applicable; inferences; and sensitive personal information limited to account log-in credentials and financial account information.

Sources, purposes, and disclosures: we collect these categories from the sources described in "How we collect information," use them for the purposes in "How we use your information," and disclose them to the recipients in "How we share your information."

Categories of recipients: service providers (hosting, payment, analytics, security, and communications), advertising and analytics partners (to the extent of any "sharing"), your sponsoring brokerage or business partners, and, when required, legal or government authorities.

Categories shared for advertising: to the extent we "share" for cross-context behavioral advertising, the categories are identifiers and internet or network activity. We do not "share" other categories for advertising.

Retention: we keep each category no longer than reasonably needed for the purpose for which it was collected and for related legal, audit, tax, and security purposes. Account and transaction records are generally kept for the life of the account and for the period required by law after closure; usage and analytics data are kept for a shorter operational period. See "Data retention and deletion requests" below.

Notice at collection: this section, together with "Information we collect" and "How we use your information," serves as our notice at collection. Where we collect information directly (for example on a form), we make this policy available at or before the point of collection.

Sale and sharing: we do not sell personal information for monetary or other valuable consideration. To the extent we "share" online activity for cross-context behavioral advertising, you may opt out (see "Cookies and tracking technologies"). We do not knowingly sell or share the personal information of consumers under 16.

Sensitive personal information: the sensitive personal information we handle is limited to account log-in credentials and, for customers who use billing or our financial products and features, financial account information. We use this information only to provide the Services you request and for related security and fraud-prevention purposes, which do not trigger the right to limit under the CCPA, so we do not offer a separate "Limit the Use of My Sensitive Personal Information" option. We do not use sensitive personal information to infer characteristics.

Your rights: to know and access, to delete, to correct, to opt out of sharing for cross-context behavioral advertising, and to be free from discrimination for exercising your rights.

How to exercise your rights: email privacy@backatyou.com or call 866-200-0676. You may use an authorized agent with proof of authorization. We will verify your identity before acting on a request. You may appeal a denial by replying to our response or contacting privacy@backatyou.com. You can opt out of sharing by enabling GPC in your browser or by using the "Your Privacy Choices" link in our footer to set your consent preferences.

Other U.S. state privacy rights

Residents of states with comprehensive privacy laws (including but not limited to Virginia, Colorado, Connecticut, Texas, Utah, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, and New Jersey) may have rights to access, correct, delete, and obtain a copy of their personal data, to opt out of targeted advertising and certain profiling, and to appeal a denied request. Where required, we honor recognized universal opt-out signals such as GPC. To exercise these rights, use the contact methods above. If we deny your request, you may appeal by replying to our decision, and we will respond within the time your state's law requires.

Canada (PIPEDA) and Quebec (Law 25)

We handle personal information in accordance with Canada's PIPEDA and, for Quebec residents, Quebec's Law 25. We have designated a Privacy Officer responsible for compliance, reachable using the details below.

  • Canadian users may request confirmation of, access to, and correction of personal information, may withdraw consent, and may request erasure, subject to legal limits.
  • Quebec residents. For technologies that identify, locate, or profile you (such as certain tracking or advertising cookies), we obtain consent and keep those features off by default where required by Law 25. You may complain to the Commission d'accès à l'information du Québec (CAI).
  • Cross-border transfer. Information may be stored and processed in the United States or other jurisdictions. Where required, we apply appropriate protections.

Third-party integrations

Our platform integrates with third-party services, which may include:

  • Social media (Facebook, Instagram, TikTok, YouTube, X, LinkedIn, and others)
  • Payment gateways (Chargebee, Stripe, Braintree, and others)
  • CRM, productivity, and lead management tools (Zapier, Zoho, and others)
  • Cloud and infrastructure providers (AWS, DigitalOcean, Switch, and others)
  • Messaging and telephony providers (Twilio, Telnyx, Plivo, and others)
  • AI infrastructure and model providers used to power our AI features (currently DigitalOcean's inference platform and the third-party models it routes requests to), as described in our AI Product Terms

Each third-party provider has its own privacy policy, which we encourage you to review.

Data security

We use security measures to protect your data, including encryption of sensitive data (such as passwords and payment information), access controls, and regular security reviews. No system is 100% secure, and you are responsible for safeguarding your login credentials.

Data retention and deletion requests

We retain personal data only as long as necessary for business, legal, audit, or compliance purposes. Data may be deleted or anonymized upon account closure, a verified deletion request, or the expiration of a legal retention period.

Regardless of where you live, you may request deletion of the personal data we hold about you, including data obtained through connected social media platforms (such as Meta), by emailing privacy@backatyou.com or calling 866-200-0676. We will honor verified requests, subject to legal retention requirements.

Children's privacy

The Services are intended for businesses and licensed real estate professionals aged 18 and older, and we do not knowingly collect personal data from anyone under 18. Separately, as stated in the California section, we do not knowingly sell or share the personal information of consumers under 16.

Dispute resolution

Your use of the Services is governed by our Terms of Service, which contain the binding dispute-resolution terms that apply between you and Back At You, including, for account holders, an agreement to resolve disputes by individual arbitration and a class-action waiver, with the carve-outs stated there. Please review the Terms of Service for the full dispute-resolution terms.

Updates to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date.

Contact information

For questions about this policy, or to exercise your privacy rights:

  • Email: privacy@backatyou.com
  • Phone: 866-200-0676
  • Mail: Back At You, Inc., Attn: Privacy Officer, 16501 Ventura Blvd, Suite 400, Encino, CA 91436

You can also manage your cookie and advertising preferences at any time using the "Your Privacy Choices" link in our website footer.