Privacy Policy

Marshal (“the Service”, “we”, “us”) helps real-estate brokers manage their clients and reach out to potential home buyers with an AI calling assistant that qualifies interest and schedules consultations. This policy explains what information we collect, how we use it, and the choices you have. It applies to the Marshal web application (marshalos.com).

Account information. When you create an account we collect your name, email address and, if you register with a password, a securely hashed credential. If you sign in with Google we receive your basic Google profile (name, email, profile picture).

Client and lead information you upload. Brokers add contact details of their clients and prospects (names, phone numbers, optional email addresses, and notes). You are responsible for having a lawful basis to share this information with us and for the AI assistant to contact those people on your behalf.

Call data. Calls placed by the AI assistant produce recordings, transcripts, AI-generated summaries and structured notes (for example housing preferences, budget, and scheduling decisions). This data is shown to the owning broker to prepare for consultations.

Email data. If you connect Gmail, we read recent messages to surface unreplied client emails and draft replies on your behalf. We process only what is needed to operate these features.

Usage data. Standard technical logs such as IP address, browser type and timestamps, used for security and to operate the Service.

When you sign in with Google and grant the relevant permissions, we request access to your Google Calendar (https://www.googleapis.com/auth/calendar.events) and Gmail (gmail.readonly / gmail.send). We use this access exclusively to:

• read your free/busy status to suggest open consultation slots during calls, and create calendar events (with Google Meet links) for consultations booked with the AI assistant; and
• read recent emails to surface unreplied client messages, and send replies you compose from within the Service.

We never use Google user data for advertising, profiling, or model training, nor do we sell it. OAuth tokens are stored encrypted at rest and are used only to perform the actions above on your behalf. You can revoke our access at any time at myaccount.google.com/permissions.

Marshal’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use the information described above solely to operate the Service: managing your client relationships, placing and documenting calls, scheduling consultations, surfacing email to-dos, showing brokers their own data, and securing the platform. We do not sell personal information.

We share data with processors strictly to provide the Service:

• Vapi (voice AI) and Twilio (telephony) — place calls and produce recordings and transcripts;
• Google — authentication, calendar availability and event creation, and Gmail access;
• Google Gemini and OpenAI — AI text and speech processing;
• Cloudflare R2 and infrastructure providers that host our application, files, and database.

Account, client and call data are retained while your account is active. Deleting a lead permanently deletes its call records and appointments. To delete your account and associated data, contact us at the address below and we will complete the request within 30 days.

Data is transmitted over TLS and stored in access-controlled databases. Access to production systems is limited to authorized personnel.

The Service is intended for business use and not directed to children under 16.

We may update this policy and will revise the “Last updated” date above. Questions or requests: [email protected].