Privacy Policy

Carbon Collective CRM LLC
Powered by Lofty Inc. | Real Estate CRM Platform Services

Last Updated
February 17, 2026
Effective
February 17, 2026

This Privacy Policy explains how Carbon Collective CRM LLC (“we,” “us,” “our,” or “Company”) collects, uses, discloses, and protects personal information when you use our website, mobile applications, and real estate platform services (collectively, the “Services”).

1. Introduction and Scope

Carbon Collective CRM LLC is a Colorado limited liability company. Our Services are delivered through a white-label real estate CRM platform powered and hosted by Lofty Inc., an Arizona-based technology company.

This Policy applies to all users of our Services, including prospective home buyers, sellers, renters, and real estate professionals who interact with our platform. By using our Services, you agree to the practices described in this Privacy Policy.

Relationship to Terms of Service: This Privacy Policy is incorporated into and governed by our Terms of Service. Terms not separately defined here have the meaning given in our Terms of Service.

2. Information We Collect

2.1 Information You Provide Directly

  • Contact information: name, email address, phone number, and mailing address
  • Account credentials: username and password
  • Real estate preferences: home search criteria, locations, price ranges, bedroom/bathroom preferences
  • Financial information (mortgage tools): income, credit score range, loan preferences
  • Communications: messages, inquiries, and comments submitted through the platform
  • Agent/professional reviews and feedback
  • Third-party information you share: e.g., a co-buyer’s email address for sharing listings

2.2 Information Collected Automatically

  • Activity information: search history, viewed listings, clicked features, time on pages
  • Device information: browser type/version, device model, OS, unique device identifiers, app version
  • Technical data: IP address, crash reports, system activity, date/time of access
  • Location information: if enabled, we collect location data to show localized results and connect you with nearby professionals
  • Cookies & tracking: see Section 8

2.3 Information from Third Parties

We may receive information about you from third-party sources (such as MLS data providers, public records, identity verification services, and analytics partners) and may combine it with information we collect through the Services.

3. How We Use Your Information

  • Provide and improve the Services (search results, account management, and new features)
  • Connect you with licensed real estate agents, mortgage loan officers, property managers, and other professionals
  • Communicate about your account, transactions, and service updates
  • Personalize your experience and search results based on preferences and activity
  • Send marketing/promotional communications (with consent where required)
  • Fraud prevention, security monitoring, and platform integrity
  • Comply with legal and regulatory requirements
  • Process and respond to inquiries and support requests
  • Analyze usage trends to improve the platform and operations
  • Operate AI-assisted features (natural language search and automated recommendations)

4. SMS, Text Messaging, and Communications

A2P 10DLC Compliance Notice

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

4.1 SMS and Text Message Consent

We do not send marketing text messages unless you expressly opt in using a clearly labeled consent checkbox. Providing your phone number alone does not constitute consent to receive marketing SMS.

If you opt in, you consent to receive recurring automated and manually dialed SMS/MMS messages from Carbon Collective CRM LLC, which may include:

  • Property alerts, listing updates, and market info
  • Appointment reminders, showing confirmations, transaction status updates
  • Mortgage-related information (only if separately consented)
  • Informational and marketing messages related to our real estate CRM services

4.2 Message Frequency and Rates

Frequency varies by activity and preferences. You may receive approximately 4–10 messages per month. Standard message/data rates may apply. Carriers are not liable for delayed or undelivered messages.

4.3 How to Opt Out of SMS

Reply STOP, CANCEL, or UNSUBSCRIBE to any message to opt out. You’ll receive one final confirmation message and then be unsubscribed. Opt-out will be processed within 10 business days.

For help, reply HELP or contact: [email protected] or 720-961-2695. Opting out of marketing SMS does not affect transactional, account, or legally required messages.

4.4 Mobile Data — Sharing and Non-Disclosure

  • No mobile phone numbers or SMS opt-in consent data will be shared with third parties or affiliates for marketing/promotional purposes
  • Mobile information may be shared only with sub-processors that assist in technical delivery of SMS (see Section 7)
  • Text messaging originator opt-in data and consent will not be shared with any third parties
  • Mobile information will not be sold under any circumstances
  • Your mobile number will be shared with a licensed mortgage partner only if you separately and expressly consent to mortgage communications

4.5 Telephone Calls and Email

With your express consent, we may contact you by telephone, including via autodialers or prerecorded voice messages. Consent to receive calls or texts is not a condition of purchasing any goods/services or qualifying for any product.

We may send transactional emails for account management. With separate consent, we may send marketing emails. You can unsubscribe via the link in a marketing email or by contacting [email protected].

5. Sharing Your Information

5.1 Information You Ask Us to Share

If you request to connect with a real estate agent, mortgage lender, property manager, or other professional, we share the contact information you provide on inquiry forms to facilitate that connection.

5.2 Service Providers and Sub-Processors

We use third-party service providers and sub-processors to operate and deliver the Services. They may use your information only as needed to perform services for us and must protect it contractually. See Section 7 for the list used with the Lofty-powered platform.

5.3 Legal and Compliance Disclosures

We may disclose information when required by law, subpoena, court order, or lawful governmental request, or to enforce our Terms, prevent fraud, address security threats, and protect rights, property, and safety.

5.4 Business Transfers

If we are involved in a merger, acquisition, restructuring, bankruptcy, or sale of assets, user personal information may be transferred. We will provide notice of any transfer that results in a material change to this Privacy Policy.

5.5 De-Identified and Aggregate Data

We may share aggregated, de-identified, or anonymized information that cannot reasonably identify you, without restriction.

5.6 AI Tools

We use internal and externally hosted software that employs AI techniques (machine learning, natural language processing, computer vision, chatbots, and virtual agents) (“AI Tools”) to augment certain functions. Your data may be processed by AI Tools operated by us or our sub-processors.

If you wish to opt out of processing by AI Tools, contact [email protected].

5.7 What We Never Do

  • We do not sell your personal information.
  • We do not share or sell mobile phone numbers, SMS opt-in data, or text messaging originator consent for marketing/promotional purposes.

6. Your Privacy Rights and Choices

6.1 Colorado Privacy Act (CPA)

Colorado residents have rights to access, correct, delete, obtain portability, and opt out of targeted advertising, sale of personal data, or profiling that produces legal or similarly significant effects.

To exercise these rights, contact [email protected]. We respond to verifiable requests within 45 days and do not discriminate for exercising rights.

6.2 California Residents (CCPA/CPRA)

California residents have additional rights to know, delete, opt out of the sale/sharing, correct inaccuracies, and limit use of sensitive personal information. To exercise rights or designate an authorized agent, contact [email protected].

6.3 General Opt-Out Rights

  • Opt out of marketing SMS by replying STOP, CANCEL, or UNSUBSCRIBE
  • Opt out of marketing emails by clicking unsubscribe or emailing [email protected]
  • Opt out of AI Tools processing by emailing [email protected]
  • Request deletion/correction of account info by contacting [email protected]

Opting out of marketing does not affect transactional, account-related, or legally required communications.

7. Sub-Processors

Our Services are delivered through the Lofty Inc. platform as a white-label solution. The sub-processors below may process personal data. All are located in the United States and are contractually required to protect personal data.

Sub-Processor Location Service Provided
Amazon Web Services (AWS) USA Infrastructure as a Service and Platform as a Service
Google Cloud Platform (GCP) USA Natural Language Understanding
OpenAI USA Generative AI
Vonage USA Cloud Communication Service Provider
Bandwidth USA Communication Platform for Messaging Service
Lob USA Automated Direct Mail and Postal Service Provider
MailParser USA Mail Parsing Service
Twilio USA Cloud Communication Service Provider (SMS/Voice)
Home Junction / Attom Data USA Listing Data Analysis
Lofty Inc. USA (Arizona) White-Label Real Estate CRM Platform Provider

This list is current as of the effective date of this Policy. We update it when sub-processors change. Questions? Contact [email protected].

8. Cookies and Tracking Technologies

We (and our partners) may use cookies, pixel tags, web beacons, and similar technologies to understand usage, improve features, personalize your experience, and deliver relevant advertising.

8.1 Types of Cookies We Use

  • Essential cookies: required for core functions (like login sessions)
  • Analytics cookies: measure usage (e.g., Google Analytics)
  • Advertising cookies: support targeted ads based on browsing behavior
  • Preference cookies: remember settings to personalize your experience

8.2 Third-Party Advertising

We may use remarketing services (including Google and Facebook). Vendors may use cookies to serve ads based on past visits. You can manage ad preferences through Google’s Ad Settings, Facebook’s Ad Preferences, or opt out via browser cookie settings or an opt-out plugin.

8.3 Managing Cookies

You can control cookies through your browser settings. Disabling certain cookies may affect functionality. For more details, review our Cookie Policy (incorporated by reference).

9. Data Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including SSL encryption in transit, access controls, and regular security assessments.

No system is 100% secure. You are responsible for keeping your credentials confidential and restricting access to your devices. If you suspect unauthorized access, contact [email protected].

If a breach triggers notification duties under applicable law, we will notify you as required.

10. Data Retention

We retain personal information only as long as needed for the purposes in this Policy, unless a longer period is required or permitted by law. When information is no longer needed, we delete or anonymize it. If you request deletion, we process it subject to legal retention obligations.

11. Children’s Privacy (COPPA)

Our Services are intended for individuals at least 18 years old. We do not knowingly collect personal information from individuals under 18. If we learn we collected personal information from a minor, we will delete it promptly. If you believe we may have collected such information, contact [email protected].

12. CAN-SPAM Act Compliance

We comply with the CAN-SPAM Act. Marketing emails include clear sender identification, a legitimate physical postal address, and an easy way to unsubscribe. We honor opt-out requests promptly.

To unsubscribe, use the link in any marketing email or contact [email protected]. We process unsubscribe requests within 10 business days.

13. United States Regional Privacy Notice

13.1 Colorado Privacy Act (CPA)

Colorado residents may submit rights requests to [email protected]. We respond within 45 days and may extend by an additional 45 days with notice. We do not charge a fee for the first request per year. If we deny a request, you may appeal by emailing [email protected] with the subject line “Privacy Rights Appeal.”

13.2 California (CCPA/CPRA)

California residents may exercise rights described above. We do not sell personal information as defined under CCPA/CPRA. To submit a verifiable request or designate an authorized agent, contact [email protected]. We will not discriminate for exercising rights.

13.3 Other U.S. State Privacy Laws

Residents of Virginia (VCDPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), and other states with enacted consumer privacy laws may have similar rights. We honor applicable rights requests from residents of all U.S. states with applicable privacy laws. Contact [email protected].

14. Canadian Privacy Notice (PIPEDA)

14.1 Consent

We collect, use, and disclose personal information in accordance with PIPEDA and applicable provincial laws. We do so with your consent (express or implied), depending on sensitivity and context. You may withdraw consent at any time by contacting [email protected], subject to legal/contractual restrictions. Withdrawing consent may limit our ability to provide certain Services.

14.2 Exceptions to Consent

  • Where collection is clearly in an individual’s interest and consent cannot be obtained in a timely manner
  • For fraud detection, investigation, and prevention
  • For business transactions (where legally permitted and conditions are met)
  • To comply with a subpoena, warrant, or court order
  • Where information is publicly available and specified by regulation
  • Where disclosure is required by applicable Canadian laws

14.3 Canadian Privacy Rights

Canadian users may request access to personal information we hold, request corrections, and withdraw consent for certain uses. Contact [email protected].

15. International Data Transfers

Our Services are operated and based in the United States. If you access the Services from Canada or another jurisdiction, your personal information will be transferred to and processed in the United States, where privacy laws may differ. By using the Services, you consent to this transfer and processing in accordance with this Policy.

16. Third-Party Links

Our Services may link to third-party websites, services, or apps not owned or controlled by Carbon Collective CRM LLC. This Policy does not apply to those third parties. Please review their privacy policies.

17. Updates to This Privacy Policy

We may update this Policy to reflect changes in practices, technology, legal requirements, or other factors. If changes are material, we will post the updated Policy with a revised “Last Updated” date and, where appropriate, notify you. Continued use of the Services after the effective date means you accept the updated Policy.

18. Contact Information

Carbon Collective CRM LLC
Address: 11304 W Grand Pl, Littleton, CO 80127
Phone: 720-961-2695
Email: [email protected]


For SMS opt-out requests, reply STOP, CANCEL, or UNSUBSCRIBE to any text message. For all other privacy requests, email [email protected] with “Privacy Request” in the subject line.

© 2026 Carbon Collective CRM LLC. All Rights Reserved.

CARBON COLLECTIVE | COPYRIGHT © 2026
PRIVACY POLICY | TERMS OF SERVICE