Privacy Policy

Effective date: April 13, 2026  ·  Operator: James  ·  Contact: james@unspoiled.app

This Privacy Policy describes how the FIG Chrome Extension ("Extension", "we", "our") collects, uses, and stores information when you use it. By installing or using the Extension, you agree to the practices described here.

1. What the Extension Does

FIG is a private acquisitions CRM tool. The Extension allows authorized users to clip property listing data from real estate websites — such as LoopNet, Crexi, CoStar, and similar platforms — and save it directly into their CRM pipeline.

2. Information We Collect

Account credentials

• Your email address and password are used to authenticate you against our secure database. Passwords are never stored by the Extension — authentication is handled entirely by Supabase's auth service.
• Upon login, an access token (JWT) and refresh token are stored in chrome.storage.local on your device only. These tokens are used to authorize subsequent requests and are never shared with third parties.

Page content

• When you choose to extract data from a page, the Extension reads the visible text content of the active browser tab.
• This text is sent to our backend server solely to extract structured property fields (address, price, borrower name, etc.) using an AI model (Anthropic Claude). The text is not stored on our servers after the extraction response is returned.

Property record data

• Property details you choose to save — address, financial figures, status, notes, and similar fields — are stored in our Supabase-hosted database, scoped to your organization.
• This data is entered or confirmed by you and is associated with your account.

3. How We Use Your Information

• To authenticate you and authorize access to your organization's data.
• To extract and pre-fill property fields from page content, on your explicit request.
• To store and display property records within your CRM pipeline.

We do not use your information for advertising, analytics, or any purpose beyond providing the Extension's core functionality.

4. Data Sharing

We do not sell, rent, or share your personal information with any third parties, except as strictly necessary to operate the service:

• Supabase — database and authentication provider. Data is stored in your organization's isolated environment and governed by Row Level Security policies.
• Anthropic — AI provider used only for on-demand text extraction. Page text is transmitted to the Anthropic API solely to fulfill your extraction request and is subject to Anthropic's Privacy Policy.

5. Data Storage & Security

Auth tokens are stored locally in chrome.storage.local and are accessible only to the Extension. All communication between the Extension, our backend, and our database occurs over HTTPS. Access to database records is enforced server-side — users can only read and write data belonging to their organization.

6. Data Retention

Property records are retained in your account until you delete them. Auth tokens are removed from local storage when you log out. You may request deletion of all your personal data at any time by contacting us at the address below.

7. Your Rights

You may request to access, correct, or delete your personal data at any time. We will respond within a reasonable timeframe.

8. Children's Privacy

The Extension is intended for use by real estate and investment professionals and is not directed at anyone under the age of 18. We do not knowingly collect personal information from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page will reflect the most recent revision. Continued use of the Extension after any update constitutes your acceptance of the revised policy.

10. Contact