Privacy Policy
Buddy by OakOliver is a real estate operations and messaging automation platform operated by Oak Oliver LLC. It is used to manage lead follow-up, CRM synchronization, reminders, internal workflows, and communication across channels such as WhatsApp, Instagram, Facebook, email, and connected back-office systems.
1. Who operates Buddy by OakOliver
Buddy by OakOliver is operated by Oak Oliver LLC as a SaaS platform and consultancy service for real estate team operations. The service may support multiple agencies, brands, brokerages, and independent real estate companies. For privacy-related questions or requests, contact antonio@oakoliver.com.
2. Information we process
Depending on the workflows enabled, Buddy by OakOliver may process:
- Contact details such as name, phone number, email address, and social profile identifiers.
- Meta Platform Data connected by the client, including Facebook Page, Instagram, WhatsApp Business, lead, comment, and messaging workflow data where enabled.
- Message content exchanged through supported channels.
- Lead source, campaign, and CRM records linked to follow-up workflows.
- Operational metadata such as timestamps, delivery status, workflow runs, audit logs, and connector logs.
3. Why the data is used
We use this data only to operate the platform and provide the service requested by each client: responding to inbound messages, automating lead qualification and routing, synchronizing CRM records, scheduling reminders, generating operational dashboards, detecting failures, and maintaining platform security and reliability.
4. Service providers and recipients
Buddy by OakOliver discloses data only where necessary to provide a client-configured workflow. Meta Platforms supplies Page and Instagram data and receives authorised API actions such as subscriptions and replies. The service providers that may process Meta Platform Data for Buddy are:
- Hetzner Online GmbH, for production application and database infrastructure hosted in Germany.
- OpenAI OpCo, LLC and OpenAI Ireland Ltd., for AI-assisted classification or response generation when an authorised workflow enables those steps.
- Pipedrive OÜ, for CRM lead and activity synchronization when the client enables lead creation.
- Plus Five Five, Inc. (Resend), for transactional or operational email delivery when a notification workflow is configured to send limited lead or workflow information by email.
These providers process data under their own data-processing terms and may use documented sub-processors. Processing can occur outside Portugal or the European Economic Area, including in the United States and other locations disclosed by the provider, using applicable contractual and transfer safeguards. Connected client platforms such as Meta, WhatsApp, Google, and Pipedrive also remain subject to their own terms and privacy notices.
5. Data retention and deletion
Encrypted Page and Instagram access tokens are retained only while the corresponding tenant connection remains active. Buddy removes or revokes connection credentials when an authorised operator disconnects the account, when Meta sends a valid deauthorization request, or when a valid platform data-deletion request requires removal. The app then stops new processing for that connection.
Messages, comments, lead records, workflow state, delivery metadata, and audit records are retained only while needed to provide the configured service, preserve security and idempotency, investigate failures, meet a client agreement, or comply with law. A validated deletion request triggers deletion or anonymization where legally and technically possible; limited security, legal, or backup copies may remain until the relevant obligation or normal backup lifecycle ends. Buddy does not sell Meta Platform Data or use it to train a general-purpose AI model.
6. Security
We use tenant-scoped access controls, encrypted credential storage, HTTPS transport, audit logging, and environment-level protections to reduce the risk of unauthorized access. Customer Page and Instagram tokens are encrypted at rest and are never displayed again after storage. No system can guarantee absolute security, but reasonable technical and organizational measures are used.
7. Data sharing
We do not sell personal data or Meta Platform Data. Data is shared only when necessary to provide the service, execute an authorised client workflow, comply with law, protect rights and security, or use the service providers identified above under appropriate operational controls.
8. Your rights
Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, port, or object to processing of your personal data. You may also request information about data processed in relation to your interactions with the platform. Instructions are available at /data-deletion.
9. Contact
For privacy or data protection requests, contact Oak Oliver LLC at antonio@oakoliver.com.