Privacy Policy

Last updated: June 25, 2026 · Version 1.0

This Privacy Policy describes how KMF Commercial Real Estate ("KMFCRE", "we", "us", or "our") collects, uses, shares, and protects information when you visit kmfcre.com or use the KMFCRE platform, tools, and services (collectively, the "Platform"). By using the Platform, you consent to the practices described in this Policy. If you do not agree, please do not use the Platform.

1. Information We Collect

We collect the following categories of information:

  • Account & contact information you provide when you sign up, such as name, email address, phone number, business name, mailing address, team affiliation, role, and login credentials.
  • Subscription & billing information, including plan selection, billing address, last four digits of payment cards, and transaction history. Full payment-card details are collected and processed by our payment processor (Stripe) and are not stored on our servers.
  • User-submitted content, including leads, contacts, notes, property addresses, photos, messages, email signatures, CRM records, and any other content you upload, generate, or enter into the Platform.
  • Usage & device data, including IP address, browser type, device identifiers, pages visited, features used, timestamps, referring URLs, and similar diagnostic information collected automatically through cookies, server logs, and similar technologies.
  • Communications data, including emails, SMS messages, support tickets, and call records sent through or to the Platform.
  • Acknowledgement records, including the date, time, IP address, and user agent associated with your acceptance of these policies and any in-product disclaimers.
  • Third-party data, including property and contact data sourced from integrated providers, which may be combined with your records when you use Platform features.

2. How We Use Information

We use information to:

  • provide, operate, maintain, secure, and improve the Platform;
  • process subscriptions, billing, and usage-based charges;
  • authenticate users and prevent fraud or abuse;
  • deliver, route, and log communications you send via the Platform;
  • generate, personalize, and improve AI-assisted features;
  • provide customer support and respond to inquiries;
  • comply with legal obligations, enforce our Terms, and protect our rights and the rights of others;
  • send transactional and service-related emails, and (where permitted) product updates and marketing communications.

3. How We Share Information

We share information only as described below:

  • Service providers / subprocessors: with vendors that help us run the Platform, including cloud hosting, database, email and SMS delivery, payment processing, analytics, AI providers, mapping and property-data providers, and customer-support tools. These providers process information on our behalf under written agreements that restrict their use of the information.
  • Your team: if you join a team or workspace, the team administrator and other authorized team members may have access to information you create or receive within that team's workspace, including leads, contacts, messages, and acknowledgement records.
  • Legal & safety: when required by law, subpoena, or other legal process, or when we believe in good faith that disclosure is necessary to protect our rights, your safety or the safety of others, investigate fraud, or respond to a government request.
  • Business transfers: in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, subject to customary confidentiality protections.

We do not sell your personal information for monetary consideration.

4. Cookies and Similar Technologies

We use cookies, local storage, and similar technologies to keep you signed in, remember preferences, secure the Platform, and understand how features are used. You can control cookies through your browser settings, but some Platform features will not work without them.

5. Data Retention

We retain information for as long as your account is active, as needed to provide the Platform, and as required to comply with our legal obligations, resolve disputes, and enforce our agreements. When you delete content or close your account, we will delete or de-identify the related information on a reasonable schedule, except where we are required to retain it for legal, tax, audit, or security purposes.

6. Security

We implement administrative, technical, and physical safeguards designed to protect information, including row-level access controls, encryption in transit, secret management, and least-privilege access. No system is perfectly secure, and we cannot guarantee absolute security of information transmitted to or stored on the Platform.

7. Your U.S. Privacy Rights

Depending on where you live, you may have rights regarding your personal information under state laws such as the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), the Utah Consumer Privacy Act (UCPA), and similar laws. Subject to applicable law and verification of your identity, these rights may include:

  • the right to know or access the personal information we hold about you;
  • the right to correct inaccurate personal information;
  • the right to delete personal information, subject to applicable exceptions;
  • the right to opt out of "sales" or "sharing" of personal information for cross-context behavioral advertising (we do not engage in either);
  • the right to limit use of sensitive personal information;
  • the right to non-discrimination for exercising your privacy rights.

To exercise these rights, email us at info@kmfcre.com from the email associated with your account. We may need to verify your identity before fulfilling the request. You may also authorize an agent to act on your behalf, subject to verification.

8. Children's Privacy

The Platform is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

9. Do Not Track

Our Platform does not currently respond to browser "Do Not Track" signals because no common industry standard for DNT has been adopted.

10. International Users

The Platform is operated from the United States and is intended for U.S. users. Information you submit is processed in the United States, which may have data protection laws different from those in your country.

11. Third-Party Links and Services

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. Their collection and use of information are governed by their own privacy policies.

12. Communications

We may send you transactional and service-related messages (such as account, billing, security, and support communications), which you cannot opt out of while your account is active. Marketing emails include an unsubscribe link. SMS messages you send through the Platform are subject to TCPA and other applicable laws; you are responsible for obtaining required consents before contacting consumers.

13. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date and, where appropriate, ask you to re-acknowledge the updated Policy before continuing to use the Platform.

14. Contact

Questions or requests about this Privacy Policy? Contact us at info@kmfcre.com.