Privacy Policy

1. Who we are

Vremly (“Vremly,” “we,” “us,” or “our”) is a software platform for booking, dispatching, and delivering real estate media. Vremly is a trade name of 2817230 Alberta Ltd., a corporation registered in the Province of Alberta, Canada.

We are the organization responsible for the personal information under our control. This policy applies to information we handle through our website, web application, and related services (together, the “Services”).

2. Scope of this policy

This policy governs personal information collected through the Services. It does not apply to third-party websites, products, or services that we do not operate, even where they link to or from the Services. We encourage you to review the privacy practices of any third party before providing them with your information.

3. Information we collect

We collect the following categories of personal information:

Information you provide to us

• Account and profile information — such as your name, business name, email address, phone number, role, and account credentials.
• Booking and operational data — details of orders, appointments, property addresses, service selections, schedules, assignments, and communications you enter into the Services.
• Content you upload — media, files, notes, and other materials you submit in connection with a job or your account.
• Support and inquiry information — information you provide when you contact us, request early access, or respond to surveys.

Information we collect automatically

• Usage and device data — such as IP address, browser type, device identifiers, pages viewed, referring pages, and the dates and times of your interactions.
• Cookies and similar technologies — as described in the “Cookies” section below.
• Location information (technicians and crew) — when a technician starts a job in the Vremly app, we record location while that job is in progress: the device’s coordinates and direction of travel, the accuracy reported by the device, the starting point of the trip, the times at which each stage of the job began and ended, and the driving distance calculated for the route. We use this to show the customer that a technician is on the way, to dispatch and route work, to calculate travel pay and mileage, and to record whether an arrival was on time, which contributes to a technician’s reliability record with their organization. The starting point of a trip can reveal a technician’s home, so it is never included in information sent to a customer. Location is not collected from agents or customers, and is not collected outside an active job.
• Session recording in the application — the Vremly application uses Microsoft Clarity and Sentry to record how application pages are used: clicks, scrolling, and page layout. Text is masked, and sign-in, password and payment pages are excluded. Organizations can turn session recording off for their workspace in settings. The public marketing website does not run session recording. It uses Vercel Web Analytics for aggregate website usage without analytics cookies.

Information we receive from third parties

• Integrations you enable — where you connect a calendar, payment processor, or other service, we receive information from that provider as needed to deliver the feature you requested.
• Service providers — such as analytics and infrastructure providers that help us operate the Services.

We do not intentionally collect sensitive personal information (such as government identifiers or financial account numbers) except where it is necessary to provide a feature you have requested and is handled by an appropriate third-party provider.

4. How we use your information

We use personal information to:

• provide, operate, maintain, and secure the Services;
• create and manage accounts, and authenticate and authorize users;
• process bookings, dispatch jobs, coordinate delivery, and enable the features you use;
• communicate with you about your account, transactions, updates, and support requests;
• send you early-access, product, or marketing communications where you have consented, from which you may unsubscribe at any time;
• understand how the Services are used so we can improve and develop new features;
• detect, prevent, and respond to fraud, abuse, security incidents, and technical issues; and
• comply with legal obligations and enforce our agreements.

AI search and AI answers

Vremly’s AI search answers questions you type in the app. When you ask, your question is sent to Anthropic, our AI provider, to write the answer.

Answers from your Vremly data. If you agree once, AI search can also answer from the information your account can already see in Vremly, such as your orders, listings, shoots, jobs, quotes, invoices and customers. For each answer, the parts of that information it reads are sent to Anthropic to write that answer. AI search only reads: it never changes, books, sends or pays for anything. If you use a Vremly workspace that someone else owns, such as your employer’s, your team’s or a business you work for, that workspace’s owner decides whether AI search can use its information. Where they allow it, this can include information about customers that your account can see. You can turn AI search, or its use of your data, off at any time in Settings.

Answers about your home. If you agree for a home, answers about it can also use that home’s recorded equipment and installation years, open maintenance tasks and work done in the last two years; your address, documents, notes and costs are never shared. You can withdraw that agreement for a home at any time.

Your saved questions and answers are kept until you delete them or your account.

5. Consent and legal basis

We collect, use, and disclose personal information with your consent, or as otherwise permitted or required by applicable law, including Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta’s Personal Information Protection Act (PIPA). Consent may be express or implied depending on the sensitivity of the information and the circumstances. You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting us using the details below; withdrawing consent may limit our ability to provide parts of the Services.

Consent to marketing and product email

We send marketing and product email where you have consented or another lawful basis permits it under Canada’s Anti-Spam Legislation (CASL). Providing an email address or booking a demo does not by itself give us permission to send marketing text messages.

You can withdraw that consent at any time and it costs you nothing else: every marketing email we send carries an unsubscribe link, and using it takes effect immediately rather than within the ten business days the legislation allows. You can also email support@vremly.com and we will remove you by hand. Unsubscribing from marketing email does not stop messages we have to send you about your own account, bookings, deliveries, or invoices — those are part of providing the Services, not marketing, and they continue for as long as you have an account with us.

SMS consent and preferences

Vremly offers text messages about requested demos and appointments, including demo confirmations, reminders, and follow-up texts. With your separate marketing SMS consent, we may also send automated marketing texts, including product updates and offers. We request SMS permission through optional consent choices on our booking form. Consent is not a condition of booking a demo or making a purchase. Giving us a phone number alone does not constitute SMS consent.

We keep the consent information submitted with your request so we can honor your messaging choices. Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe from texts or HELP for help, or contact support@vremly.com. See our SMS terms for details.

6. Cookies and similar technologies

We and our service providers use cookies and similar technologies to keep you signed in, remember your preferences, secure the Services, and measure and improve performance. You can control cookies through your browser settings; disabling some cookies may affect how the Services function.

7. Google account and calendar data

Connecting Google is optional. Vremly uses Google account information for sign-in and connected-calendar features you choose to enable. The Google consent screen shows the permissions requested for that connection. You can use other Vremly features without connecting a Google Calendar.

What we access and why

• Google sign-in information: when you sign in with Google, we receive your email address, name, and email-verification information to authenticate you and create or link your Vremly account. Vremly does not receive your Google password.
• Calendar connection information: we store the connected account email, calendar identifier and label, granted permissions, authorization tokens, token expiry, connection status, and synchronization metadata so the calendar can remain connected. Refresh tokens allow the connection to work when you are not actively using Vremly.
• Availability: our direct Google Calendar connection uses the calendar.events.freebusy permission to obtain busy start and end times for the connected calendar. We use those intervals to check availability, avoid scheduling conflicts, and show authorized team members when work can be assigned. This availability request does not retrieve the titles, descriptions, attendees, or locations of your unrelated Google Calendar events.
• Assigned-shoot synchronization: where event writing is enabled and you grant calendar.events.owned (or have an existing calendar.events grant), Vremly creates, updates, and deletes the shoot events it manages on your connected calendar as your assignments are booked, rescheduled, or cancelled. These events can include the shoot title, property location, job details, times, time zone, and a link to the Vremly job. We retain the Google event identifiers and sync status to keep the correct events updated. This feature does not use unrelated personal events as job content or edit them as part of shoot synchronization.

If you connect a calendar through a separate calendar-connection service offered in Vremly, that service also processes the calendar information authorized on its connection screen. Review that service’s consent notice. The availability and scheduling information is used for the connected-calendar feature, not for advertising.

Use, sharing, and human access

Google account and calendar data is used to provide the sign-in, availability, and calendar-sync features described above. Busy times can affect the availability shown to authorized schedulers; this does not give customers access to the contents of your personal calendar. Vremly sends the job information needed for shoot synchronization to Google. Our hosting and infrastructure providers process connection information on our behalf to operate these features, and a calendar connection service you choose processes the information required for that connection. We do not sell Google user data, share it with data brokers, or use it for advertising, credit decisions, or lending.

Google Workspace API data is not used to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models. The property-copy and image-editing services described elsewhere in this policy do not change that restriction. Human access to Google user data is limited to your specific affirmative permission, necessary security investigations, legal obligations, or internal operations on aggregated, anonymized data as permitted by Google’s Limited Use requirements. The broader uses described elsewhere in this policy do not override these Google-specific limits.

Vremly’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and protection

Google authorization tokens are encrypted before storage using AES-256-GCM and are handled by our backend rather than published to other users. Connections to Google use HTTPS. Access to connection records is restricted to the account and authorized service operations; scheduling views are subject to organization and role permissions. Google data is processed using the infrastructure and international service-provider arrangements described below.

Retention, disconnection, and deletion

We keep calendar connection credentials and configuration while needed for your connection, and synchronization references while needed to manage the shoot events. Availability responses are used to calculate scheduling availability. Disconnecting the direct Google Calendar connection in Vremly’s calendar settings deletes its stored connection record, including its access and refresh tokens, and stops ongoing synchronization. Before disconnecting, Vremly attempts to remove the shoot events it created; if Google cannot be reached or access has already been revoked, some events may remain in your Google Calendar and you can remove them there.

You can also revoke Vremly’s permission from your Google Account connections. Revoking access does not delete your Vremly account or its ordinary job records. To request deletion of retained Google connection data or your account information, contact our Privacy Officer at support@vremly.com. We may verify your identity before acting. Limited synchronization diagnostics, records required for security or legal obligations, and backups may remain subject to the retention purposes in section 10; disconnecting is not a promise that every backup or job record is immediately erased. Retained information remains subject to this policy and the Google-specific restrictions above.

8. How we share and disclose information

We do not sell your personal information. We disclose it only as described below:

• Within the Services — to enable collaboration you initiate, such as sharing booking or job details between an agent, a media company, and an assigned provider.
• Service providers — with vendors who process information on our behalf (for example, hosting, analytics, email delivery, and payment processing) under contracts that require them to protect it and use it only for the purposes we specify.
• Legal and safety — where required by law, legal process, or a governmental request, or to protect the rights, property, or safety of Vremly, our users, or others.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to the protections of this policy.
• With your direction — where you otherwise instruct or consent to the disclosure.

Mobile information and SMS consent

We do not sell or share mobile phone numbers or SMS opt-in information with third parties or affiliates for their marketing or promotional purposes. SMS consent is not transferable to other brands. We may share mobile information with service providers only as needed to deliver messages and operate the messaging service on our behalf. All other sharing described in this policy excludes SMS opt-in data and consent from third-party marketing use.

9. Storage and international transfer

Vremly is operated from Alberta, Canada. Some of the service providers we rely on store or process personal information outside Canada — in the United States and the United Kingdom. Where information is processed outside your province or country it may be subject to the laws of those jurisdictions, including lawful access by courts, law enforcement and other authorities. Each provider below is authorized to use the information only for the purpose listed.

You can request the written information described in section 6(2) of Alberta’s Personal Information Protection Act about how we use service providers outside Canada, and ask questions about that processing, by emailing our Privacy Officer at support@vremly.com.

10. How long we keep information

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, to provide the Services, to comply with our legal, accounting, or reporting obligations, and to resolve disputes and enforce our agreements. When information is no longer needed, we take reasonable steps to securely delete or anonymize it.

11. How we protect information

We maintain administrative, technical, and physical safeguards designed to protect personal information against loss, theft, and unauthorized access, disclosure, copying, use, or modification, appropriate to the sensitivity of the information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a security breach that poses a real risk of significant harm, we will notify affected individuals and applicable authorities as required by law.

12. Your rights and choices

Subject to applicable law, you have the right to:

• Access the personal information we hold about you and request information about how it has been used and disclosed;
• Correct information that is inaccurate or incomplete;
• Withdraw consent to our collection, use, or disclosure of your information, subject to legal or contractual restrictions;
• Unsubscribe from marketing communications using the link in those messages or by contacting us; and
• Complain to us or to the applicable privacy regulator.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before responding, and we will respond within the timeframes required by law.

13. Children’s privacy

The Services are intended for business users and are not directed to individuals under the age of majority in their jurisdiction. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

14. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Services after an update takes effect constitutes acceptance of the revised policy.

15. How to contact us

If you have questions about this policy, wish to exercise your rights, or want to make a privacy complaint, please contact our Privacy Officer at support@vremly.com. If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.