We collect information you provide directly to us, including your name, email address, phone number, and any other information you choose to provide when using our service.
We use Google OAuth 2.0 for secure authentication. When you sign in with Google, we collect your email address and name from your Google account. This data is used solely to create and manage your Take Root eXp account, and to provide our services to you.
We do not sell, rent, or transfer your Google user data to third parties, including advertising platforms, data brokers, or information resellers. Your Google data is not used for advertising, retargeting, personalized ads, credit decisioning, or any purpose other than providing and improving our service.
We use the information we collect to provide, maintain, and improve our services, communicate with you, and monitor and analyze trends and usage. By signing up for our service, you consent to receive email communications from us, including newsletters, updates, training resources, and other information related to eXp and Take Root eXp services. You may opt out of these communications at any time.
We only request and use the minimum data necessary to provide the features you have chosen to use. We will not use your data for purposes beyond those disclosed in this privacy policy without notifying you and obtaining your consent.
We do not sell, rent, or transfer your personal information to third parties. We do not share your data with advertising platforms, data brokers, or information resellers.
We may share your information only as necessary to provide our services (such as with our secure hosting infrastructure), comply with legal obligations, or protect our rights. Any service providers we use are contractually bound to protect your data and use it only for the purposes we specify.
We implement industry-standard security measures to protect your personal information. All user data, including information obtained through Google OAuth, is encrypted in transit using HTTPS and encrypted at rest in our database. We use appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction.
Our employees and contractors do not access your personal data unless you grant explicit permission for specific support requests, or access is required for security purposes, legal compliance, or preventing fraud.
We retain your personal information, including data obtained through Google OAuth, for as long as your account is active or as needed to provide our services. If you wish to delete your account and associated data, please contact us through our support channels. Upon receiving a deletion request, your data will be permanently removed from our systems within 30 days.
When you revoke access to your Google account or delete your account with us, we will delete all associated Google user data from our systems in accordance with our data retention policies.
You have the right to access, correct, or delete your personal information. You may also object to or restrict certain processing of your information.
We use cookies and similar technologies to operate and provide our services, including authentication and security purposes.
We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page.
If you have any questions about this privacy policy, please contact us through our support channels.
Last updated: January 15, 2026