Legal

Privacy Policy

Effective date: April 30, 2026

Last updated: April 30, 2026

This Privacy Policy explains how Crawford Commercial Real Estate, LLC (“Crawford,” “Crawford Commercial,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards personal information when you visit crawford.team, use the Crawford Commercial platform, or otherwise interact with us. It also describes the rights available to residents of California, Virginia, Colorado, Connecticut, Utah, New York, and other U.S. states with comprehensive privacy laws.

1. Who we are and how to reach us

Crawford Commercial Real Estate, LLC
7975 N Hayden Rd, Suite C-100
Scottsdale, AZ 85258
United States

Privacy contact: privacy@crawford.team
General inquiries: support@crawford.team

For privacy requests, including access, deletion, correction, and opt-out of sale or sharing, please email privacy@crawford.team or use our Do Not Sell or Share My Personal Information page.

2. Categories of personal information we collect

We collect the following categories of personal information, as defined under the California Consumer Privacy Act (“CCPA”), the California Privacy Rights Act (“CPRA”), and analogous state laws.

2.1 Identifiers

Examples: name, postal address, email address, telephone number, IP address, device identifier, online identifier, account login.

  • Source: directly from you when you submit a form, create an account, or contact us; automatically from your browser and device when you visit the site; from licensing rosters published by state real-estate commissions and from commercial data providers when we build outreach lists.
  • Purpose: account creation, marketing communications, customer support, fraud prevention, legal compliance, audit logging.
  • Retention: for the life of your account plus 24 months from your last engagement, or longer if required to resolve disputes, enforce agreements, or comply with law.
  • Third-party sharing: our authentication provider (Clerk), CRM platform, email-delivery providers, analytics providers (PostHog), payment processor (Stripe).

2.2 Commercial information

Examples: page views, clicks, search queries on the platform, properties viewed, deal-analyzer inputs, subscription tier, payment history.

  • Source: automatically from your interactions with the platform.
  • Purpose: service delivery, product improvement, billing, fraud prevention, generating aggregated market data.
  • Retention: 36 months from collection or for as long as your account remains active, whichever is longer.
  • Third-party sharing: Stripe (billing), PostHog (analytics), Sentry (error reporting).

2.3 Inferences

Examples: engagement scoring, predicted intent (e.g., likelihood of becoming a paying user), property-fit scoring.

  • Source: derived from the identifiers and commercial information above.
  • Purpose: internal product analytics, marketing segmentation, and personalization. We do not use these inferences to make decisions that produce legal or similarly significant effects on you.
  • Retention: regenerated on a rolling basis; underlying source data follows the retention rules above.
  • Third-party sharing: not shared outside of Crawford.

2.4 Professional information

Examples: real-estate license number, license state, license status, brokerage affiliation, MLS membership, designations (e.g., CCIM, SIOR), years of experience.

  • Source: publicly available state real-estate commission rosters, NAR membership directories, MLS rosters, and information you provide directly.
  • Purpose: qualifying outreach (commercial real estate professionals only), tailoring product features, license verification.
  • Retention: 24 months from last engagement; on request, removed within 10 business days for unsubscribed contacts and for verifiable consumer requests within 45 days as required by CCPA.
  • Third-party sharing: our CRM and email-delivery providers; not sold to third-party data brokers.

3. Cookies and tracking technologies

We use cookies, pixels, local storage, and similar technologies in four categories:

  • Strictly necessary. Required for the site to function. Examples: authentication session, CSRF protection, load-balancer affinity, cookie-banner state.
  • Functional. Remember your preferences (e.g., theme, saved searches). Examples: localStorage entries for UI state, recent-property cache.
  • Analytics. Help us understand product usage in aggregate. Examples: PostHog product analytics, Sentry error tracing.
  • Advertising. Used to measure or target ad campaigns. Examples (when active): Meta Pixel, LinkedIn Insight Tag, Google Ads remarketing tag.

Non-essential cookies (analytics and advertising) load only after you give consent through our cookie banner, and only after we have checked for and honored a Global Privacy Control (“GPC”) browser signal. We do not currently use session-replay or heatmap tools; if we add them, we will update this policy and require fresh consent before deployment.

4. Do Not Sell or Share My Personal Information

Crawford Commercial does not sell personal information for monetary consideration. However, our use of advertising cookies and cross-context behavioral advertising tags (e.g., Meta Pixel, LinkedIn Insight Tag, Google Ads remarketing) may constitute a “sale” or “share” under the CCPA / CPRA and similar laws.

You can opt out of this sharing at any time:

Once you opt out, we will not share your personal information for cross-context behavioral advertising. We propagate your opt-out within 24 hours and confirm by email.

5. Your privacy rights (California, Virginia, Colorado, and similar states)

If you are a California resident, you have the right to:

  • Know / Access. Request the categories and specific pieces of personal information we have collected about you in the past 12 months (or, on request, since you began using the service).
  • Delete. Request deletion of personal information we hold about you, subject to limited exceptions (e.g., to comply with law, complete a transaction, detect security incidents).
  • Correct. Request correction of inaccurate personal information.
  • Opt out of sale or sharing. See Section 4 above.
  • Limit use of sensitive personal information. We do not currently use sensitive personal information beyond what is necessary to provide the requested service. To restrict permissible uses, contact us.
  • Non-discrimination. We will not deny goods or services, charge different prices, or provide a different level of quality because you exercised a privacy right.

How to submit a verifiable consumer request. Email privacy@crawford.team with your full name, email address on file, and a description of the request. We may ask for additional information to verify your identity. We respond within 45 days; the deadline may be extended once by an additional 45 days with notice to you.

Authorized agents. You may designate an agent to submit a request on your behalf. We will require a signed permission from you and may verify your identity directly.

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive consumer-privacy laws have substantially similar rights. The same submission process applies.

6. Do Not Track (DNT) signals

Our site does not respond to browser-issued Do Not Track (“DNT”) signals because no industry-standard interpretation has been finalized. We do honor the Global Privacy Control (“GPC”) signal as a Do Not Sell or Share opt-out request, as required by California regulations.

7. Visitors from the European Union, United Kingdom, and Switzerland

Crawford Commercial is operated from the United States and is not directed at residents of the European Economic Area, United Kingdom, or Switzerland. If you are an EU/UK/Swiss resident and choose to access the service, you do so on your own initiative.

For any personal data we may receive from EU/UK/Swiss residents, we provide the following rights summary, which mirrors GDPR Articles 15–22:

  • Right of access (Art. 15)
  • Right to rectification (Art. 16)
  • Right to erasure (“right to be forgotten”) (Art. 17)
  • Right to restriction of processing (Art. 18)
  • Right to data portability (Art. 20)
  • Right to object (Art. 21)
  • Right not to be subject to solely automated decision-making (Art. 22)

To exercise these rights, email privacy@crawford.team. We respond within 30 days.

8. Data security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction, consistent with the New York Stop Hacks and Improve Electronic Data Security (“SHIELD”) Act, the Massachusetts Standards for the Protection of Personal Information of Residents of the Commonwealth (201 C.M.R. 17.00), and the CCPA.

Specific safeguards include:

  • Encryption in transit. All connections to the site and platform use TLS 1.2 or higher.
  • Encryption at rest. Stored personal information uses AES-256 or equivalent encryption.
  • Access controls. Role-based access; principle of least privilege; multi-factor authentication required for administrative access.
  • Logging and monitoring. Centralized audit logging of access to systems holding personal information; automated alerting on anomalous access patterns.
  • Vendor management. Sub-processors are reviewed for data-protection practices and bound by data-processing agreements.
  • Incident response. Documented breach-response plan; notification to affected individuals and regulators within the time frames required by applicable law (e.g., the SHIELD Act’s “most expedient time possible” standard).

No method of transmission or storage is completely secure; we cannot guarantee absolute security.

9. Children

Crawford Commercial is a business-to-business platform intended for licensed real-estate professionals and is not directed to anyone under the age of 16. We do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has provided us with personal information, contact privacy@crawford.team and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. The “Effective date” and “Last updated” shown at the top of this page reflect the most recent revision. Material changes — for example, expansions in the categories of personal information collected, new categories of recipients, or changes to your rights — will be communicated by email (to account holders) and through a banner on the site for at least 30 days.

11. Contact for privacy requests

All privacy requests, complaints, or questions:

Email: privacy@crawford.team
Postal: Crawford Commercial Real Estate, LLC, Attn: Privacy Officer, 7975 N Hayden Rd, Suite C-100, Scottsdale, AZ 85258, United States

12. State-specific notices

Nevada residents: Nevada law (NRS 603A.340) gives Nevada residents the right to direct a business not to sell certain covered information. To exercise this right, email privacy@crawford.team.

Vermont residents: 9 V.S.A. § 2447 establishes a data-broker registration regime. Crawford does not act as a data broker as defined under Vermont law and does not sell licensee information.

California residents (Shine the Light, Cal. Civ. Code § 1798.83): California residents may request information about disclosures of personal information to third parties for direct-marketing purposes. To make such a request, email privacy@crawford.team with the subject “Shine the Light Request.”


This Privacy Policy was last reviewed by counsel on April 30, 2026. Crawford Commercial Real Estate, LLC is the controller of personal information collected through crawford.team.