Last Updated: 11/19/2025

ARTICLE I. INTRODUCTION

​

1.0. Purpose and Scope

​

Nora is a voice- and text-based digital assistant designed for licensed real estate professionals and authorized staff of participating organizations in the United States. Nora connects to tools selected by the user—including, without limitation, email and calendar services, MLS platforms, CRM systems, lockbox providers, transaction management platforms, and other third-party applications—to assist with communication, scheduling, research, workflow automation, and task execution. Nora’s functionality may involve automated processing and machine-generated content, and may act on your behalf within the services you authorize.

​

1.1. Eligibility and Access

​

​Nora is offered only to users located in the United States and is not intended for individuals under 18. Nora accesses and interacts with connected services solely when you or your organization grant permission or configure those services.

​

1.2. Agreement

​

This Privacy Policy explains how Lundy Inc. (“Lundy,” “we,” “us,” or “our”) collects, uses, stores, and shares information when you use Nora. It applies both when we act as a service provider to organizations that deploy Nora for their users and when we act as a business for users who access Nora directly. By using Nora, you consent to the practices described in this Privacy Policy across all platforms and interfaces where Nora is available.

​

ARTICLE II. INFORMATION WE COLLECT

​We may collect the following categories of information to operate, provide, and improve Nora. These categories apply across all platforms, interfaces, integrations, and connected services authorized by you or your organization.

​

2.1. Information You Provide Directly

• Name, email address, phone number

• Professional and organizational affiliations

• Identity verification information

• Preferences and configuration settings

• Content you submit to Nora through voice or text

​

2.2. Information From Connected Services

When you or your organization connect third-party services to Nora, we may access information permitted through their APIs and your authorization, including:

​

• Email and calendar data

  • Email metadata and content, attachments

  • Scheduling details and calendar events

• CRM data

  • Leads, contacts, communication history

  • Preferences, tasks, notes, campaign activity

  • Behavioral history and contextual information

• MLS and real estate data

  • Listing data, showing instructions, agent rosters

  • Secure fields, analytics, and other MLS-provided data

• Transaction and document data

  • Transaction records and documents

  • File metadata and compliance materials

• Lockbox and access systems

  • Information from lockbox and property-access platforms

• Activity logs from connected services

  • Data available through authorized APIs that enables Nora to perform tasks

Nora may also process information about individuals contained within connected services (e.g., clients, leads, contacts) when necessary to fulfill your requests.

​

2.3. Information We Generate or Derive

​

• Summaries of interactions

• Memory items and context objects

• Inferred preferences and behavioral patterns

• Contact context and relationship mappings

• Task history and usage patterns

• System annotations and operational metadata

​

2.4. Information Collected Automatically

• Device type, operating system, app version

• IP address and coarse location

• Event logs, error logs, performance data

• Session activity, interaction metrics, clickstream data

• Telemetry for analytics, debugging, and quality assurance

​

2.5. Billing and Transaction Information

• Retainer balance information

• Transaction metadata

• Payment confirmations

  • (Payment processors store card numbers and other financial account data.)

​

2.6. Information Provided by Organizations

If your access is provisioned or managed by an MLS, brokerage, or other organization, we may receive:

• Account setup information

• Permissions and access configuration

• Organizational identifiers

• Integration settings necessary to enable the service

​

2.7. Other Information

We may collect other information you choose to provide or that is reasonably necessary for Nora to perform tasks, maintain context, and operate the service.

2.8. Exclusions and Updates

Personal information does not include de-identified or aggregated information that cannot reasonably be linked to an individual. We may update or expand the categories of information we collect as Nora evolves.

ARTICLE III. HOW WE USE INFORMATION

We use information for purposes reasonably necessary and proportionate to providing, operating, and improving Nora. These purposes include:

3.1. Providing and Personalizing the Service

• Operating the Nora assistant experience

• Personalizing responses and functionality

• Maintaining memory, summaries, and historical context

​

3.2. Performing Tasks and Workflows

• Executing instructions, workflows, automations, and communications

• Coordinating data across connected third-party services

• Taking actions on your behalf within authorized systems

​

3.3. Service Operation, Research, and Development

• Internal research, testing, troubleshooting, and development

• Improving performance, accuracy, reliability, and responsiveness

• Supporting new features, capabilities, and integrations

​

3.4. Analytics, Quality Assurance, and Security

• Monitoring usage patterns and optimizing performance

• Debugging, diagnostics, and quality assurance

• Detecting, preventing, and addressing security incidents and misuse

​

3.5. Model Improvement (Using De-Identified Data)

• Using de-identified or aggregated information to train, enhance, and improve algorithms, models, and features.

  • (As permitted under applicable law and without using identifiable data for model training.)

​

3.6. Billing and Financial Operations

• Managing retainer balances, auto-refill thresholds, and payment operations

• Coordinating with payment processors

​

3.7. Communications and Administration

• Sending service-related notifications, updates, and administrative messages

• Communicating changes to terms, policies, or functionality

​

3.8. Legal, Compliance, and Enforcement

• Complying with laws, regulations, and legal processes

• Enforcing terms, preventing misuse, and protecting the service

​

ARTICLE IV. AUTOMATED PROCESSING AND AI-GENERATED CONTENT

Nora uses automated systems, including machine learning models and algorithmic processing, to analyze information, generate responses, summarize content, perform tasks, and operate connected workflows. These processes may involve automated decision-making based on your instructions, your interactions with Nora, and information available through connected third-party services.

AI-generated content may be incorrect, incomplete, or inappropriate for a particular use. You are responsible for reviewing and verifying all outputs, including drafts of communications, scheduling actions, messages, summaries, or other generated content.

Nora’s automated processes are designed to assist with tasks and do not replace your professional judgment or responsibilities.

ARTICLE V. DATA RETENTION

We retain information for as long as reasonably necessary to operate, maintain, and improve the service; fulfill user requests; support ongoing workflows; comply with legal obligations; protect the service; and for other purposes described in this Privacy Policy. Retention periods may vary depending on the category of information and the context in which it is used. Retention criteria may include operational needs, security requirements, and legal considerations.

5.1. Service Operation & Ongoing Use

We retain information—including summaries, memory items, derived data, and context objects—as long as your account is active or as necessary to personalize the service and support future interactions.

5.2. User-Affected Deletion

Deleting data within a connected third-party service (such as email, calendar, CRM, or MLS systems) does not necessarily impact summaries or derived information already processed by Nora.

5.3. Derived or Generated Data

Information generated by Nora may be retained independently from original source content for service operation, personalization, and improvement.

5.4. Legal, Security, and Compliance

We may retain information longer as needed to:

• comply with legal, accounting, and regulatory obligations

• detect, investigate, or prevent security incidents

• protect against misuse and enforce terms

​

5.5. Backups and Stored Copies

Information stored in routine system backups may persist until overwritten in accordance with standard backup policies.

5.6. Organizational Accounts

Information associated with organizational provisioning may be retained as necessary for account management, access control, audit history, and service continuity.

5.7. Deletion Upon Account Closure

Upon account closure, we will revoke integration tokens and delete or anonymize information in accordance with the criteria above and applicable law. Certain information may still be retained for legal, security, or operational purposes.

​

​

​

​

​