TED SysOps Privacy Policy
Effective date: September 23, 2026
TED SysOps ("TED," "we," "us," or "our") builds deal management software for real estate investment and wholesale teams. This Privacy Policy explains what information we collect when you and your organization use TED, how we use it, who we share it with, and the choices you have.
By creating an account or otherwise using TED, you agree to the collection and use of information as described in this policy. If you don't agree, please don't use the service.
1. Information we collect
Account information. When you or your organization sign up, we collect your name, email address, password (stored as a salted hash, never in plain text), and billing details processed through our payment provider, Stripe.
Organization and team data. TED is multi-tenant: each customer belongs to an organization ("team"), and everything you enter is scoped to that organization. We collect the roles, permissions, and settings your organization configures.
Deal, contact, and customer data you enter. The core of the product is data you and your teammates put into it: deals, contracts, leads, properties, contacts, companies, commissions, expenses, notes, custom fields, and files you upload. This is your data — see Section 8 ("Your data, your ownership") for how we treat it.
Connected account data (email and calendar). If you connect a work email account through our email integration (Nylas), we access only what's needed to send email and manage calendar events on your behalf, and to store a copy of messages you send through TED. We do not currently read or sync messages already in your inbox. See Section 4 ("Google API Services User Data disclosure") for how this applies specifically to Google accounts.
Connected phone/SMS provider data. If your organization connects a phone system (such as smrtPhone or Dialpad) to place calls or send texts from TED, we store call/message metadata (numbers, timestamps, duration, status) needed to log that activity against your deals and contacts. Call recordings and message content, where applicable, are handled per your phone provider's own terms and retention settings.
Connected chat integrations. If your organization installs our Slack app, we store the workspace connection and the mapping between your TED account and your Slack identity so you can ask TED questions from Slack. We do not read Slack messages outside of ones directed at TED.
Usage and device information. We collect standard technical information: IP address, browser and device type, pages visited, and actions taken in the app, so we can operate, secure, and improve the service.
Cookies. We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the product is used. We do not use cookies for third-party advertising.
Support and help communications. If you contact support, use the in-app "Report a problem" tool, or chat with our support assistant, we collect what you send us — including, for bug reports, an automatically captured snapshot of the page URL, browser, and recent console/network activity to help us diagnose the issue.
2. How we use your information
We use the information we collect to:
- Provide, operate, and maintain TED, including your dashboards, deal pipeline, Automators, and financial calculations;
- Authenticate you and enforce your organization's permissions;
- Process subscription billing through Stripe, including trials, upgrades, downgrades, and the refund guarantee described in our Terms of Service;
- Send transactional email (invitations, password resets, notifications) through our email provider, Resend;
- Power optional product features you or your organization turn on, such as address autocomplete (Google Places), connected email/calendar (Nylas), Slack notifications, and phone/SMS logging;
- Respond to support requests and improve the help center based on what people ask;
- Detect, investigate, and prevent fraud, abuse, and security incidents;
- Improve and develop new features, using aggregated or de-identified usage data where practical.
We do not use your deal, contact, or customer data to train third-party AI models, and we do not sell your personal information.
3. AI processing disclosure — Ask TED
TED includes an AI assistant ("Ask TED") that can answer questions about your deals, draft communications, and help build Automators. When you use Ask TED, the relevant portion of your organization's data (the deals, contacts, or records your question touches) is sent to our AI model provider, Anthropic, to generate a response. This happens only when you or a teammate actively starts a conversation or triggers an AI-assisted action — Ask TED does not run in the background on your data without a prompt.
Anthropic processes this data under its own API terms and does not use data submitted through their API to train their models. We retain conversation history and AI usage records (including credit consumption) as part of your account, governed by the same retention and deletion rules as the rest of your data (Section 7).
Some automated platform functions — such as our support chat's first-pass AI answering and scheduled internal jobs — also call the same AI provider without a live user prompt; these are operational uses covered by this policy, not billed to your organization's AI credits.
4. Google API Services User Data disclosure
TED's use and transfer of information received from Google APIs (through our email/calendar integration, Nylas, and our address autocomplete feature, Google Places) adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically: information we receive from your connected Google account is used only to send email and manage calendar events you initiate through TED, and to autocomplete property addresses you're already typing. We do not use this data for advertising, do not sell it, do not allow humans to read it except as necessary for security, legal compliance, or with your explicit consent, and do not transfer it to any third party except as described in this policy or as necessary to provide the connected feature itself.
5. Sub-processors and service providers
We rely on a small number of vendors to run TED. Each is bound by a contract or terms limiting their use of your data to providing the service to us.
| Category | Vendor(s) | Purpose |
|---|---|---|
| Hosting & infrastructure | Vercel | Hosts the web application |
| Database, authentication & file storage | Supabase (PostgreSQL, Auth, Storage) | Stores your account, deal, and file data; enforces per-organization data isolation |
| Payments & billing | Stripe | Processes subscription payments and stores payment method details (TED never stores full card numbers) |
| Transactional email | Resend | Sends invitations, password resets, and notifications |
| Connected email & calendar | Nylas | Relays send-email and calendar requests to Google/Microsoft on your behalf |
| Phone & SMS | smrtPhone, Dialpad (whichever your organization connects) | Places calls and sends texts you initiate from TED |
| Team chat | Slack | Delivers notifications and answers Ask TED questions inside Slack, if your organization installs our app |
| AI assistant | Anthropic | Powers Ask TED and platform AI features (Section 3) |
| Address autocomplete | Google Places API | Suggests property addresses as you type |
| Error/bug diagnostics | Our own "Report a problem" tool | Captures browser/console context you submit, stored in our own infrastructure |
We may add or change sub-processors as the product evolves; material changes will be reflected in an updated version of this policy.
6. Sharing — we don't sell your data
We do not sell your personal information or your organization's data. We share information only:
- With the service providers in Section 5, to the extent needed to provide the features you use;
- Within your own organization, per the roles and permissions your admins configure;
- If required by law, subpoena, or to protect against fraud, security threats, or violations of our Terms of Service;
- If ownership of TED changes through a sale, merger, or acquisition — we'll give you advance notice, and from that point your data will be handled under whichever privacy policy the new owner has in place;
- With your explicit consent.
7. Data retention and deletion
We retain your account and organization data for as long as your subscription is active, plus a reasonable period afterward to allow reactivation and to meet legal, accounting, and dispute-resolution obligations. If you cancel your subscription, your organization's data may be deleted from active systems per our standard retention window; back-ups are rotated out over time. You can request earlier deletion of your account or organization's data by contacting us (Section 12), subject to any records we're required to keep by law.
8. Your data, your ownership
You and your organization own the deal, contact, and business data you enter into TED. We don't claim ownership of it. We process it solely to provide the service to you, as described in this policy and our Terms of Service.
9. Security
We use industry-standard safeguards to protect your information, including encryption in transit, per-organization data isolation enforced at the database level (row-level security), and access controls limiting who at TED can see your data. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.
10. Your privacy rights
California residents (CCPA/CPRA). You have the right to know what personal information we collect about you, request deletion of it, correct inaccurate information, and opt out of the sale or sharing of personal information — though, as noted above, we don't sell or share personal information for cross-context behavioral advertising. You won't be discriminated against for exercising these rights. To make a request, contact us using the details in Section 12.
EU/UK residents (GDPR). If you're located in the European Economic Area or the UK, you have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. Our legal basis for processing is generally performance of our contract with you (providing the service), our legitimate interests (security, product improvement), or your consent (for optional integrations like connected email or phone). You also have the right to lodge a complaint with your local data protection authority.
All users. Regardless of location, you can access, update, or delete most of your account information directly in TED's settings, or by contacting us.
11. Children's privacy
TED is a business tool intended for use by adults in a professional capacity. We do not knowingly collect information from anyone under 18. If we learn we've collected information from a child, we'll delete it.
12. International data transfers
Our infrastructure and service providers are primarily located in the United States. If you access TED from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country. We take steps to ensure your data is treated securely and consistently with this policy wherever it's processed.
13. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we'll notify you by posting the updated policy on this page with a new effective date, and, for significant changes, by emailing the primary contact on your account. Your continued use of TED after a change takes effect means you accept the updated policy.
14. Contact us
Questions about this Privacy Policy, or requests to access, correct, or delete your information, can be sent to: