Privacy Policy

Last updated: August 5, 2026

Phill R. Tomlinson PLLC (“CRE Fuel”, “we”, “us”, “our”) operates CRE Fuel, a subscription CRM for commercial real estate brokers, and this website. This policy explains what information we handle, why, and what we will never do with it.

We handle information in two very different roles

Almost every question about this policy comes down to which of these applies.

Information about you, our customer. If you visit this site or subscribe to CRE Fuel, we decide how your account, billing, and usage information is handled. This policy governs it.
Information you store inside CRE Fuel. The contacts, deals, notes, and call records a broker puts into the CRM are the broker’s, not ours. We hold and process that information on the broker’s instructions, as their service provider. We do not decide what goes in it and we do not use it for our own purposes. See Customer Data below.

If you are a person whose details a broker stored in their CRE Fuel account, that broker’s privacy policy governs your information, not this one. Contact the broker directly to access, correct, or delete it. We will help them do so, but we cannot act on their data without their instruction.

Information We Collect

From visitors to this website

What you type into a form: your name and email address, and for partner applications, the details you provide. The forms on this site do not ask for a phone number.
A referral code, if you arrived through a partner link. It is stored in your browser and sent with your form submission so we can credit the partner.
Standard server request information such as IP address, kept briefly for security and abuse prevention.

This site runs no analytics, no advertising pixels, and no third party trackers. No Google Analytics, no Meta pixel, no session recording. We do not build advertising profiles and we do not participate in cross site tracking.

From brokers who subscribe

Account information: name, email, phone, business name, and the users you invite to your team.
Billing information: your plan, billing interval, subscription status, trial and renewal dates, and the identifiers our payment processor uses. See Payments and Billing below.
Usage information: feature usage counts, performance metrics, and error logs, used to operate and improve the product.
Support communications: what you send us when you report a problem or ask a question.

Customer Data: what brokers store in the CRM

When a broker uses CRE Fuel, they put working information into it: contacts and companies, properties, notes, tasks, pipelines and deals, commission records, documents, and logs of calls, texts, and emails, including call recordings and transcripts where the broker has switched recording on. We call this Customer Data.

Customer Data belongs to the broker. We are its custodian, not its owner. Our commitments:

We do not sell, rent, or license Customer Data.
We do not share one broker’s Customer Data with another broker, and no customer can access another customer’s account.
We do not market to, solicit, or transact with a broker’s contacts for our own account or for anyone else.
We do not use Customer Data to compete with the broker, including to source, refer, or broker deals.
We do not use Customer Data to train generalized or publicly available AI models.

We access Customer Data only to run and maintain the service, to provide support the broker has asked for, to investigate a security or abuse problem, or where the law requires it. If we receive a legal demand for a broker’s data, we will tell them before disclosing it unless we are legally prohibited from doing so.

Brokers can export their own data at any time, in common formats, at no charge, and keep a window to export it after cancelling. If we ever discontinue the service, we will give notice and keep export available so brokers can take their data with them.

How We Use Information

To provide, secure, and support CRE Fuel and this website.
To set up your account, process your subscription, and send billing notices.
To respond to you, provide onboarding, and answer support requests.
To send service messages about your account, and product updates you can unsubscribe from.
To detect and prevent fraud, abuse, and security incidents.
To understand how the product is used and improve it. Any statistic we publish is aggregated across many customers and anonymized, so it cannot be used to identify you, your contacts, your deals, or your production.
To meet legal obligations.

Artificial Intelligence Features

CRE Fuel includes features that use AI, such as transcribing and summarizing a recorded call, drafting suggested text, and answering questions about your own records. When you use one of those features, the relevant information is sent to an AI provider under contract to us, processed to return your result, and not retained by that provider to train its models.

We do not use your information or your Customer Data to train generalized or publicly available AI models. AI features act on your data only to give you an answer, at your direction, in the moment.

Call recording is off by default. Recording laws vary by state and some require the consent of everyone on the call. Brokers who switch recording on are responsible for obtaining any consent the law requires.

Google User Data

CRE Fuel connects to two Google services, and only if you ask it to. Each is optional, each is switched on by you in Settings, and each can be disconnected there at any time. We request the narrowest permission that does the job, and we use each permission for exactly the one purpose described below.

Google Contacts

CRE Fuel can push the contacts you already keep in the CRM into the account your phone reads from, so an incoming call from a client shows a name instead of an unknown number. Connecting that is optional, and you switch it on yourself in Settings.

If you connect Google Contacts, CRE Fuel requests one permission: https://www.googleapis.com/auth/contacts. We use it for exactly one purpose, which is writing your CRE Fuel contacts into a contact group named “CRE Fuel” in your Google account. Specifically:

The sync runs one way only, from CRE Fuel to Google. Changes you make in Google are never read back into CRE Fuel.
We only ever modify entries we created. Each one carries a CRE Fuel identifier, so a repeat sync updates the same entry rather than creating a duplicate. Contacts that were already in your Google account are not touched, not read for any other purpose, and not imported into CRE Fuel.
We do not use this access for anything else. Not to build profiles, not to market to your contacts, not to enrich other records.

Google Calendar

CRE Fuel can see when you are already committed, so it never books an appointment over something you have on. Connecting your calendar is optional and you switch it on yourself in Settings.

If you connect Google Calendar, CRE Fuel requests one permission: https://www.googleapis.com/auth/calendar.events. We use it for exactly two purposes, both of which are the scheduling you asked for:

Reading when you are busy. We look at events in the window we are scheduling against so CRE Fuel knows which times are already taken. We ignore events you have marked as free, and cancelled events.
Writing the appointments you book in CRE Fuel onto your calendar, and keeping those same appointments up to date if they move or are cancelled.

Specifically:

We only ever modify events we created. Appointments you or anyone else put on your calendar are never edited, moved, or deleted by CRE Fuel.
We do not store the contents of your calendar. Your existing events are read to answer “are you free then?” at the moment we need to know, and are not copied into CRE Fuel, not indexed, and not retained.
We do not use this access for anything else. Not to analyse who you meet, not to build profiles of your contacts, not to enrich other records.

A narrower permission does not exist for this. A read-only calendar scope cannot write the appointments you book, and Google offers no scope limited to the events one app created.

For both Google Contacts and Google Calendar: CRE Fuel’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this data, we do not use it for advertising, and we do not use it to train generalized or publicly available AI models. No human at CRE Fuel reads it except where you ask us to in order to resolve a support issue you have raised, or where the law requires it.

You can disconnect either connection at any time in Settings, which stops all further access, or revoke CRE Fuel’s access directly at myaccount.google.com/permissions. Contacts already written to your Google account stay in the “CRE Fuel” group, and appointments already on your calendar stay there, both of which you are free to delete yourself.

SMS Communications

If you give us your mobile number directly and agree to be texted, we may send you recurring messages about your account, onboarding scheduling and reminders, subscription notices, and replies to your questions. Message frequency varies (typically fewer than 4 messages per month). Message and data rates may apply. Reply STOP at any time to opt out. Reply HELP for assistance. Consent is not a condition of any purchase or service. See our SMS Terms for full details.

Mobile opt-in data and consent information is not shared with any third parties or affiliates for marketing purposes.

Separately, brokers use CRE Fuel to send calls and messages to their own contacts. In those communications the broker is the sender, not CRE Fuel, and the broker is responsible for consent, opt-out handling, and compliance with the TCPA, Do Not Call rules, and carrier requirements.

How We Share Information

We never sell your information to third parties. We share it only with:

Service providers who help us deliver the product: platform and database infrastructure, telephony for voice and SMS, transcription and AI processing, payment processing, hosting, and email delivery. Each is bound by contract to protect the information and to use it only to provide its service to us. None may use it for their own marketing or sell it.
Authorities, when the law validly requires it.
A successor, if the business is merged or acquired, on the condition that the successor assumes our data ownership and export obligations in full.

A current list of our service providers, naming each one along with the security certifications it holds, is published on our Trust & Security page, and is also available on request to support@crefuel.co. Information is stored and processed in the United States.

Payments and Billing

Paid subscriptions are processed by Stripe. When you subscribe, your card details are collected and stored by Stripe on their own systems. CRE Fuel never receives or stores your full card number. We keep only what we need to run your account: your subscription status, plan and billing interval, trial and renewal dates, and the identifiers Stripe uses to reference your customer and subscription records. Stripe’s handling of your payment information is governed by Stripe’s Privacy Policy.

Cookies and Local Storage

This website sets no advertising or analytics cookies. It uses your browser’s local storage for one thing: remembering a partner referral code so the right partner gets credit if you sign up. You can clear it at any time in your browser settings.

The CRE Fuel application uses cookies and local storage that are necessary to keep you signed in and to remember your display preferences.

Data Retention and Deletion

We keep information for as long as needed to provide the service, or as the law requires.
Brokers may request deletion of their account data at any time by writing to us. We will delete it within 30 days, other than what we must retain for legal or dispute-resolution reasons or what expires on its own backup cycle.
After a subscription ends, brokers keep a window to export their data before it may be deleted.
If you are a contact stored in a broker’s account, ask that broker to delete your information. They control it, and their deletion instruction reaches us through their use of the product.

Security

We use encryption in transit, access controls, and least-privilege limits on who can reach customer information. Access is restricted to personnel who need it to run the service or to provide support you have requested. No system is perfectly secure, so we also recommend brokers export their data regularly and keep their own copy.

Your Rights

You may request access to, correction of, a copy of, or deletion of your personal information, and you may object to or restrict certain processing. Write to support@crefuel.co and we will respond within the time the law allows.

If you are a California resident: we do not sell or share personal information for cross-context behavioral advertising, and we run no advertising trackers on this site. You have the right to know, delete, correct, and to be free from discrimination for exercising those rights.

Where we handle Customer Data on a broker’s behalf, we act on that broker’s instructions. Requests about that data should go to the broker, and we will assist them in responding.

Children

CRE Fuel is a business product intended for adults. It is not directed to anyone under 18, and we do not knowingly collect information from children.

Contact

Phill R. Tomlinson PLLC (d/b/a CRE Fuel)
Email: support@crefuel.co
Website: https://crefuel.co

Changes to This Policy

We may update this policy. The “Last updated” date reflects the most recent revision. If a change materially reduces your rights, we will give notice to the email on your account before it takes effect. Continued use of our services after changes means you accept the updated policy.