Categories of Ingested Information
Nsol Flow Systems Inc. (“Nsol Flow,” “we,” “us,” or “our”) processes information necessary to execute autonomous real estate operations. We categorize all ingested data into three distinct operational domains:
A. Brokerage Workspace Account Data
When an enterprise brokerage registers a workspace, we collect authorized broker or agent names, corporate email addresses, office telephone numbers, credential tokens for connected CRMs (e.g., enterprise CRM API keys and OAuth tokens), and Stripe commercial billing identifiers.
B. Consumer Lead Intake Data
When prospective buyers, sellers, or renters submit inquiries via Form Studio widgets or landing funnels, we capture prospect full names, verified phone numbers, email addresses, property addresses, price budget criteria, financing pre-approval status, and custom brokerage questionnaire responses.
C. Voice AI Telephony Telemetry
During automated speed-to-lead voice calls conducted by Sarah, we capture call audio stream metadata, call connection duration, carrier disposition codes, machine-generated transcriptions, and qualification outcome tags.
Operational Use of Information
We process ingested data strictly for lawful, explicit purposes necessary to provide our enterprise platform services:
- Speed-to-Lead Qualification: Executing instant outbound AI voice phone calls to newly registered prospective clients within 60 seconds of form submission.
- Autonomous Calendar Booking: Checking agent availability in real time and confirming showing appointments on verified Google or Outlook calendars.
- CRM Two-Way Synchronization: Updating lead stages, custom property preferences, and complete conversational call summaries into the brokerage’s CRM.
- Regulatory Auditability: Maintaining immutable compliance logs for telecommunications consent verification and TCPA adherence.
Tenant Data Isolation & Storage Safeguards
Nsol Flow operates on a zero-cross-leakage multi-tenant architecture. Every single record originating from a brokerage workspace is encapsulated within isolated database rows protected by PostgreSQL Row-Level Security (RLS) policies.
Queries execute under strict session identity boundaries. Even if application-layer code were to omit tenant filtering clauses, the database engine prohibits cross-tenant record retrieval.
All database tables, disk volumes, and telephony audio archives are encrypted using hardware-accelerated AES-256 GCM encryption keys managed through enterprise HSMs.
Zero AI Training Guarantee
Nsol Flow does not monetize, sell, trade, or distribute your brokerage’s contact lists, listing details, or consumer inquiries to competing brokerages, mortgage lenders, or ad networks.
Furthermore, we contractually guarantee that customer lead data, call transcripts, and CRM notes are never used to train, retrain, or improve public foundation AI models (such as OpenAI GPT-4, Anthropic Claude, or Google Gemini). We only utilize enterprise APIs governed by strict Zero-Data-Retention (ZDR) agreements.
Third-Party Service Providers
To provide high-availability telephony, CRM synchronization, and infrastructure hosting, we engage certified enterprise subprocessors:
Carrier Voice Telephony Mesh (Voice & SMS)
Provides carrier SIP routing, autonomous voice synthesis, and real-time audio streaming.
Nsol Flow Core CRM (Enterprise CRM Integration)
Receives direct CDN form intake via Nsol Cloud Forms and synchronizes contacts and appointment slots.
Stripe Inc. (Payment Processing)
Handles recurring subscription billing and metered telephony usage under PCI-DSS Level 1 compliance.
Resend & Amazon SES (Transactional Messaging)
Delivers automated showing confirmations, agent dispatch alerts, and critical security notices.
Consumer Privacy Rights (CCPA & GDPR)
Nsol Flow provides full programmatic tooling to honor consumer privacy rights under the California Consumer Privacy Act (CCPA/CPRA), General Data Protection Regulation (GDPR), and related statutes:
- •Right to Know & Access: Consumers may request a full disclosure of all personal data held within our database records.
- •Right to Delete: We execute full cryptographic deletion of consumer records across all operational tables upon verified request.
- •Right to Opt-Out: Consumers may opt out of automated voice calls or SMS communications at any time by texting “STOP” or submitting a formal revocation.
Data Retention & Cryptographic Disposal
Data is maintained only for the duration necessary to satisfy operational and legal requirements:
Automated Audio Purging
Telephony call audio blobs are automatically purged according to tenant-configured schedules (30, 60, or 90 days). Once the TTL expires, the underlying storage blocks are permanently overwritten.
Subscription Termination Grace
Upon account termination, customer data remains exportable for a 30-day grace period. After 30 days, all multi-tenant partitions and database records undergo permanent cryptographic disposal.
Data Protection Officer & Inquiries
For inquiries regarding this Privacy Policy, your Data Processing Addendum (DPA), or consumer rights requests, contact our Data Protection Officer:
Nsol Flow Systems Inc. • Data Protection Office
Security & Compliance: security@nsolflow.com
General Operations: info@nsolflow.com