Privacy policy.

Last Updated: August 1, 2026

Bruce ("bruce.bot") is a done-for-you client relationship and reviews engine for licensed members. With your authorization, Bruce stays in touch with your past clients in your name, sending genuinely useful local heads-up, and invites those clients to leave a review. This Privacy Policy describes how Tanda Technologies, Inc. ("Bruce," "we," "us," or "our") collects, uses, and protects your information when you use our platform, including our website, AI-powered voice onboarding, outbound client outreach, and review tools.

1. Overview

Bruce is an AI-powered relationship and reviews engine designed for licensed members across three categories:

• Real Estate
• Mortgage
• Insurance

We are privacy-first: your data, and the data you entrust to us about your clients, exists to serve your professional relationships and reputation, not to be sold or exploited.

This Privacy Policy covers two groups of people. As a member, you provide your account, license, and voice data and authorize Bruce to contact your clients on your behalf. As a client contact of a member, your information is provided to Bruce by the member, and Bruce contacts you in that member's name. Members are responsible for ensuring they have a relationship with, and the right to contact, the clients they upload.

By creating an account or using Bruce, you agree to the terms described in this Privacy Policy. If you do not agree, please do not use our services.

2. Information We Collect

We collect information that you voluntarily provide to us. Bruce does not scrape, crawl, or harvest data from external sources. All information in our system is provided directly by members or generated through interactions on our platform.

Account and Profile Information

• Full name, email address, and phone number
• Professional role, specialization, and service areas
• License information (e.g., NMLS #, NPN #, DRE #, or state-specific license number) for verification purposes
• Business name, location, and years of experience
• Profile photo and professional bio

Voice Conversation Data

• Audio recordings and transcripts from your AI-powered onboarding voice call
• Profile details, story, and preferences expressed during the call
• Follow-up conversation data used to keep your profile and voice current

Client Contact Data You Upload

To run outreach on your behalf, you upload a list of your past clients. For each client this may include:

• Full name
• Phone number and email address
• Mailing or property address
• Sold or closing date and similar relationship details

You provide this information about your clients directly. By uploading it, you confirm you have an existing relationship with these clients and the right to share their contact details with us so we can contact them in your name.

Connected Mailbox Data (Gmail and Outlook)

Instead of uploading a client list, you can connect your Gmail or Outlook mailbox and let Bruce build the list from the people you already correspond with. Connecting is optional, you authorize it yourself through Google or Microsoft, and you can disconnect at any time.

When you connect a mailbox, Bruce reads the following and nothing else:

• Sent mail headers. Recipients, subject, and date for the messages you sent. Bruce uses these to work out who you actually correspond with and how often, which is what produces the ranked list you review.
• A small number of sent message bodies. Only for the contacts you pick from the list, Bruce reads a few messages you sent them to pull out details worth keeping on a client record: a mailing address, a phone number, a birthday, a short note, and how you know them — a client, someone who refers you business, or a colleague. Message bodies are read once and discarded. They are never stored and never written to our logs.
• Calendar event metadata. Who attended and when. Never event descriptions or notes.
• Your contacts. Names, phone numbers, addresses, birthdays and any note you have typed on a contact card, all of which take precedence over anything inferred from mail. A note you keep on a card is saved to that client's record.

Bruce does not read your inbox, only what you sent.

What Bruce sends from your mailbox. One thing, and only when you ask for it: the introduction to a client, which you preview and then send yourself from the client's card. It leaves from your own address so the client hears from you rather than from a service they have never heard of, and Bruce is on the CC so he can pick up the reply. Nothing is scheduled, nothing is sent in the background, and no other message Bruce writes goes through your mailbox — the rest come from a Bruce address. The first introduction you send is recorded on your connection as the point you started sending.

When Bruce reads. Bruce reads your mailbox when you start a scan, and periodically after that, so people you have started corresponding with since you connected show up without you having to ask. Every scan looks at a bounded window of recent sent mail rather than your whole history. Scanning happens only while your mailbox is connected to Bruce: disconnecting stops it, and you can disconnect at any time.

Reading and sending are two separate permissions. For Gmail they are two separate connections, granted on two separate consent screens, and you can hold either one without the other. The permission that lets Bruce send your introduction cannot read a single message in your mailbox. Turning either one off leaves the other working.

If you connected Gmail before we separated these. Your mailbox connection may still carry the sending permission you granted at the time, because Google keeps a permission you have already approved until the whole connection is withdrawn. Bruce never sends through it: introductions go out only through the sending connection. To clear it, disconnect and reconnect your mailbox, which withdraws the original approval at Google and replaces it with the read-only permissions below. You can also remove it yourself from your Google account permissions page at any time.

The permissions Bruce asks for, and what each one is for:

• Google, gmail.readonly. Sent-folder message headers, a few sent message bodies for the contacts you pick, and the list of addresses your mailbox sends as, which is how Bruce knows which addresses are yours rather than a client's. Bruce does not open your inbox.
• Google, gmail.send. Sending one email: the introduction you send to a client, when you press Send on it. Nothing is ever sent from your mailbox automatically. Each send is a specific introduction to a specific client that you chose and previewed first. It goes out from your own address, in the words you can edit, with Bruce's own address on the CC so his replies pick up the thread. Bruce sends nothing else from your mailbox, and the first time you send one we record that you did.
• Google, openid and userinfo.email. The email address of the Google account you granted sending to, and nothing else. Bruce asks so that the address an introduction will leave from is the address you saw when you granted it, rather than whichever account happened to be signed in. No profile, no name, no photo, and no contacts are read from these.
• Google, calendar.readonly. Who attended a meeting and when, so someone you meet regularly ranks alongside someone you email regularly. Event descriptions and notes are never requested.
• Google, contacts.readonly. Names, phone numbers, addresses, birthdays and any note you have typed on a contact card, all trusted ahead of anything inferred from mail. Someone you have a contact card for can be suggested as a client even if you never emailed them, and like every other suggestion it is only a suggestion until you confirm it. Contact photos are never requested.
• Microsoft, Mail.Read, Calendars.Read, Contacts.Read, User.Read. The same four things, for a connected Outlook mailbox: sent headers and a few sent bodies, meeting metadata, your address book, and the addresses your mailbox answers to.
• Microsoft, Mail.Send. The same one email as gmail.send, on the same terms: only an introduction you pressed Send on, never anything automatic.

Google user data. Bruce's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy , including the Limited Use requirements. Google user data is used only to provide and improve the client list and client detail features described above. It is never sold, never used for advertising, and never used to develop, improve, or train generalized artificial intelligence or machine learning models. No Bruce employee reads your mail except with your explicit permission for a support request you raise, for a security investigation, or where we are required to by law.

Disconnecting. Disconnecting a mailbox in Bruce deletes our stored access credentials, asks the provider to withdraw the grant where the provider supports that, and removes the suggested clients you never acted on. Contacts you confirmed, edited, or messaged stay in your client list, because they became your records rather than mailbox data. You can also withdraw access directly at myaccount.google.com/permissions or account.live.com/consent/Manage .

Outreach and Review Data

• Messages Bruce sends to your clients in your name, by SMS and email, and their responses
• Delivery, engagement, and opt-out status for those messages
• Your connected Google Business Profile and the access it grants Bruce
• Reviews captured through Bruce or posted to your Google Business Profile

Usage and Technical Data

• Device information, browser type, and IP address
• Pages visited, features used, and interaction timestamps
• Cookies and similar tracking technologies for session management and analytics

3. How We Use Your Information

We use the information we collect to:

• Client Outreach on Your Behalf: Use the client contacts you upload to send useful, local heads-up and review invitations by SMS and email in your name, on the cadence and within the boundaries you authorize.
• Reviews: Invite your clients to leave a review, capture reviews, and connect to your Google Business Profile to help post and track those reviews.
• Reputation Building: Generate and maintain your public professional profile, including your captured reviews.
• Profile and Voice Generation: Use AI to create and update your professional profile from your onboarding voice call, and to learn your voice so outreach sounds like you.
• Communications to You: Send notifications about client responses, posted reviews, profile updates, and platform announcements.
• AI Model Improvement: Use anonymized and aggregated data to improve our outreach, voice processing, and platform features.
• License Verification: Validate your professional credentials against public regulatory databases (NMLS, NIPR, DRE, and state-specific licensing authorities).

4. AI and Voice Processing

Bruce uses large language models (LLMs) and voice processing technology to power core platform features. Specifically, AI assists with:

• Voice Onboarding: Your initial profile is generated through a voice call with Bruce's AI. The call is recorded, transcribed, and processed to build your professional profile and to learn your voice.
• Profile Updates: Ongoing voice conversations allow you to update your specializations, recent wins, and focus areas without manually editing your profile.
• Outreach Drafting: AI uses your profile and voice to draft the messages Bruce sends to your clients in your name.
• Identity Matching: Voice biometric data derived from your calls may be retained to verify your identity on future calls.

Biometric Data Notice: Voice recordings processed by Bruce may constitute biometric identifiers under applicable state laws, including the Illinois Biometric Information Privacy Act (BIPA) and the Texas Capture or Use of Biometric Identifier Act (CUBI). By consenting to voice onboarding, you expressly consent to the collection, storage, and use of voice biometric data for identity verification purposes. Bruce does not sell or profit from biometric data. Biometric identifiers are deleted upon account deletion or upon request.

Voice onboarding and your control: Your profile is built from a short voice call with Bruce. That call is handled by our voice provider, VAPI, and you stay in control of your call data: you can delete it at any time, and it is removed automatically when you delete your account. VAPI may keep call data to help improve the quality of its voice technology, such as speech recognition and response timing, as described in its privacy policy. This is only your own onboarding and profile calls, never the client contacts you upload, and it is used to make voice work better, not to build a profile of you. Our other AI providers (OpenAI, Anthropic, and AWS) do not use your data to train their models.

Important: Avoid sharing sensitive personal information (Social Security numbers, financial account details, client confidential information) during voice conversations. Voice conversations are processed by third-party AI providers and should be treated accordingly.

Voice recordings are retained for the purpose of profile generation and identity matching. You may request deletion of all voice data and biometric identifiers at any time by contacting support@bruce.bot. Deletions are processed from both Bruce's systems and our voice provider's systems within 30 days.

5. Client Outreach and Reviews

Contacting your past clients in your name, and turning their goodwill into reviews, is the core of what Bruce does. Here is how that data is handled:

Your Authorization

Bruce contacts your clients only after you authorize outreach. You review the first message before it goes out, and you control the cadence. We act on your behalf and in your name; you are responsible for the relationship with each client you upload.

Messages We Send

On your behalf, Bruce sends your clients useful local heads-up and, after a genuine value moment, invitations to leave a review. Messages are sent by SMS and email. Every message includes a way for the client to opt out, and we honor opt-outs promptly and permanently.

Reviews

When a client chooses to leave a review, the review is captured through Bruce and the client may post it to your Google Business Profile from their own account. Bruce does not write or post reviews on a client's behalf. With your one-click connection to your Google Business Profile, Bruce reads your reviews to detect and display new ones.

What We Store

For each client you upload, we store the contact and relationship details you provide (name, phone, email, address, sold or closing date), the messages exchanged in your name, opt-out and engagement status, and any review captured.

6. Data Protection

Security Measures

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Access controls and role-based permissions for internal systems
• Regular security audits and vulnerability assessments
• Secure, authenticated API endpoints for all platform interactions

Data Retention

We retain your account, profile, and uploaded client data for as long as your account is active so we can continue outreach on your behalf. Captured reviews published to your profile are retained as part of your professional reputation. Reviews you or your clients post to your Google Business Profile are controlled by Google and your client, not by Bruce. Voice recordings are retained for profile and voice generation unless you request deletion.

Connected mailbox data is retained for the life of the connection and no longer. Message bodies are never retained at all: they are read once during a scan and discarded. Message headers are reduced to the contact rankings you see and are not kept. Access credentials, scan history, and rankings are deleted when you disconnect the mailbox or delete your account, whichever comes first.

No Sale of Data

We do not sell, rent, lease, or license your personal data to third parties. We do not share your data with advertisers. Your information is used exclusively to operate and improve Bruce.

Third-Party Services and Subprocessors

Bruce uses the following third-party providers to operate the platform. Bruce is the data controller; each provider acts as a data processor under applicable law and is bound by contractual obligations to protect your data and use it only for the purposes we specify. With the exception of VAPI, described below, these providers do not use your data to train their AI models.

• VAPI: Voice AI infrastructure that powers your onboarding and profile calls. You can have your call data deleted from VAPI's systems at any time on request. Per VAPI's policy, it may keep call data to improve the quality of its voice technology (such as speech recognition and timing), not to profile you, and this covers only your call data, never the client contacts you upload. Privacy policy: vapi.ai/privacy.
• OpenAI: AI inference for profile generation and outreach drafting. Data submitted via the API is not used to train OpenAI models. API data logs are automatically deleted within 30 days. Privacy policy: openai.com/policies/privacy-policy.
• Anthropic: AI inference for profile generation, voice call analysis, and extracting client details from the mailbox messages described above. Where a connected mailbox is involved, only a few messages you sent to the contacts you pick are submitted, they are stripped of account numbers, card numbers and any pasted credentials before they are sent, and they are used solely to fill in that contact's details on your own client record. API data is not used to train Anthropic models, and Google user data is never used to develop, improve, or train any generalized artificial intelligence or machine learning model. Inputs and outputs are automatically deleted from Anthropic's systems within 30 days of receipt. Ad hoc deletion of specific API requests within this 30-day window is not technically available; automatic deletion is the primary mechanism. Privacy policy: anthropic.com/privacy.
• Amazon Web Services (AWS): Cloud infrastructure, storage, and hosting. Customer content is not used for AWS model training and is not shared with model providers. You control storage location, retention, and encryption of your data within AWS. Privacy notice: aws.amazon.com/privacy.
• Messaging providers: Bruce uses third-party SMS and email delivery providers to send outreach to your clients in your name. These providers process recipient names, phone numbers, email addresses, and message content solely to deliver messages and report delivery and opt-out status.
• Google (Business Profile): When you connect your Google Business Profile, Bruce reads your reviews to detect and display them. Your use of Google services is governed by Google's own terms and privacy policy. Bruce accesses only what you authorize through the connection and does not post reviews on your clients' behalf.

Important note on deletion requests and third-party processors: If you submit a deletion request, Bruce will immediately delete your data from its own systems. For data that passed through OpenAI or Anthropic API calls, automatic deletion occurs within 30 days of the original request. We cannot guarantee instant deletion from these providers' systems within that 30-day window, but no data is retained beyond it. Voice data is deleted from VAPI's systems upon request with no retention.

7. Your Rights

You have the following rights regarding your data on Bruce:

• Edit Your Profile: You may update your professional information, specializations, and preferences at any time through your dashboard or through a voice conversation with Bruce.
• Request a Data Copy: You may request a complete copy of the personal data we hold about you, including the client contacts you uploaded, in a machine-readable format.
• Delete Your Account: You may request account deletion. Upon deletion, your profile will be removed from public view and outreach to your clients in your name will stop. Reviews your clients posted to your Google Business Profile remain on Google, as they are controlled by Google and the client who posted them.
• Opt Out of Communications: You may opt out of non-essential communications (promotional messages) at any time. Transactional notifications (client responses, posted reviews, security alerts) cannot be opted out of while your account is active.
• Request Voice Data Deletion: You may request deletion of all voice recordings associated with your account.

To exercise any of these rights, contact us at support@bruce.bot.

8. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purposes for collection, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions (e.g., data necessary to complete a transaction or maintain security).
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt Out of Sale/Sharing: Bruce does not sell or share your personal information for cross-context behavioral advertising. No opt-out is necessary, but you may still submit a request for confirmation.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To submit a CCPA/CPRA request, contact us at support@bruce.bot with the subject line "California Privacy Request." We will verify your identity before processing your request and respond within 45 days.

9. Account Deletion and Data Retention

When you request account deletion, Bruce processes the following:

• Voice and call data: All call recordings and voice biometric identifiers are permanently deleted from Bruce's systems and from our voice provider (VAPI). No retention.
• Profile and identity data: Your name, email, phone number, license details, and AI-generated profile summary are permanently deleted.
• Client contact data: The client list and contact details you uploaded are permanently deleted, and outreach to those clients in your name stops.
• Connected mailboxes: Stored access credentials, scan history, and the rankings a scan produced are permanently deleted, and Bruce asks Google to withdraw the grant. Nothing further is read from your mailbox. Your mail itself is untouched, because Bruce never held a copy of it.
• Reviews on Google: Reviews your clients posted to your Google Business Profile remain on Google. They are controlled by Google and the client who posted them, and are outside Bruce's control. You may manage your Google Business Profile connection at any time through your Google account.

10. International Users

Bruce is designed for licensed professionals in the United States and operates under U.S. privacy law, including the CCPA and CPRA (Section 8). We do not target or market to residents of the European Union or European Economic Area. If you are located in the EU or EEA and believe we hold personal data about you, contact us at support@bruce.bot and we will respond to your request.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by email or through a prominent notice on the platform prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically. Your continued use of Bruce after changes are posted constitutes your acceptance of the updated policy.

12. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: support@bruce.bot