PRIVACY POLICY

Effective Date: June 8, 2026

Last Updated: September 24, 2026

The Gruosso Group ("Company," "we," "our," or "us") is committed to protecting your privacy and maintaining the security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard information obtained through GruossoGroup.com and any related services. By using our website, submitting information, or communicating with us, you consent to the practices described in this Privacy Policy.

This policy also covers the internal business software our team uses to connect to third-party platforms such as Google, Meta, TikTok and LinkedIn. See Connected Accounts and API Integrations and Data Retention and Deletion.

Information We Collect

We may collect personal information that you voluntarily provide, including:

• Name
• Email address
• Telephone number
• Mailing address
• Property information
• Real estate preferences
• Information submitted through contact forms, home valuation requests, property inquiries, appointment requests, and other communications

We may also automatically collect certain information when you visit our website, including:

• IP address
• Browser type and version
• Device information
• Operating system
• Pages visited
• Time spent on pages
• Referral sources
• Cookies and similar tracking technologies

How We Use Your Information

We may use the information we collect to:

• Respond to inquiries and requests
• Provide real estate brokerage services
• Schedule consultations and property showings
• Deliver property alerts and market updates
• Improve website functionality and user experience
• Analyze website traffic and performance
• Conduct marketing and advertising activities
• Comply with legal and regulatory requirements
• Protect against fraud, unauthorized activity, or misuse of our services

Marketing Communications

By providing your contact information, you may receive communications from The Gruosso Group regarding property listings, market reports, opportunities, promotions, and company news. You may opt out of marketing communications at any time by following the unsubscribe instructions included in our emails or by contacting us directly.

SMS and Telephone Communications

By submitting your phone number through our website, forms, advertisements, or other communication channels, you expressly consent to receive calls and text messages from The Gruosso Group regarding real estate services, listings, transactions, appointments, promotions, and related information. These communications may be delivered using automated technology, including autodialers, prerecorded messages, or artificial voice technology where permitted by law. Consent is not a condition of purchasing, selling, renting, or receiving real estate services. Message and data rates may apply. Message frequency may vary. You may opt out at any time by replying STOP to any text message.

Cookies and Tracking Technologies

Our website may use cookies, pixels, analytics tools, and similar technologies to remember user preferences, improve website performance, analyze visitor behavior, measure advertising effectiveness, and deliver relevant content and advertisements. You may modify your browser settings to disable cookies; however, certain website features may not function properly.

Information Sharing

We do not sell your personal information. We may share information with trusted third-party service providers who assist us in operating our business, including CRM platforms, marketing and advertising providers, website hosting providers, analytics providers, transaction coordinators and service vendors, and mortgage/title/inspection/appraisal/legal professionals involved in a transaction. We may also disclose information when required by law or when necessary to protect our rights, property, clients, or the public.

Mobile Information Protection

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All categories above exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Connected Accounts and API Integrations

In addition to this website, The Gruosso Group runs its business with internal software that connects to third-party platforms through their official APIs. That software is used only by The Gruosso Group and its agents. It connects only to accounts that belong to us or to the team member using it. It is not offered to the public, and no one outside our team can sign in to it or connect an account to it.

These principles apply to every connection:

• Every connection is optional. The account owner authorizes it through the provider's own sign-in and consent screen, and each connection is authorized separately.
• We request only the permissions a feature needs, and we use them only for that feature.
• Authorization tokens and the data we retrieve are stored on computers controlled by The Gruosso Group. They are not published, sold, rented or shared with data brokers.
• Nothing is posted, sent, changed or paid for on a connected account unless a team member takes that action deliberately.
• Access can be revoked at any time, either in our software or in the provider's account settings (see Data Retention and Deletion).

Google

When a team member connects a Google account, our software requests the following permissions:

Google Calendar calendar, calendar.events

Shows a team member's calendar inside our software and creates, updates or cancels the appointments they book there (showings, consultations, follow-ups). Existing events are read to avoid double-booking.

Google Drive drive

Stores and organizes listing photos, videos and transaction documents. This covers browsing folders, uploading and downloading files, renaming and moving them, and creating or removing share links when a team member asks.

Gmail (read-only) gmail.readonly

Reads the header details (recipients, subject and date) of messages a team member has sent, so we can report to a seller how many people their property was sent to. Message bodies are not read. The software never sends, labels, moves or deletes email.

YouTube (read-only) youtube.readonly

Reads view, like and comment counts for videos on our channel so we can report how listing videos perform. It has no ability to upload, edit or delete.

Google Business Profile business.manage

Reads our Business Profile listing, its reviews and its local search performance. Changes to the profile are made only when a team member directs them.

Google Ads adwords

Reads campaign spend and results so we can compare what we spent on advertising with the inquiries it produced.

Google API Services: Limited Use disclosure

The Gruosso Group's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• Google user data is used only to provide the features described above to the team member who connected the account.
• It is not transferred to anyone else except as needed to provide those features, to comply with the law, or to protect security.
• It is not used or transferred to serve advertising, including retargeting, personalized or interest-based ads.
• It is not sold, and it is not used to determine creditworthiness or for lending.
• It is not used to develop, improve or train generalized artificial intelligence or machine learning models.
• No person reads it except with the account owner's permission, when needed for security or to comply with the law, or in aggregated, anonymized form for internal operations.

Meta (Facebook and Instagram)

When a team member connects a Meta account, our software requests the following permissions:

Facebook Page and Instagram pages_show_list, pages_read_engagement, read_insights, instagram_basic, instagram_manage_insights

Reads posts on our own Facebook Page and Instagram account and their performance (views, reach, likes and comments) so we can see how our listing content performs.

Meta advertising ads_read, ads_management

Reads results for our ad campaigns. It also creates campaigns, ad sets and ads on our ad account. Everything it creates starts paused, and nothing starts spending until a team member explicitly confirms the budget.

Business assets business_management

Lists the ad accounts, Pages and Instagram accounts our team already manages, so we can choose which one an ad or report uses.

Property ads we create are always placed in Meta's Housing special ad category, which limits targeting by age, gender and location as fair housing rules require. Our software has no setting to turn this off.

We may tell Meta that an inquiry we received through one of our ads turned into a lead, so we can measure which ads work. When we do, we send the person's email address and phone number to Meta's Conversions API only in hashed form (SHA-256, which cannot be reversed), together with the event name and time. We never send plain-text contact details. This happens only for inquiries a team member selects, and only to our own ad account.

TikTok

When a team member connects a TikTok account, our software requests the following read-only permissions:

TikTok videos video.list

Reads the list of videos on our TikTok account and their view, like, comment and share counts, so we can see how our listing content performs.

TikTok profile statistics user.info.stats

Reads our account's follower, like and video counts. The software never posts, comments, messages or follows anyone.

Other services

Where they are connected, our software also uses these services for the purposes listed:

LinkedIn r_organization_social, rw_organization_admin, r_ads, r_ads_reporting, r_basicprofile

Reads follower and engagement statistics for our LinkedIn Company Page and reporting for our LinkedIn ads.

GoHighLevel (CRM) API access to our own account

Stores the inquiries submitted on this website and the contacts, conversations and opportunities we manage for clients.

IDX Broker / MLS data API access to our own account

Supplies the property listings shown on this website.

Canva asset and design read/write

Uploads listing photos to our Canva account and creates marketing designs from them.

dotloop profile, loop and template access

Organizes the documents and participants for each of our transactions.

QuickBooks Online com.intuit.quickbooks.accounting

Reads our own accounting records for internal financial reporting.

AI-assisted features

Some features, such as drafting a message or summarizing a document, send the relevant content to an AI service provider's API, which returns a result that a team member reviews. Content from a connected account is included only when it is needed for the result the team member asked for. The providers we use do not train their models on content submitted through their APIs. Google user data is never used to train generalized AI or machine learning models.

Platform data we do not collect

Our software does not collect the private information of the people who follow, message or interact with our social media accounts, beyond the aggregate counts described above (views, likes, comments, followers). It does not read direct messages.

Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, or destruction. While we strive to protect your information, no method of transmission over the internet or electronic storage system can be guaranteed to be completely secure.

Data Retention and Deletion

We keep personal information only as long as we need it to provide our services, to maintain the transaction records that real estate law requires, or to resolve disputes. Then we delete it.

Information you gave us. To see, correct or delete the information we hold about you, email mikenjrealestate@gmail.com with the subject "Data deletion request" or call (908) 489-4107. Include the name, email address and phone number you used with us. We will confirm by email once the request is complete. We may keep records that the law requires us to retain, such as signed transaction documents.

Connected accounts. Authorization tokens are kept until the connection is removed. Data retrieved from a connected account is kept only as long as the feature that uses it needs it. Disconnecting an account in our software deletes its stored authorization. The account owner can also revoke our access directly with the provider:

• Google: myaccount.google.com/permissions
• Facebook and Instagram: Facebook Settings → Business Integrations → Remove
• TikTok: Settings and privacy → Security → Apps and services permissions
• LinkedIn: Settings → Data privacy → Permitted services

If you have revoked access and want us to delete any data we previously retrieved from that account, email us as described above. We will delete it and confirm when it is done. Hashed information sent to Meta for ad measurement is held in our Meta ad account, and we will delete it there on request.

Third-Party Websites

Our website may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices, content, or security of any third-party websites. We encourage users to review the privacy policies of any external sites they visit.

Children's Privacy

Our website and services are not intended for individuals under the age of 13. We do not knowingly collect personal information from children.

Your Privacy Rights

Depending on applicable state and federal laws, you may have the right to request access to, correction of, or deletion of your personal information, opt out of certain marketing communications, or request information regarding how your data is used. To exercise any of these rights, please contact us using the information below.

Updates to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Changes will become effective immediately upon posting to this page. Continued use of the website following any changes constitutes acceptance of the revised Privacy Policy.

Contact Information

The Gruosso Group

Phone: (908) 489-4107

Email: mikenjrealestate@gmail.com

Website: www.gruossogroup.com

Lead Form Consent

By submitting any form on this website, you expressly authorize The Gruosso Group and its representatives to contact you by phone, email, text message, or automated technology regarding real estate services, listings, transactions, market updates, and related opportunities. Your consent is not required as a condition of purchasing any property, selling a property, or receiving real estate services. You may withdraw consent at any time by contacting us or opting out of communications using the methods provided.

See also our Terms and Conditions.