DMR
DMR Media Lead Response Bridge
← Back

Privacy Policy

Last updated: May 29, 2026  ·  Terms of Service

Plain-English summary: We connect your Gmail account so we can send automated lead-response emails on your behalf. We never read your inbox. We never sell your data. You can disconnect at any time.

1. Who we are

DMR Media ("DMR Media", "we", "us", "our") operates the Lead Response Bridge at dmrmedia.org. We help real estate agents automatically reply to new leads via their own Gmail account.

Contact: team@dmrmedia.org

2. Information we collect

  • Google account information — your Gmail address, obtained when you connect your Google account via OAuth 2.0.
  • OAuth tokens — access and refresh tokens issued by Google, stored encrypted (AES-256-GCM) in our database. Used solely to send email on your behalf.
  • Lead data — name, email address, phone number, and property details submitted to your webhook URL by your lead generation platform (e.g. Luxury Presence). This data is used only to compose and send your automated reply.
  • Sent message records — subject line, body, recipient, and send status, stored for your dashboard history.
  • Agent profile — your name, phone number, brokerage name, and website that you provide to personalize outgoing emails.

We do not collect or store payment information, read your Gmail inbox, access any emails beyond what we send, or collect any data beyond what is necessary to operate the service.

3. How we use your information

  • To send automated lead-response emails from your Gmail account, using the Gmail API (gmail.send scope only).
  • To display your lead history and sent email log on your dashboard.
  • To personalize email content with your name, phone, and brokerage details.
  • To maintain the security and integrity of the service.

We do not use your data for advertising, analytics sold to third parties, or any purpose beyond operating this service.

4. Google API scopes

We request only the following Google OAuth scopes:

  • gmail.send — Grants permission to send email on your behalf via the Gmail API. This is the only action we perform with your Gmail account. We do not read, modify, or delete any emails.
  • userinfo.email — Used to identify which Google account you are connecting, associate it with your agent profile in our system, and display your connected email address in your dashboard.
  • userinfo.profile — Used to pre-fill your display name when you first connect your account, so your dashboard shows your name correctly.

Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

5. Data storage and security

  • All data is stored in a PostgreSQL database hosted on Neon (US East region) with encryption at rest.
  • OAuth tokens are encrypted with AES-256-GCM before storage. The encryption key is never stored in the database.
  • All data in transit is encrypted via TLS 1.2+.
  • Access to the database is restricted to the application server only.

6. Data sharing

We do not sell, rent, or share your personal data with third parties, except:

  • Google — to authenticate you and send emails via the Gmail API.
  • Infrastructure providers — Vercel (hosting) and Neon (database), who process data solely to provide us with infrastructure services and are bound by their own privacy policies.
  • Legal requirements — if required by law or valid legal process.

7. Data retention

We retain your data for as long as your account is active. If you disconnect your Google account and request deletion, we will delete your OAuth tokens immediately and your lead/message history within 30 days. To request deletion, email team@dmrmedia.org.

8. Your rights

You may at any time:

  • Disconnect Google — use the "Disconnect Google" button in your dashboard. This immediately revokes our access and deletes your stored tokens.
  • Request data export or deletion — email team@dmrmedia.org.
  • Revoke access via Google — visit myaccount.google.com/permissions and remove "DMR Media Lead Responder" at any time.

9. Children's privacy

This service is intended for real estate professionals and is not directed to individuals under 18. We do not knowingly collect data from minors.

10. Changes to this policy

We may update this policy from time to time. We will post the updated date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

Questions about this policy: team@dmrmedia.org
DMR Media · dmrmedia.org