Sarah Lite
Sarah Lite Privacy Policy
This page explains how Sarah Lite works. It is not legal advice.
Effective October 19, 2026
Who this covers
This policy describes Sarah Lite, the invitation-only rental inquiry assistant from NextGen Fusion AI, as it works today. It covers renters who text a listing code, owners or authorized residents who enroll a listing, and people who use the early-access form. Questions, deletion requests, and incident reports go through the Contact form on this website.
Information from renters
When a renter texts the shared number about a live listing, we keep the phone number, the message content, the name they give, the move-in date they give, and the showing time they request, for that conversation. We do not ask for biometrics, government IDs, financial account numbers, medical information, income, credit, criminal history, immigration status, or household composition. If a renter sends that kind of information, Sarah Lite does not store the sensitive text and tells them not to send it. A text that is only an unknown code is not stored with the phone number.
Information from owners
From an owner or authorized resident we keep the name, email, alert phone, the authority they select, sublease permission when they are a leaseholder, listing facts they approve, showing times they enter, and the consents they check on the enrollment page. An administrator cannot check those boxes for them. The street address may be stored for the owner and is not placed on the public listing page. The public page shows the neighborhood.
Early access
The early-access form stores the name, email, optional phone, optional note, and any campaign parameters that were in the link. In production that form is saved only when the database is configured. It does not publish a listing.
Vendors
Text messages are sent and received through Twilio. Listing, consent, and message records are stored in Supabase. The website is hosted on Vercel. Administrator sign-in uses Clerk. The product and listing pages can send page-view events to PostHog with the page path, listing code, and campaign parameters. Those events do not include the text of a message or a full phone number. Sarah Lite pilot replies are assembled from approved listing facts and templates. They are not sent to Azure OpenAI. The separate Sarah AI product can use Azure OpenAI. Sarah Lite does not send showing requests to a calendar provider.
Sharing with the poster
If the owner opted in to text notices and has not stopped messages, we can share the renter name, phone number, requested time, and a shortened version of a question with that owner. We do not share one owner's conversation with another owner. An open question is also kept on an administrator queue.
Retention
An active conversation is kept while the listing stays published. After a listing is expired, withdrawn, or archived, the conversation can be deleted or de-identified after 30 days unless a preservation hold is set. Suspended listings are hidden, and their conversations are kept until the listing is expired, withdrawn, archived, or the hold ends. The renter phone number is removed with that conversation. STOP records are kept so the number is not texted again. Unknown-code attempts are kept without the phone number. Owner publication authorization is kept while the owner participates and for 24 months after participation ends. Consent and compliance logs are kept for 4 years. These periods are the current product settings. The cleanup job does not run until an operator approves it.
Security
Database access for these records is limited to the service role. Public visitors do not get a database key. Admin tools require a signed-in administrator. Enrollment links are single-use and expire. Application logs for texts use the last four digits of a phone number, a message type, and a correlation id. They do not include the message body.
Consent and deletion
An owner can refuse or skip text notices on the enrollment page. Texting STOP opts that phone number out of both products on the shared number. An enrolled owner's STOP also pauses that owner's published listings until START or UNSTOP. A renter's STOP does not pause a listing. Publication consent can be revoked with a new enrollment link issued for revocation, and publishing then fails. Use the Contact form to ask for deletion. A deletion pass does not delete the STOP record. It does not run on a schedule until that job is approved.
Incidents
If we learn of a security incident that affects personal information, we investigate it, contain it, and notify affected people and regulators when the law requires notice. Report a concern through the Contact form.
SMS
NextGen Fusion AI operates NextGen Sarah Lite. Msg frequency varies (usually 2–6 msgs per inquiry). Msg & data rates may apply. We do not sell or share SMS opt-in data or personal information with third parties for marketing purposes.