Privacy Policy

November 2026

Your clients are yours

Your client data is encrypted in transit and at rest. The most sensitive parts (notes, family details, finances, addresses, and the emails in a mailbox you connect) are separately encrypted, so even a copy of the database can’t read them. Your broker can’t see your Driveway.

Signing in

Your password is stored only as a one-way hash; nobody at Driveway can read it. When you choose a password we check it against lists of passwords exposed in other companies’ breaches, by sending only the first five characters of a scrambled form of it, never the password. Face ID stays on your device.

What we keep about how you use it

We record which screens you open and which actions you take (for example, signing in, adding a person or sending an email), and when, so we can see how Driveway is used and fix what gets in the way. The Driveway team sees this for each account. We never record what you type, what an email says, or what is in a document or a client’s file. Screen records are deleted after 13 months.

When you send us feedback, the Driveway team is emailed your name, your words, the screen you were on and whether you attached a screenshot.

Smart features

Smart features start switched off, and stay off until you turn them on in Set Up, on Home or in Settings. You can switch them off at any time.

Our promise: Driveway never sells your data and never uses it to train AI. That is ours to keep, whatever company does the work.

Anthropic, the company behind Claude, writes your drafts, picks comps for your CMAs, reads a contract when you ask it to, words your morning brief, suggests next steps in your evening roundup, fills in a new client from what you tell it, reads the columns of a file you bring in, and answers you in Ask Driveway. Driveway sends it the details of the clients a request is about, and the answer comes straight back. That can include a client’s name, contact details, address, your private notes about them, and the text of emails between you.

ElevenLabs, a speech company, runs live voice calls with your co-pilot. During a call it hears everything you say, and Driveway sends it the answers to read aloud, which can name your clients and their details. ElevenLabs uses Google’s Gemini to work out what you asked. A call only starts when you tap to start one, and calls are off whenever smart features are off.

What their terms and our settings say: ElevenLabs is set to keep no recording and no transcript of any call made from 23 October 2026; it keeps only that a call happened, when, and for how long. ElevenLabs says its agreements forbid Google from training its AI on your calls, and Anthropic’s business terms say it does not train its AI on what Driveway sends. Driveway keeps nothing beyond your own records.

Never sent: children’s and grandchildren’s names, what a home sold for, and anything belonging to a client your request wasn’t about. A document’s words go only when you tap “Read it with AI” on that one document, with social security, bank and card numbers blanked out first. A spreadsheet of deals goes only when you tap to have it read; a contact list sends only its heading row.

Done on our own server: voice notes and spoken commands are turned into text on Driveway’s own server, and the recording is deleted once it has been read. Reading a document without AI also happens on Driveway’s own server. Typing by voice into a text box uses your phone’s or browser’s own speech service.

With smart features off: nothing about your clients leaves Driveway, and live voice calls stop. Ask still finds people by name, typing to your co-pilot still works, your brief is built from your deals, tasks and calendar without reading email, and messages fall back to the built-in templates.

Your vendor lists

Your vendors (inspectors, lenders, title and the rest) are kept in your own list: name, company, trade, phone, email and the area they serve. You add them by hand, from a spreadsheet, or from your phone by sharing a contact card file; only the contacts you tick are saved, and Driveway never reads your phone’s address book on its own. When you ask it to suggest trades, only each ticked contact’s company and job title go to Anthropic, and only with smart features on.

A transaction coordinator keeps a list of her own, which only she sees. She sees an agent’s list only when that agent has given her access, and only as far as that access reaches. When she puts one of her own vendors on an agent’s deal, a copy goes into that agent’s list.

Agents a coordinator works for who are not on Driveway

A transaction coordinator can add an agent she works for who is not on Driveway: a name, an email address and, if she chooses, a phone number. The name and phone number are encrypted; the email address is kept so her emails reach the agent and so the agent can make her own account later. That record is the coordinator’s, opens nothing in anyone’s account, and is deleted when she removes the agent or her account.

When you create an account you say whether you are an agent or a transaction coordinator. That choice is kept with your sign-up until you confirm your email, and only decides which screen you start on; no other information is collected for it.

Each email she sends carries a link to one deal. The page it opens shows the street, town, stage, key dates, checklist, documents and what she has asked for; never a price, a client’s name or contact details. Driveway stores only a scrambled form of the link, records how many times it was opened and when, keeps the agent’s answers and uploaded files on the coordinator’s deal, and counts visits per internet address to stop abuse. If the agent makes her own Driveway from the link, her account is linked to that record and the coordinator’s deals for her appear in her Driveway too, as her deals; they stay in the coordinator’s as well.

Notifications

Every kind of notification starts on, by email and on any phone or computer you allow, and you can turn each one off in Set Up or Settings. Nothing reaches a device until you allow notifications on it. When you do, its browser gives Driveway an address to send to, and each notification passes through that browser’s own delivery service (Apple, Google, Microsoft or Mozilla) on its way to you.

Your choices

You can export or permanently delete any client’s data at any time. Backups are encrypted and kept offsite.

Questions

Use “Send feedback” in the app and a person will answer.