Privacy policy
Last updated October 26, 2026
This policy explains what Starmanack collects, why, who sees it, and what you can ask us to do with it. It covers the Starmanack app at app.starmanack.com, its browser extension, the client portals and links you share from it, and this website. Starmanack is operated by Ka Yee Chan, a sole proprietor based in California, USA (“we”, “us”).
What we collect
- Your account.You sign in with Google, which gives us your name, email address and profile photo. We never see your Google password. You can add business details: a business name and photo, a phone number, a contact email, a bio, your licence number, and your brand’s logo and colours.
- What you put in Starmanack. Your contacts and what you record about them (names, email addresses, phone numbers, social profiles, birthdays and other dates, family members, custom fields, photos of business cards), notes and voice notes, groups, transactions and their steps, tasks and notes, listings, documents and files, client portals, comparative market analyses, surveys, property tours, calendar events, goals, email templates and drafts.
- Your Gmail, if you connect it. See Google user data below.
- Billing. Your plan, whether your payments went through, and when your plan renews. Stripe holds your card; we never see its number.
- Where you open the app from.Each time you open the app, we record your IP address and the area it comes from: city, region, country, postal code and the rough coordinates of that area. If your browser lets the app read your device’s location, we record that too. Your browser asks you first, and you can say no.
- Technical records.Which pages and actions the app served, errors the app reports (such as a failed upload’s file name, type and size), and how long operations took. The app has no advertising or analytics trackers.
- The browser extension.When you use it to capture a listing, it reads that listing’s page and sends its details and photos to your account. It reads nothing else.
- This website.What you type in its forms (to book a demo or ask a question): your name, how to reach you, your question, and the page and campaign link you came from. Anonymous visit counts, which use no cookies and don’t identify you.
Your clients’ information
Most of what’s in Starmanackis about your clients and other people you work with, who haven’t signed up themselves. You decide what to put in and what to share; we hold it for you, to run Starmanack for you, and for no other purpose.
- When a client uses a portal, survey or market analysis link you send, we keep what they do there: their answers, messages, decisions and notes on listings, tour requests, and which parts of a portal they viewed and when. A portal keeps them signed in with a cookie for 30 days.
- Email tracking. On plans that include it, while it’s on in Settings, emails you send from Starmanackcarry a tiny image and links that tell you when they’re opened or clicked. We record only when and how many times, never the reader’s IP address, device or location.
- To show a contact’s picture, your browser may ask a public avatar service for one, using a scrambled (hashed) form of the contact’s email address.
If you’re someone’s client and want your information changed or removed, ask them, or email us at kayee@toopeasy.com.
Google user data
Connecting Gmail is optional, in Settings › Email. When you connect it, you give Starmanack permission to read, send and label email in your Gmail account, which it uses as follows.
- What we read and keep.Only email sent to or from an address on one of your contacts, from any date: its sender, recipients, subject, body, date and whether it’s read, and the names and sizes of its attachments. Other email is read only to see who it’s from and to, and is never kept. An attachment’s contents are fetched when you open it and kept only if you add it to your documents. We also keep your Gmail signature.
- What we do with it. Show each contact’s email history in Starmanack; send the email you write in Starmanack, from your own address; keep read and unread in step with Gmail; and read each email you receive from a contact with AI, to suggest tasks and new contact details for you to accept or dismiss (below).
- Who it goes to. Our hosting and database providers, to store it, and our AI provider, to read incoming email for those suggestions. Nobody else.
- What we never do.We don’t sell Google user data, use it for advertising, or use it to develop, improve or train generalised AI or machine-learning models, and neither does our AI provider. People don’t read it, unless you ask us to, it’s needed for security or to investigate abuse, or the law requires it.
- Keeping it safe. Your Gmail access is stored encrypted, and your email is shown only in your own account.
- Disconnecting.Disconnecting in Settings › Email deletes your Gmail access and signature at once. You can also remove Starmanack’s access from your Google Account’s security settings. Email already copied stays in your contacts’ history until you delete your account, or ask us to delete it.
Starmanack’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
AI
Some features send parts of your account to our AI provider, which sends back a result that Starmanack shows only to you. Each sends only what it needs:
- an incoming email from a contact, with that contact’s name, email addresses and phone numbers and their open transactions;
- a note you write, to suggest what it says about the client;
- a client’s survey answers;
- a photo of a business card, or of an open-house sign-in sheet, that you upload to add contacts;
- a purchase contract you upload, to fill in a transaction;
- a market analysis’s property and comparables, to draft its summary.
Voice notes are sent to a speech-to-text service to be written out. Neither we nor our AI provider use your information to train AI models. How many emails AI reads each month depends on your plan.
Cookies and browser storage
- The app uses cookies to keep you signed in, and a few short-lived ones while you sign in.
- A client portal uses one cookie to keep your client signed in to it.
- Your browser’s storage keeps settings such as your theme and colours and how a view is laid out, and whether the app has already asked for your location.
- This website sets one cookie, only if you pick a language at the bottom of a page, to remember your choice.
We don’t track you across other websites, so there’s nothing for Do Not Track signals to turn off.
How we use it
- To run Starmanack for you: your contacts, email, transactions, documents, portals and the rest.
- To run the AI features described above.
- To bill you for your plan.
- To answer you when you write to us, or when you use this website’s forms.
- To keep Starmanack secure and working: spotting misuse, and finding and fixing errors.
- To improve Starmanack, from how it’s used.
We don’t sell your personal information, we don’t share it for advertising, and Starmanack shows no ads.
Who sees your information
- You. Your account is yours alone.
- People you share with.A client with a portal’s link and passcode sees what you put in that portal, and your business details. Anyone with a market analysis or survey link sees that page. Someone you invite to a transaction sees the documents and notes you share there.
- Our service providers, who handle information only to provide their service to us: hosting, database, file storage and processing, AI, speech-to-text, the avatar service, and email delivery for this website’s forms.
- Stripe, which processes your payments under its own privacy policy. It receives your email address and account name.
- Google, when you sign in with it or use Gmail through Starmanack.
- The law. When the law requires it, or to protect someone’s safety or rights, or Starmanack’s.
We don’t look at what’s in your account unless you ask us to, or we need to in order to keep Starmanack working, secure, or within the law.
How long we keep it
- Your account and everything in itstay until you delete your account in Settings › Your data. That deletes your contacts, email, documents, files, portals, transactions and everything else, ends your subscription, and removes Starmanack’s Gmail access, straight away. You can download a copy of everything first, on the same page.
- Where you opened the app from: each record is kept for 48 hours. Your latest one is kept until you delete your account.
- Exports you download are kept for 7 days; records of AI requests, which don’t hold their content, for 14 days; timings of operations for 35 days.
- Website messages are kept as long as we need to follow up, and no longer than a year after our last exchange.
- Backups and logs kept by our providers can hold copies for a limited time after something is deleted.
- Stripe keeps payment records as the law requires.
Your rights
Wherever you live, you can ask us to show you the personal information we hold about you, send you a copy of it, correct it, delete it, or stop using it for a purpose you object to. Most of this you can do yourself in the app: edit or delete what you put in, download a copy in Settings › Your data, and delete your account there. For anything else, email kayee@toopeasy.com. We may need to check it’s you, and we’ll answer within 30 days.
In the European Union and the UK, we use your information to provide the service you signed up for, for our legitimate interests (security, fixing errors, and improving Starmanack), with your consent where we ask for it (such as your device’s location), and where the law requires. For your clients’ information, you decide why it’s used and we process it on your behalf. You can complain to your local data protection authority. We’re based in the United States, so your information is transferred to and processed there, where data protection law may differ from yours.
In California, you have the right to know what we collect, and to have it corrected or deleted, without being treated differently for asking. We don’t sell or share your personal information, as California law defines those words, and we don’t use it for targeted advertising.
Children
Starmanackis for real estate professionals and isn’t for anyone under 18. We don’t knowingly collect information from children. If you think a child’s information is in Starmanack, email us and we’ll delete it.
Security
Starmanackis reached only over an encrypted connection, your Gmail access is stored encrypted, and each account’s information is shown only to that account and the people it shares with. No service is perfectly secure, so we can’t promise it will never be breached.
Changes to this policy
When we change this policy, we change the date at the top. If a change matters, we’ll tell you in the app or by email before it applies.
Contact
Ka Yee Chan, California, USA. For anything about your privacy, email kayee@toopeasy.com.