1. Scope and roles
This Privacy Policy applies to classonebroker.com, app.classonebroker.com, broker workspaces, authorized transaction portals, communications, and support (the “Service”). The Service is provided by World Power Enterprises LLC under the Class One Broker name (“Class One,” “we,” “us,” or “our”). “Customer” means the brokerage or advisory organization that subscribes to or controls a workspace.
Class One acts as a controller for public-website visitors, contact and sales inquiries, Customer account administrators, security records, and our own billing and service operations. For seller, buyer, referral, advisor, employee, and transaction data submitted by a Customer, the Customer is generally the controller/business and Class One is its processor/service provider. Questions about a specific transaction should first go to the brokerage or advisor managing it.
2. Information we collect
- Account and organization information: name, business email, phone, title, firm, profile, plan, role, permissions, Google basic profile when selected, and authentication or MFA events.
- Contact and inquiry information: information submitted through our contact form, demo requests, support, or other business communications, including optional mobile number and SMS consent.
- Transaction information: contacts, relationships, seller and buyer details, deal notes, messages, tasks, financial records, documents, NDAs, offers, diligence, approvals, and activity.
- Connected-service information: data authorized from Microsoft 365, Google or another service, such as profile, files, email, message, calendar, event, attendee, and meeting-link data within the permissions selected.
- AI interaction information: authorized requests, permitted source material, tool actions, outputs, citations, reviews, and model or policy metadata.
- Voice and meeting information: broker command audio and, only where enabled after the required participant disclosure and consent, recordings, transcripts, summaries, and consent evidence.
- Usage and security information: IP address, device and browser data, request identifiers, sign-in/session events, feature activity, audit events, diagnostics, and abuse or incident signals.
- Signature information: for documents sent for e-signature, the signer's name, email, signing status, and the completed document returned by the signature provider.
Deal documents can contain sensitive information, such as tax identification numbers, bank account details, payroll records, or financial results. That information is supplied by the Customer or a deal participant, and we use it only to provide the Service as the Customer directs, never to infer characteristics about a person.
3. How we use information
- Provide, personalize, maintain, and support the Service.
- Authenticate users; enforce tenant, deal, role, purpose, consent, and document-access boundaries; and prevent abuse or unauthorized access.
- Process broker-authorized transaction workflows, communications, meetings, documents, financial analysis preparation, and AI requests.
- Respond to business inquiries, provide requested demonstrations, and communicate about a Customer relationship.
- Monitor performance, troubleshoot, audit sensitive actions, improve user-facing features, and satisfy legal obligations.
We do not sell personal information. We do not share Customer Data with other Customers. We do not use confidential transaction data for advertising or to train generalized third-party foundation models.
Where a law such as the EU or UK GDPR requires a legal basis, we rely on performing our contract with the Customer, our legitimate interests in running and securing a business-to-business service, compliance with legal obligations, and consent where we ask for it (for example, SMS or optional analytics). Consent can be withdrawn at any time.
4. Google user data and Limited Use
If a user chooses Google Sign-In, Class One uses basic profile data such as name, email address, account identifier, and profile image to create, authenticate, and secure the user's Class One account. Google Sign-In is separate from any optional Gmail, Calendar, Drive, or other Workspace authorization.
If a user separately connects Google Workspace features, Class One accesses only the minimum scopes shown in the Google consent flow. Data may include authorized messages and metadata, calendar events, attendees, availability, files selected for a deal, and meeting links. We use it only for prominent user-facing features the user requests, such as attaching authorized messages to a deal, preparing a draft, syncing a meeting, creating an event, or retrieving a selected file.
Class One Broker's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not sold, used for advertising, used to determine creditworthiness, or used to develop, improve, or train generalized or non-personalized AI or machine-learning models.
We transfer Google user data only to service providers needed to deliver the requested user-facing feature, for security, or where required by law, subject to appropriate restrictions. Human access is prohibited except with the user's specific permission for support, where necessary for security or abuse investigation, where required by law, or for appropriately aggregated internal operations. Users may disconnect Google through Class One settings or their Google Account permissions. We delete stored OAuth tokens after disconnection; transaction records already created under Customer control follow the Customer's retention settings and legal obligations.
5. Microsoft 365 data
A user may choose to connect a Microsoft 365 account. Class One then asks Microsoft for these permissions only: the user's basic profile, read-only access to OneDrive files and folders the user can open, and access to the user's Outlook mailbox to read messages and save drafts. Class One does not send email on the user's behalf and never asks for permission to change or delete files.
We use this data only for features the user asks for: choosing a OneDrive folder for a deal and copying its files into that deal, finding and filing emails that belong to a deal, and saving an email draft in the user's own mailbox for the user to review and send. Files and emails a user brings into a deal become part of that Customer's transaction records.
Microsoft 365 data is not sold, is not used for advertising, and is not used to develop, improve, or train generalized AI or machine-learning models. Connection credentials are stored encrypted. A user can disconnect at any time in Settings; the stored credentials are deleted when they do. Records already filed into a deal follow the Customer's retention settings and legal obligations.
6. AI processing
AI features receive only the deal-scoped information and tools authorized for the user's request. Source classification, tenant/deal boundaries, and approvals continue to apply. Providers process inputs to generate the requested output under service terms and data-use restrictions. We retain model, policy, citation, review, and audit metadata needed to operate and secure the feature. Google Workspace API data is never used to train generalized or non-personalized AI/ML models.
Files are read by Google Gemini. Only when Gemini cannot read a file is it sent to OpenAI as a backup. Neither reads a file while AI is switched off for the deal.
7. Mobile information, SMS, and OTP privacy
Users may separately opt into Class One Broker Account Security Messages for one-time passcodes, account-security events, and service-related verification. Consent is specific, optional, and recorded with the disclosed text and timestamp. Message frequency varies, generally one message per user request. Standard message and data rates may apply. Reply STOP to opt out or HELP for help.
Mobile numbers and text messaging originator opt-in data and consent will not be sold, rented, or shared with third parties or affiliates for their own marketing or promotional purposes.
We may disclose mobile information to communications carriers and service providers such as Twilio only to transmit, secure, troubleshoot, and document the requested program. We do not use OTP consent as consent for marketing, and a Customer may not repurpose it for another messaging campaign.
8. How information is disclosed
We disclose information only as reasonably needed to:
- provide hosting, authentication, storage, security, communications, document, support, and approved AI or integration services through contractually restricted providers;
- follow Customer-authorized deal access and communication instructions;
- protect the Service, users, or another person; investigate abuse; or respond to valid legal process; and
- complete a financing, merger, acquisition, or asset transfer subject to confidentiality, notice, consent where required, and continued policy protection.
The outside providers that handle personal information for the features described in this policy include Google (Gemini document reading, Sign-In, Maps, and Workspace when connected), OpenAI (backup document reading), Microsoft (Microsoft 365 when connected), DocuSign and SignWell (e-signature, through the Customer's own account), Resend (email delivery), and our hosting, database, storage, and SMS delivery providers. Customers may ask privacy@classonebroker.com for the current list.
When a user enters a business address, the Service shows a map from Google Maps. To draw it, the address is sent to Google, whose own privacy policy applies to that request.
9. Security
We use administrative, technical, and organizational controls designed for confidential transaction data, including encrypted transport, private storage, tenant and deal authorization, short-lived access, multi-factor authentication options, session revocation, malware scanning, logging, audit history, least privilege, and protected secrets. No security program can eliminate all risk. Customers must configure roles, permissions, access grants, and connected services appropriately.
If we learn that personal information we hold has been accessed or disclosed without authorization, we will investigate, take steps to contain it, and notify affected Customers without undue delay, and affected people and authorities where the law requires. Customers remain responsible for notices they owe to their own clients and deal participants.
10. Retention and deletion
We retain information for the period needed to provide the Service, follow Customer instructions, maintain security and audit history, satisfy the applicable order form, and meet legal obligations. Customers can export or delete records subject to permissions, retention, legal hold, and immutable-audit requirements. After account termination, data is deleted or anonymized on the schedule in the applicable agreement; backups expire in the ordinary cycle. Contact inquiries are retained only as long as needed for the relationship or legal recordkeeping.
11. Privacy rights
Depending on location, a person may have rights to access, correct, delete, receive, restrict, object to, or withdraw consent for personal information. For information tied to a transaction, contact the brokerage or advisor controlling that workspace. For Class One account, website, or contact information, email privacy@classonebroker.com. We verify requests and may preserve data that law, security, legal hold, or immutable audit obligations require.
If you are not satisfied with how we handled a request or your information, tell us at privacy@classonebroker.com so we can put it right. You may also complain to the data protection authority where you live or work.
12. U.S. state privacy rights
Residents of California and of other states with comprehensive privacy laws (for example Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and others as they take effect) may have the right to know what personal information we hold and how we use it, to receive a copy, to correct it, to delete it, and to opt out of its sale, its sharing for cross-context behavioral advertising, targeted advertising, or certain profiling.
- In the last 12 months we have collected the categories listed in section 2: identifiers and contact details, professional and business information, commercial and transaction records, internet and device activity, audio where voice or meeting features are used, and account log-in credentials.
- We do not sell personal information or share it for cross-context behavioral advertising, and we do not use sensitive personal information for purposes that would give a right to limit it.
- To make a request, email privacy@classonebroker.com from the address linked to your account, or tell us which address the request is about. We will confirm your identity before acting and respond within the time the law sets, generally 45 days. An authorized agent may act for you with your signed permission.
- If we decline a request, you may appeal by replying to our decision; we will answer the appeal within the time the law sets. We will not treat you differently for using any of these rights.
Many requests concern deal data that a brokerage controls. In that case we will refer the request to that Customer or help it respond.
13. Cookies and analytics
Class One uses strictly necessary cookies or similar storage to maintain sign-in, security, preferences, load balancing, and session integrity. Optional analytics will be described and, where required, activated only after consent. We do not use the Service for third-party behavioral advertising. See the Cookie Notice.
14. International processing
Class One and its providers may process information in countries other than the user's. Regional hosting and transfer safeguards are selected by contract and law. A Customer must not use the Service for information whose transfer is prohibited by applicable law or its own commitments.
Class One is based in the United States, and information is generally processed there. When we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland, we use a lawful transfer mechanism such as the European Commission's standard contractual clauses or the UK addendum to them.
15. Children
The Service is a professional business tool, is not directed to children, and may not be used by anyone under 18. We do not knowingly collect personal information from children.
16. Changes and contact
We may update this policy as the Service, providers, and legal requirements change. Material changes will be posted with a new effective date and communicated where required. Contactprivacy@classonebroker.comor use our contact page.