Privacy Policy
PRIVACY POLICY
THE CORE OPERATING SYSTEM™
Operated by THE CORE OPERATING SYSTEM, LLC
Effective Date: November 11, 2026
1. Introduction
THE CORE OPERATING SYSTEM™ is operated by THE CORE OPERATING SYSTEM, LLC ("Company," "we," "us," or "our"), a Utah-based limited liability company committed to protecting the privacy and personal information of our customers and users.
This Privacy Policy explains how we collect, use, store, share, and protect information when you access or use our website, mobile applications, online real estate training courses, coaching programs, customer relationship management (CRM) software, and related services (collectively, the "Services").
Our mobile application utilizes technology provided by GoHighLevel (HighLevel), which supports CRM functionality, contact management, communications, and other business tools.
This Privacy Policy applies to information we collect directly from our customers and to personal information processed through our Services, subject to the distinctions described below.
By using our Services, you acknowledge the data practices described in this Privacy Policy.
2. Information We Collect
Depending on how you interact with our Services, we may collect the following information:
Personal and Account Information
First and last name
Email address
Phone number
Mailing or business address
Real estate brokerage or company information
Account credentials and profile information
Account preferences and settings
Purchase and Subscription Information
Course purchases and enrollment information
CRM subscription details
Billing and transaction records
Payment status and subscription history
Refund and cancellation requests
Payments may be processed through secure third-party payment providers. We may receive transaction details and limited payment-method information without directly storing complete credit card numbers.
Training and Productivity Information
Course enrollment and progress
Training activity and completion records
Business goals and productivity metrics
Daily routines and accountability activity
Task completion and scheduling information
Coaching and mastermind participation
Technical and Device Information
Internet Protocol (IP) address
Browser type and operating system
Device identifiers
Application version
Login and usage activity
Diagnostic and performance information
Cookies and similar technologies
Communications
Customer support inquiries
Information submitted through website forms
Account-related communications
Feedback and correspondence
Messages and other information processed through authorized CRM features
3. Mobile Device Contacts and Contact Importing
Our mobile application may allow authorized users to import contacts from their mobile devices into their CRM accounts.
Contact Access and Permission
When you choose to use contact-importing features, the application may request permission to access contact information stored on your device.
Depending on the permissions granted and the features available, imported information may include:
Contact names
Phone numbers
Email addresses
Mailing addresses
Business or company information
Other contact details supported by the import feature
Contact access is optional and is requested to support the contact-importing functionality selected by the user.
You may decline or revoke contact permissions through your device settings.
Declining contact access may limit certain contact-importing features but does not necessarily prevent use of other available Services.
How Imported Contacts Are Used
Imported contacts may be used to:
Organize and manage professional relationships
Create and update CRM contact records
Track leads and business opportunities
Schedule follow-up activities
Manage appointments and communications
Support other user-directed CRM functions
THE CORE OPERATING SYSTEM™ does not use customer-imported phone contacts to create its own independent marketing database or send promotional communications on behalf of THE CORE OPERATING SYSTEM™ without appropriate authorization.
Contact Ownership and Control
Users retain their applicable rights to contact information they lawfully import into the CRM.
Importing contacts does not transfer ownership of those contacts to THE CORE OPERATING SYSTEM, LLC.
Users are responsible for ensuring that their collection, storage, and use of contact information comply with applicable laws and professional obligations.
Contact Storage and Processing
Imported contact information may be transmitted to and stored through HighLevel's CRM infrastructure and its authorized technology providers.
Information may be processed as necessary to provide the requested CRM features, maintain security, troubleshoot technical issues, and fulfill applicable legal obligations.
Revoking Contact Access
Users may revoke device contact permissions at any time through their device settings.
Revoking permission prevents future access through that permission but does not automatically remove contacts previously imported into the CRM.
Previously imported contacts may be managed or deleted through available CRM functionality.
4. CRM Customer Data
Our CRM allows real estate professionals to store and manage information about their leads, clients, prospects, and other professional contacts.
This information may include contact details, property interests, transaction information, communication history, notes, appointments, and sales pipeline records.
Our customers determine the purposes for which they collect and use this information.
When processing CRM data on behalf of our customers, THE CORE OPERATING SYSTEM, LLC generally acts as a service provider or data processor, while the customer remains responsible for determining the lawful purposes of processing.
THE CORE OPERATING SYSTEM, LLC does not acquire ownership of customer contact lists simply because they are stored within our Services.
We do not sell customer-uploaded CRM contact databases as standalone commercial products.
Individuals wishing to exercise privacy rights regarding information maintained by a real estate professional should generally contact the professional or business responsible for that information.
We will assist with appropriate requests as required by law and applicable agreements.
5. How We Use Personal Information
We may use personal information to:
Create and maintain user accounts
Provide purchased training courses
Deliver CRM and mobile application functionality
Process payments and subscriptions
Track educational progress
Provide coaching and customer support
Manage appointments and communications
Improve our website and software
Monitor system performance and security
Prevent fraud and unauthorized activity
Respond to customer inquiries
Comply with legal obligations
Send promotional communications when permitted by applicable law
We do not use customer-uploaded CRM contact information for our independent marketing campaigns without appropriate authorization.
6. Third-Party Technology Providers
THE CORE OPERATING SYSTEM, LLC utilizes third-party technology providers to operate and support its Services.
These may include providers responsible for:
CRM infrastructure and data hosting
Mobile application functionality
Payment processing
Email and SMS delivery
Calendar and scheduling integrations
Website hosting
Analytics and performance monitoring
Customer support and security services
GoHighLevel (HighLevel)
THE CORE OPERATING SYSTEM™ utilizes GoHighLevel (HighLevel) as a technology provider supporting CRM functionality, contact management, communications, workflow automation, and mobile application services.
Information entered or imported into our CRM may be transmitted to and processed through HighLevel's infrastructure and authorized service providers.
HighLevel's processing activities are subject to its applicable agreements and privacy practices.
Payment Processing
We use third-party payment processors to handle course purchases and recurring CRM subscription payments.
Payment information is processed according to the payment provider's applicable security practices and privacy policies.
We may receive limited transaction information necessary for accounting, customer support, subscription management, and fraud prevention.
7. How We Share Personal Information
We may share personal information with authorized service providers when reasonably necessary to operate our Services.
We may also disclose information:
With your direction or authorization
To provide requested products or services
To comply with applicable laws or legal processes
To investigate fraud or security incidents
To protect legal rights and platform security
To professional advisors under appropriate obligations
In connection with a merger, acquisition, or business transfer, subject to applicable law
We do not sell customer-imported CRM contact lists to data brokers or unrelated businesses for their independent marketing purposes.
Some advertising or analytics technologies may constitute a sale or sharing of personal information under applicable privacy laws. Where required, we will provide appropriate disclosures and opt-out mechanisms.
8. Email, SMS, and Communication Privacy
Our Services may include email, text messaging, and automated communication tools.
Users are responsible for obtaining any legally required consent before sending marketing messages, automated text messages, or other regulated communications.
Importing a phone number into the CRM does not, by itself, establish permission to send automated marketing messages.
THE CORE OPERATING SYSTEM™ may send account-related communications, including purchase confirmations, subscription notices, security alerts, and service updates.
Where required, marketing communications will be sent only with appropriate consent.
Users may unsubscribe from promotional emails using the unsubscribe instructions provided.
Where supported, recipients may opt out of promotional SMS messages by replying STOP.
We do not treat acceptance of our Terms & Conditions as blanket consent to receive automated marketing text messages.
9. Mobile Application Permissions
Depending on available features, our mobile application may request access to:
Contacts: To import and manage selected contact information within the CRM.
Camera: To support authorized image capture, document uploads, or related features.
Photos and Files: To upload authorized documents, images, or other materials.
Notifications: To provide reminders, account alerts, and relevant application notifications.
Calendar: To support scheduling and appointment management, where available.
Permissions are requested through applicable device or operating system controls.
Users may manage permissions through their device settings.
Certain features may not function if required permissions are disabled.
The permissions actually requested depend on the application's installed version and enabled functionality.
10. Cookies and Analytics
Our website and applications may use cookies, analytics tools, and similar technologies to:
Maintain user sessions
Remember preferences
Support website functionality
Understand website traffic
Monitor performance
Improve user experience
Support advertising activities, where applicable
Users may manage certain cookie preferences through browser settings or available consent tools.
Where required by applicable law, we will obtain consent for nonessential tracking technologies or provide appropriate opt-out options.
11. Data Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, misuse, alteration, loss, or disclosure.
Security measures may include:
Account authentication and access controls
Restricted access to customer information
Secure communications and infrastructure
Monitoring and security practices
Safeguards implemented by authorized technology providers
No electronic system can guarantee complete security.
Users are responsible for protecting account credentials and notifying us of suspected unauthorized access.
We will evaluate and respond to security incidents according to applicable legal requirements.
12. Data Retention
We retain personal information for as long as reasonably necessary to provide our Services, maintain accounts, fulfill contractual commitments, and comply with applicable legal obligations.
Retention periods may vary depending on the type of information and the purpose for which it is processed.
Certain billing, transaction, security, and legal records may be retained after account closure.
When information is no longer reasonably necessary, we will delete, deidentify, or otherwise dispose of it according to applicable requirements and retention procedures.
Information stored in backup systems may remain for a limited period before deletion.
13. Account Deletion and Data Removal
Users may request account deletion or removal of eligible personal information by contacting:
Where available, users may also manage or delete information through account settings or CRM tools.
We will review and process verified requests according to applicable law.
Certain information may be retained when necessary to comply with legal obligations, resolve disputes, prevent fraud, or maintain security.
Canceling a monthly CRM subscription does not automatically cancel separately purchased lifetime course access.
Deleting an entire account may affect access to previously purchased course materials. We will explain applicable consequences when appropriate.
14. Your Privacy Rights
Depending on your state or country of residence and applicable law, you may have rights to:
Request access to eligible personal information
Request correction of inaccurate information
Request deletion of eligible information
Obtain a portable copy of certain information
Opt out of qualifying sales or targeted advertising
Withdraw consent where applicable
Exercise additional rights provided by law
These rights are subject to applicable eligibility requirements, exceptions, and verification procedures.
To submit a privacy request, contact:
You may also call 435-626-4040.
We may request information reasonably necessary to verify your identity before processing a request.
We will respond within the time limits required by applicable law.
Where required, we will provide a process to appeal denied privacy requests.
15. Utah Privacy Laws
THE CORE OPERATING SYSTEM, LLC is organized under the laws of the State of Utah.
We comply with applicable federal and state privacy and consumer protection laws.
The Utah Consumer Privacy Act, Utah Code Title 13, Chapter 61, establishes privacy requirements for businesses meeting specified statutory thresholds.
To the extent the Act applies to our operations, we will comply with its applicable requirements concerning privacy notices, consumer rights, data security, sensitive information, and qualifying data sales or targeted advertising.
Additional state privacy laws may apply depending on where our customers reside and the nature of our data processing activities.
Nothing in this Privacy Policy limits rights that cannot legally be waived.
16. Children's Privacy
Our Services are intended for individuals age 18 or older.
We do not knowingly collect personal information directly from children under 13 through our Services.
If we become aware that personal information has been collected from a child under 13 without required authorization, we will take appropriate steps to delete the information or otherwise comply with applicable law.
Parents or guardians may contact us regarding concerns about children's personal information.
17. International Data Processing
Our Services are operated from the United States.
Personal information may be processed or stored in the United States or other jurisdictions where authorized service providers operate.
Where applicable, international transfers will be handled in accordance with relevant legal requirements.
Users outside the United States may have additional privacy rights under their local laws.
18. Third-Party Websites and Integrations
Our Services may contain links to third-party websites or integrate with external software and services.
These third parties may have their own privacy policies and terms.
We encourage users to review applicable third-party policies before providing personal information.
19. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our Services, technology, business practices, or legal obligations.
Updated versions will be posted on our website with a revised effective date.
Where required by law, we will provide additional notice or obtain consent before material changes take effect.
20. Contact Information
If you have questions about this Privacy Policy, personal information, account deletion, or privacy-related requests, please contact:
THE CORE OPERATING SYSTEM, LLC
Operator of THE CORE OPERATING SYSTEM™
Email: [email protected]
Phone: 435-626-4040
Mailing Address:
965 S 100 W #104
Logan, Utah 84321
United States
THE CORE OPERATING SYSTEM™ is committed to responsible data practices, transparency, and protecting the trust of the real estate professionals who use our training programs and technology services.
COMPANY
LEGAL
© 2026 THE CORE OPERATING SYSTEM, LLC. All Rights Reserved.