Privacy Policy

A plain-words summary first, then the policy.

Last updated October 24, 2026.

The plain-words summary (not the policy; the policy is below)

• We collect what we need to run the service: your account, your practice transcripts and cards, your forms progress and answers, your assessments, and your production log if you use it.
• We keep the text of what you say. We keep the audio of a practice call only if you turn on the recording switch, so you can listen to your own calls. Those recordings are deleted when you ask us, and when your account is deleted.
• Your organization sees your training and practice records as described below. It never sees your dollar figures. An association or school sees them only after your brokerage's admin accepts the link.
• A course platform your school connects receives only a score and Passed or Not passed.
• Named providers process data for us. We list each one below.
• We do not sell personal information. We do not use it for targeted advertising. We do not use it to train AI models that others use.
• You can see, export and delete your data. Contact hello@10before10.com.

Privacy Policy

Effective October 24, 2026. 10BEFORE10, LLC ("10before10", "we") controls the personal information described here. Contact: hello@10before10.com, 561-264-7240, or 10BEFORE10, LLC, 700 NW 7th Drive, Boca Raton, FL 33486.

1. Who this covers and which laws apply. This policy covers everyone who uses 10before10™ or visits 10before10.com. We apply one standard everywhere, written to meet the US state privacy laws, including California's, and Canada's federal privacy law. Where a law gives you more rights, you have them. When your organization (a brokerage, association or school) provides your seat, we also process some data on its instructions, as section 3(d) explains.

2. What we collect. (a) Account: email address, language, time zone, the settings you choose, your organizations and roles, and, only if you enter it, your license number. You sign in with a one-time code to your email. We hold no password. (b) Practice calls: the transcript of the call, the scenario, and your card, including short quotes and grades. The voice conversation runs through our voice provider. We keep the text of what you say. We keep the audio of a practice call only if you turn on the recording switch, so you can listen to your own calls. Those recordings are deleted when you ask us, and when your account is deleted. Your recordings are never given to your organization. With the recording switch on, our team may listen to them to improve the practice prospect and the card; anything we keep from them for that work has your name and identifying details removed. (c) Forms training: which forms and sections you walked and for how long, quiz answers and scores, fill-in checks, and your answers to client questions (typed, or the text of a spoken answer) with the three scores and the feedback. (d) Assessments: for each attempt, an attempt record: the form and its version, start and submit times, the fixed questions served (the section, the client's question and who the client is), and for each answer: your answer text (typed, or the text of a spoken answer; the audio is not kept), whether you spoke it, the seconds taken and the time limit, three scores (accurate, plain, boundary), the feedback and a model answer, the AI model and rubric version used; then the attempt's score and pass or fail against your organization's pass mark. (e) Completions and certificates: when you completed a form, your highest quiz score, seat time, and the certificate id. Your license number appears on certificates and organization rosters only if you entered it. (f) Course platform launches (if your school uses one): the platform's identifier for you, your role there, the course and assignment titles and ids, the form, and the grade-service addresses. If your school's platform shares your email, it becomes your account email. We do not store your name from the platform. (g) Plan and activity: drills run, streaks, plan week, callbacks, objections logged, lines served. (h) Production log, only if you use it: hours, contacts, follow-ups, appointments, contracts, closings and, if you enter it, net commission. Dollar figures are encrypted with a key unique to you. (i) Payments: our payment providers handle your card. We receive the plan, amount, status and the provider's ids, never the card number. (j) Guest call (no account): a token, an email address only if you leave one, and a scrambled (hashed) form of your IP address for rate limits. (k) Messages to us: what you send us and your notification choices. If you allow notifications, a device token so we can send your reminders. It is deleted when you turn notifications off or delete your account. (l) Goal board: a picture you choose to add to your goal board (optional). (m) Security and audit records: sign-in events, organization actions (exports, links, reports) and grade posts to course platforms. (n) Waitlist (before you have an account): your name, email address, state or province, whether you are an agent, a team or a brokerage, your language, your consent, the page you came from and any referral code, and a scrambled (hashed) form of your IP address to limit repeat sign-ups. We use it to confirm your place on the list and to send your invitation, and we keep it in our customer list (HubSpot) for that purpose. It is stored on our platform with Cloudflare, which also runs the check against automated sign-ups on the form. The confirmation and the invitation are sent through our email delivery provider, Postmark. The list sends two emails at most: the confirmation when you join and the invitation when your turn comes. We keep your entry until you ask us to remove it; if you create an account, it stays with your account and is deleted when your account is deleted. To be removed at any time, reply to either email or write to hello@10before10.com. (o) Scripts you upload and lines you suggest: the title and text of a script, dialog or handler you upload, and any line you suggest for the library with your choice about credit. Scripts you upload are private to you (Terms section 7(e)). They are sent to our AI providers only to run your own practice calls. We never add them to our library, show them to anyone else, or use them to train an AI model. (p) Your coach, only if you name one: your coach's name and email address, what you chose for your weekly summary, and whether your coach may see your cards (Terms section 5F). We do not use analytics or advertising trackers in the app. On our website, Google Analytics runs only if you allow it (see Cookie choices); it measures visits and page use, with its advertising features off.

3. How we use it, and why. (a) To provide the service: run calls, write cards, turn speech into text, grade answers and assessments, issue certificates, keep your history. (Our contract with you.) (b) To bill, and to prevent fraud and abuse. (Contract; legitimate interests.) (c) To improve the method and the service, using aggregated and de-identified data. With the recording switch on, our team may also listen to your practice-call recordings for this purpose. We do not use your transcripts, answers or cards to train any AI model that others use. (d) To give your organization its views and reports, limited as section 4 says. (Our contract with the organization; you are told before you take a seat.) (e) To send messages you turn on, and account messages such as trial and renewal reminders. No marketing text messages. (f) To meet legal duties and protect rights and safety.

4. Who sees your data.

• You: everything about you, including every assessment attempt.
• Your organization's coaches, managers and admins: your practice activity, streaks and skill movement; your forms progress, client-question answers, assessment attempts in full, completions and certificates; your email and license number if entered. Never your production-log dollar figures.
• An association or school your brokerage is linked to: the same forms and assessment records, through its instructor view and CSV exports, only after an admin of your brokerage accepts the link, and only while the link lasts. Also an aggregate pilot report with no names, no dollars and no answer text. Never your practice calls or dollar figures.
• A coach you choose: only if you name your coach and turn on "Let my coach see my cards". Your coach sees your practice week, your cards and the counts you chose for your weekly summary, and a transcript only for a card you share with its transcript. Never your dollar figures, your uploaded scripts or other members. You can turn it off at any time, and access ends at once.
• A course platform your school connects: only the platform's own identifier for you, your highest score out of 100, the time, two status words and "Passed" or "Not passed". No answers, no transcripts, no section scores, no seat time, no license number, never our member id or your email.
• Anyone with a certificate id: the organization, the title, the date and whether it is valid. Never your name or email.
• The public: nothing else. Results are never published.
• Our service providers (below), only to do their job for us.
• A buyer of the business, with notice to you; and authorities, when the law requires.

Our service providers.

5. Where data is processed. Mainly in the United States. If you use the service from outside the United States, your data is transferred to the United States.

6. How long we keep it.

• Account, practice transcripts, cards, forms progress, assessment attempts, certificates, production log, the goal-board picture and the device token: while your account exists.
• When you delete your account, or ask us to: your practice history, cards, forms progress, assessment attempts, course-platform records and account details are removed from our live systems within one day, and the account is left without a name or email. Your certificates are removed too, so a certificate id no longer verifies after that.
• Guest call (no account): if you leave no email address, the call and its card are removed within two days. If you leave an email address and do not subscribe, the call, the card, the emails to that address and the address itself are deleted within one day after the call turns 30 days old.
• Waitlist entry: until you ask us to remove it; if you create an account, until the account is deleted.
• Scripts you upload: until you delete them; a deleted upload is deleted at once, and all of them go with your account.
• Backups: nightly, kept 30 days. Deleted data leaves the backups within 30 days.
• Account billing records: as tax and accounting law requires.
• Copies your organization exported (CSV files, printed reports) are the organization's own copies, kept under its own rules. Some states require continuing-education providers to keep course records for years; that duty is the provider's, on its own copy.
• Grades already in a school's course platform stay there under the school's rules.

7. Your rights. Wherever you live, you can: see what we hold about you; get a copy in a usable format; correct it; delete practice data or your whole account; turn off any message; and object to processing based on legitimate interests. Use Settings, or email hello@10before10.com. We answer within 30 days (45 where a law allows and we tell you). We do not treat you differently for using a right. You can appeal our answer by replying to it. If your seat is through an organization, you can also ask its admin. An organization's admin can export its own records at any time; that export never includes dollar figures or practice-call transcripts. We do not sell personal information, share it for targeted advertising, or use it for profiling with legal or similar effects.

8. Children. The service is for adults in a licensed or professional role. We do not knowingly collect data from anyone under 18, and we delete it if we learn we have.

9. Security. Here is how we protect your data, in plain words. Sign-in by one-time code, no passwords. Account data, call records and files are stored with Cloudflare, in its D1 database and R2 storage, encrypted at rest (AES-256) and in transit (TLS). Encryption in transit on every connection. Dollar figures encrypted again with a per-member key. Every database query checks that data stays inside its own organization. Who can see what is listed in section 4: your organization sees only what that section names, and never your dollar figures. Organization actions are recorded. Test sign-ins work only for our own demonstration accounts. No card data reaches our systems. No system is perfectly secure. If a breach of security affects your personal information, we notify you, and the regulators the law names, as the law of the state or province where you live requires and within its deadline. Wherever you live, Florida's rule is our floor: we notify you no later than 30 days after we determine that a breach occurred or have reason to believe one occurred (s. 501.171, F.S.).

10. Cookies. See Cookie choices. Strictly necessary cookies always; analytics cookies only after you allow them; no advertising cookies.

11. Changes. We post changes here with the date. For material changes we email you first.

This page is also published in Spanish. If the two versions differ, the English version governs.