Referral Loop
Security & Privacy

Your clients trusted you. We take that seriously.

Referrals carry names, phone numbers, price ranges and commission terms. Here's how Referral Loop protects them.

Who Can See What

Your records are yours

Your referrals are locked to your account. Another agent can't see them unless you share one with them.

Partners see only their referral

A receiving agent sees the referral sent to them, and the money terms stay yours to set. They never see your compliance checklist, deductions, change history, private notes or calls, and their own notes stay private from you.

You decide who sees your client

For each referral, choose who sees your client's contact details: everyone on it, only once the agreement is signed (the standard choice), only you, or people you pick. Notifications never show a client's details.

Your profile, only for agents who know you

Your profile is seen only by agents who already have your email. There's no public directory, and Referral Loop never suggests you to agents you don't know.

Signing In

A fresh code, not a reused password

Sign in with a 6-digit code we email you each time, or with Google. There's no password to guess or reuse unless you choose to set one.

Sign out everywhere else

Lost a laptop or used a shared computer? One button in Settings signs you out of every other device.

On your phone

Add Referral Loop to your home screen from your phone's browser. You choose which notifications it shows, and they never include a client's contact details.

Signing out stops notifications

When you sign out on a phone, that phone stops getting Referral Loop notifications.

Your Information, Kept Safe

Encrypted

Everything you send to and from Referral Loop is encrypted while it's sent and while it's stored.

Files in a private folder

Your documents are stored in a folder only your account can open. When you preview or download one, the link made for it stops working within minutes.

A history that can't be edited

Every change to a referral, client, agent or brokerage is recorded: who made it, when, and what it was before. No one can edit or erase that history.

We never see your card

Payments are handled by Stripe, a PCI DSS Level 1 certified payment processor. Your card number never touches our servers.

Only what each service needs

When Referral Loop reads a file for you, it sends only what's needed: a spreadsheet's headings and a few rows, or one page of a blank form. Nothing is saved until you check it. Every outside service, and what it receives, is listed in our Privacy Policy.

Error reports without your information

When something breaks, our error reports carry technical details only: no names, contact details or anything you typed.

Take everything with you

Download all of it any time from Settings: every list as a spreadsheet, plus your documents, by a link that works for 7 days. To close your account, email support@referralloop.us.

Limited access

Only Referral Loop's developer can reach stored information, and only to run and fix the service. We open your documents only when you ask us to, such as during a support request.

Electronic Signatures and the Law

Built to meet the ESIGN Act and UETA.

The federal ESIGN Act and the Uniform Electronic Transactions Act (UETA) give an electronic signature the same standing as ink when four things are true. Here is how Referral Loop handles each one.

Consent to Sign Electronically

Before anyone signs, they see and agree to an electronic signature disclosure. Their agreement is recorded with the signature. The disclosure covers getting a paper copy at no cost and how to withdraw consent.

Intent to Sign, by the Right Person

Each signer gets their own link and signs for themselves. The certificate records who signed, when, and from where. Each link expires after 7 days and stops working once the document is complete or cancelled.

The Signature Is Tied to the Document

Each signed PDF has a fingerprint only that exact file has. Change a character and it no longer matches. Anyone can check it at Verify a Document. Only the fingerprint is sent to check it; the file never leaves their device.

A Record Both Sides Can Keep

Signed agreements can't be edited or deleted, only archived. Everyone who signed can download the signed PDF and its certificate any time. Not even Referral Loop can change a signed document.

What the Certificate Records

For each signer: when it was sent, opened and signed, their internet address, device and browser, time zone, the version of the disclosure they agreed to, and whether they typed, drew or uploaded their signature.

Every Step Logged

Sent, opened, signed, declined, downloaded, resent, cancelled: each step is logged as it happens, and the log can only grow.

Some documents can't be signed electronically in some states. Check with your managing broker when you're not sure.

Found a security problem?

Email support@referralloop.us with "Security" in the subject. We look into every report.

Questions?

Email support@referralloop.us and we'll respond within one business day.