Privacy Policy

Samson University is a video learning platform operated by Samson Properties for real estate agents, staff, and authorized users. The Service provides training videos, playlists, bookmarks, watch progress, and optional push notifications about new or relevant content.

By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

We collect information in the following categories:

Account and identity information

• Email address and, when available, name — provided when you sign in with a one-time passcode (OTP) sent to your email, or when you arrive via Samson's single sign-on (SSO) integration (Cardinal Nest).
• Internal user identifier — assigned or linked to your account in our database to provide the Service and enforce access rules (for example, featured content eligibility).

Authentication and session data

• On the website, we use browser cookies to maintain your signed-in session (for example, user ID, email, and display name).
• On mobile apps, we store access and refresh tokens locally using your device's secure storage (Expo Secure Store) so you can stay signed in. Refresh tokens are also stored on our servers in hashed form.
• One-time passcodes used for email sign-in are stored temporarily on our servers until they expire or are used.

Learning activity and preferences (mostly on-device)

• Watch progress, saved videos, and (on web) liked videos — stored locally on your browser or device (localStorage on web; AsyncStorage on mobile). This data is not synced across devices unless we introduce server-backed sync in a future update.
• Catalog interactions — such as videos viewed, search terms, and filters applied while using the app, as needed to deliver the Service.

Push notifications (mobile, optional)

• If you grant notification permission, we collect an Expo push token and your device platform (iOS or Android) to send engagement notifications (for example, reminders or alerts when new training videos are published). You can deny permission or disable notifications in your device settings.
• Push tokens are removed when you sign out (best effort) or when you unregister from notifications.

Technical, diagnostic, and usage data

• Website analytics — aggregated page views and performance metrics via Vercel Analytics on public web pages (admin pages are excluded).
• Mobile crash and error reporting — when enabled, Sentry may receive crash reports, stack traces, app version, and related diagnostic data to help us fix issues. Product analytics events may be recorded as Sentry breadcrumbs when crash reporting is active.
• Server logs — our hosting provider may log IP addresses, request timestamps, and error details for security and reliability.
• Embedded video providers — when you play YouTube-hosted content, YouTube may collect information according to Google's Privacy Policy. We use privacy-enhanced embed settings where available.

Information we do not intentionally collect

The Service is not designed to collect precise geolocation, contacts, photos, health data, payment card numbers, or government ID numbers. Please do not send sensitive personal information through support channels unless we ask for it to resolve your request.

We use the information described above to:

• Authenticate you and maintain your session;
• Deliver video content, playlists, search, and personalized library features;
• Enforce content access rules (for example, featured-only videos);
• Send optional push notifications you have permitted on mobile;
• Operate, secure, debug, and improve the Service;
• Respond to support requests and comply with applicable law.

We do not sell your personal information. We do not use your information for third-party advertising or cross-app behavioral advertising.

We share information only as described below:

• Service providers who help us operate the Service, under contracts that require them to protect your data, including:
  • Supabase (database and file storage hosting);
  • Vercel (website hosting and analytics);
  • Resend (transactional email for sign-in codes);
  • Expo (push notification delivery infrastructure);
  • Sentry (optional mobile crash reporting);
  • YouTube / Google (embedded video playback);
  • Cardinal Nest (SSO authentication, when you use that sign-in path).
• Samson Properties affiliates and administrators — authorized staff who manage users, content, and platform settings.
• Legal and safety — when required by law, legal process, or to protect the rights, safety, and security of Samson, our users, or others.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to continued protection of personal information.

• Account records are retained while your account is active and as needed to provide the Service.
• OTP codes expire shortly after issuance and are deleted when no longer needed.
• Mobile refresh sessions expire after a limited period (currently 30 days, extended on use) unless revoked at sign-out.
• Push tokens are deleted when you sign out, unregister, or when we no longer need them to deliver notifications.
• On-device watch progress and saved lists remain on your device until you clear app data or uninstall the app.
• Server and crash logs are retained for a limited period appropriate for security and troubleshooting, then deleted or aggregated.

We use administrative, technical, and organizational measures designed to protect personal information, including encrypted connections (HTTPS), hashed storage of mobile refresh tokens, secure device storage for mobile session tokens, and access controls on backend systems. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

• Sign out — ends your session on the current device and removes mobile push registration (best effort).
• Notifications — control permission in iOS or Android system settings.
• Local data — clear browser site data (web) or app storage / reinstall the app (mobile) to remove on-device watch history and saved lists.
• Access, correction, or deletion — contact us using the details below. We will respond in accordance with applicable law. If you are a California resident, you may have additional rights under the CCPA/CPRA (access, delete, correct, and opt out of sale/sharing — we do not sell personal information).

Samson University is intended for authorized Samson Properties agents, staff, and related professional users. The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, please contact us and we will take steps to delete it.

Samson Properties is based in the United States. If you access the Service from outside the U.S., your information may be processed in the U.S. and other countries where our service providers operate, which may have different data protection laws than your country.

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Material changes may also be communicated through the Service or by email where appropriate. Continued use after changes become effective constitutes acceptance of the updated policy.

For privacy questions, requests, or complaints, contact us at: