Kalven for IT and Security Teams
Kalven is a Chrome extension for commercial real estate brokers. It works inside the broker's own signed-in sessions on CoStar, Reonomy and TitlePro247, analyzes the properties the broker selects, and saves a ranked Excel or HTML report to the broker's computer. This page summarizes what an IT or security team needs to review and allow Kalven. The Privacy Policy is the authoritative and complete description.
Publisher and contact
- Publisher: KALVEN.AI, LLC
- Security and IT questions: ben@kalven.ai
- Chrome Web Store listing: Kalven, extension ID
eeeedfannlkihllonomgagibpnnnkidc
Domains to allow
| Domain | Purpose |
|---|---|
| kalven.ai, www.kalven.ai | Product website, Privacy Policy and Terms of Service. |
| api.kalven.ai | Kalven's service: sign-in, subscription status, and the analysis service. HTTPS only. The extension sends JSON requests here while a broker runs an analysis. |
Kalven also uses the broker's existing access to product.costar.com, app.reonomy.com and www.titlepro247.com. Payments go through Stripe Checkout and the Stripe Billing Portal.
What data goes where
- Analysis: for each property the broker analyzes, the extension sends the page content it read, plus the name, firm and specialty from the broker's profile, to api.kalven.ai over HTTPS. Kalven forwards it to its AI analysis provider under Kalven's own account and returns the result. The content exists on Kalven's servers only in memory while the request runs. It is never stored, logged, cached or used to train any model.
- Accounting: for each analysis request Kalven keeps a usage record (request ID, opaque account ID, model, status, cost and token counts, timestamps) with no property, contact or loan data. These records are deleted after 90 days.
- Account: sign-in email, subscription state and one per-report usage count. Card details stay with Stripe.
- Reports: generated in the browser and saved to the broker's Downloads folder. Report contents are not uploaded to Kalven.
- No advertising, analytics, data brokers or crash reporting.
Sub-processors: the AI analysis provider named in the Privacy Policy, Vercel (hosting and database), Stripe (billing), Resend (sign-in code email) and Retool (internal dashboards over account and usage metadata). See the Privacy Policy for the full list and details.
What stays on the broker's computer
The broker profile, report settings, email templates and a list of recent runs (counts, statuses and timestamps only) are stored in the extension's local storage. Property, contact and loan data are held in memory only during a session and are never written to disk by the extension, apart from the report the broker downloads.
Extension permissions
| Permission | Why Kalven needs it |
|---|---|
| tabs | Open and read CoStar, Reonomy and TitlePro247 tabs during an analysis. |
| scripting | Run Kalven's reading scripts on those three sites only. |
| storage | Keep the broker's profile, settings and recent-run list on this computer. |
| sidePanel | Show the Kalven interface in Chrome's side panel. |
| downloads | Save the finished report to the Downloads folder. |
| alarms | Keep a long analysis run going in the background. |
| tabGroups | Group the tabs Kalven opens under a "Kalven" label. |
| webNavigation | Recognize the TitlePro247 report tab that opens during a run. |
Host access is limited to product.costar.com, app.reonomy.com, www.titlepro247.com and api.kalven.ai. Kalven does not request access to other websites and does not read browsing on other sites.
Allowing Kalven at your firm
- Web filter or secure web gateway: allow
kalven.aiandapi.kalven.ai(category: business software). - Chrome policy: add extension ID
eeeedfannlkihllonomgagibpnnnkidctoExtensionInstallAllowlist, or force-install it withExtensionInstallForcelist. - Brokers sign in with a one-use 6-digit code sent by email from Kalven. Sign-in emails contain no sign-in links.
For a security questionnaire or anything not covered here, contact ben@kalven.ai.