RealEstateAI

Privacy Policy

Last updated: May 31, 2026

1. Introduction

This Privacy Policy describes how RealEstateAI ("Service", "we", "us") collects, uses, and protects the personal data of users of our platform, available at https://estatepro.house.

By using the Service you agree to the terms of this Policy. If you do not agree, please stop using the Service.

2. Information We Collect

2.1 Information you provide to us

  • Account data — name, email address, and password when you register.
  • Profile data — full name, phone number, WhatsApp notification preferences.
  • Property data — descriptions, photos, addresses, and other details about properties you add to the Service.
  • Leads — name, phone number, and email of prospective buyers who submit an inquiry through your property's public page.

2.2 Information collected automatically

  • Technical data — IP address, browser type, operating system, pages visited, timestamps.
  • Cookies — files stored in your browser to keep you signed in and maintain session security. See Section 7 for details.
  • UTM parameters — traffic source data included in the URL when someone visits a property's public page.

3. How We Use Your Data

  • Providing Service features: storing properties, generating AI descriptions, collecting leads.
  • Sending lead notifications by email or WhatsApp (if enabled).
  • Processing payments via Stripe (we do not store payment card details).
  • Improving the Service based on aggregated usage statistics.
  • Responding to your support requests.

3.1 Owner Dashboard Analytics

We collect aggregated, non-personal analytics to monitor system health and provide business insights to account owners:

  • User metrics — total registered users, active users, subscription plan distribution (aggregate counts only — no individual user tracking).
  • Revenue data — monthly recurring revenue, subscription status (never payment card details).
  • Content metrics — number of properties created, leads submitted (count only).
  • System errors — error logs are automatically sanitized to remove any personal information (emails, phone numbers, API tokens are replaced with generic placeholders).

Important: We do NOT collect or store:

  • Individual user activity logs
  • Who specifically created a property or submitted a lead
  • User IP addresses or device information for tracking purposes
  • Any browsing behavior or click streams

Analytics data is automatically deleted after a retention period (30–90 days depending on type), and is only accessible to account owners via the private Owner Dashboard.

4. Sharing Your Data

We do not sell your personal data. We may share data with the following categories of recipients:

  • Supabase — database and authentication infrastructure (USA, GDPR-compliant via Standard Contractual Clauses).
  • OpenAI — property description generation (property details only, no personal user PII).
  • Stripe — payment processing. Payment card data is stored exclusively by Stripe.
  • Vercel — application hosting (USA, GDPR-compliant).

5. Data Security

We implement technical and organisational measures to protect your data: HTTPS encryption, Row-Level Security in the database, and restricted staff access to user data. No system can guarantee absolute security.

6. Your Rights

Under GDPR and applicable law you have the right to:

  • Access your personal data.
  • Correct inaccurate or incomplete data.
  • Request deletion of your account and all associated data.
  • Object to certain types of data processing.
  • Receive your data in a portable format.

To exercise these rights contact us at: support@realestateai.app.

7. Cookies

We use the following types of cookies:

  • Essential — required for authentication and session security (e.g. Supabase session token, nonce cookie for multi-device protection). The Service cannot function without them.
  • Analytics — aggregated usage statistics that do not identify individual users. Can be declined via the cookie banner.

You can manage cookies through your browser settings. Disabling essential cookies will prevent you from signing in.

8. Data Retention

We retain your data for as long as you use the Service. After account deletion, personal data is removed within 30 days, except for data we are required by law to retain (e.g. financial transaction records — up to 7 years).

9. Children

The Service is not intended for users under the age of 18. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this Policy from time to time. For material changes we will notify you by email or by posting a notice in the Service. The current version is always available on this page.

11. Contact

For privacy-related questions: support@realestateai.app.

Terms of Service · Home