Privacy Policy
This policy explains the personal data Realtor handles, why we handle it, who else sees it, and the rights you have over it. We try to collect as little as possible and to be specific about every flow.
Data we collect
Account data
When you sign up we receive your name and email address, either from Google when you sign in with Google, or the email address you verify via a magic link. We store these account identifiers in our own database. If you complete onboarding we additionally store your agent display name, slug, city, and the WhatsApp number you choose to publish, only the parts you mark public are shown to buyers.
Buyer-submitted contact-form data
When a buyer fills in the contact form on your public profile or a listing page, we store the name, contact method, and message they submitted, plus the listing it relates to. This data is owned by you, surfaced in your inbox, and never used to market to the buyer on our behalf.
Payment data
Card details are handled exclusively by Stripe, we never see or store them. We do store the Stripe customer + subscription identifiers Stripe returns to us, the plan you are on, and the billing events Stripe sends via webhook.
Why we process this data
Account data is used to authenticate you and to render your profile. Buyer-submitted data is used to deliver leads to you and (only on paid AI tiers, and only for the listing the buyer engaged with) to draft replies on your behalf. Payment data is used to bill you and to keep your subscription in the correct state.
How long we keep it
Account data is kept for as long as your account is active. Anonymous public concierge transcripts are retained for 30 days. Closed support escalations are retained for 365 days. Raw product analytics events are retained for 730 days. Buyer conversation and contact data is kept while your account is active and purged with account deletion. Billing records (credit ledger and tax-required invoices) are kept for the period Argentine tax law requires (currently 10 years). When you delete your account, everything except legal-hold billing records is purged within 30 days, with durable cleanup of object storage and payment-provider identifiers.
Sub-processors we share data with
We rely on a small number of vendors to operate Realtor. Each one only ever sees the minimum data needed to do its job:
- Google: sign-in via Google OAuth (your name and email address only); your account identity is stored in our own database.
- Stripe: payments and subscription billing (payment data only).
- Resend: transactional email delivery (your email address + the message body Realtor generated).
- Cloudflare R2: storage for listing photos and rendered videos (no PII).
- Google Veo: video generation from the photos and prompts you supply (no buyer PII).
- ElevenLabs: voiceover generation for listing videos (script text only).
- Kapso: WhatsApp Business connectivity (BSP partner). Processes phone numbers and message content for inbound and outbound delivery on the work number you connect.
- Meta / WhatsApp: the messaging network that carries buyer and agent WhatsApp traffic (phone numbers and message content), under Meta's terms for Business messaging.
- OpenRouter & Google (Gemini): AI processing of buyer WhatsApp messages, voice-note transcriptions and listing content, used solely to draft replies on the agent's behalf. Data may be processed outside your country.
We do not sell personal data to anyone, ever.
Legal basis for AI processing: legitimate interest in responding to your enquiry on the agent's behalf. You can object at any time, tell the assistant you don't want to talk to an AI, or reply STOP, and a human takes over.
GDPR & LGPD
Where the EU General Data Protection Regulation (GDPR) or Brazil's Lei Geral de Proteção de Dados (LGPD) applies to you, the rights below, access, correction, deletion, and objection, are how you exercise what those laws grant. The vendors listed above act as our sub-processors, each bound to use your data only to provide their service to Realtor. Some process data outside your country; where required, that transfer relies on the provider's standard contractual safeguards.
Your rights
Data export
You can download a JSON export of everything we hold about you from the billing screen at any time.
Deletion
You can delete your account from Settings → Danger Zone. This removes your profile, listings, photos, videos, and inbox data within 30 days. You can also email [email protected] and we will action the request manually.
Correction
You can edit your profile, listing data, and contact information from the dashboard. Write to us if anything looks wrong and we will correct it.
Contact
Privacy questions, data-export requests, or complaints: [email protected].