Privacy Policy

1. Introduction

RealEstateDesk.AI ("we", "us", or "our") provides AI-powered audit, analytics, and customer relationship management services for real estate teams and brokerages. This Privacy Policy describes how we collect, use, and protect your information when you use our website and services.

2. Information We Collect

Information you provide: When you request an audit, create an account, or contact us, we collect your name, email address, phone number, brokerage name, website URL, specialty area, and team size.

Account phone numbers: The mobile phone number you provide when creating or signing in to your RealEstateDesk account. Used to authenticate you and to send account-security notifications.

Contact phone numbers: Phone numbers that you, as a platform customer, upload, import, record, or receive through inbound inquiry forms for your own leads, borrowers, partners, and other business contacts ("Contacts"). These phone numbers are provided to the platform by you or on your behalf in connection with your customer relationship management activities.

Automatically collected information: We collect standard web analytics data including IP address, browser type, pages visited, and referring URLs.

Audit data: To generate your audit report, we analyze publicly available information about your brokerage including your website content, Google reviews, and search engine presence.

3. How We Use Your Information

• To generate and deliver your personalized brokerage audit report
• To provide account authentication and security notifications
• To enable the platform messaging features you configure and operate
• To communicate with you about your account and our services
• To improve our AI analysis models and service quality
• To respond to your inquiries and provide customer support

4. Third-Party Services

We use the following third-party services to provide our platform:

• Google Places API — to gather publicly available business information
• Anthropic Claude AI — to power our analysis and report generation
• Supabase — for secure data storage and authentication
• Twilio — to deliver SMS and MMS messages
• Vercel — for website hosting

These providers process data in accordance with their own privacy policies and our data processing agreements.

5. SMS and Platform Messaging

RealEstateDesk.AI uses SMS and MMS messaging as part of the core functionality of our platform. The platform supports two distinct messaging programs with different sender identities and different consent mechanisms.

Program A — RealEstateDesk account and authentication messaging. For login one-time passcodes (OTPs) and account-security alerts sent directly by RealEstateDesk.AI to you as a platform user, RealEstateDesk.AI is the sender. Consent for these messages is collected when you create or sign in to your account and agree to receive authentication and account messages at the mobile number you provide.

Program B — Customer-originated messaging to end contacts. For messages you send or configure to be sent from your account to your own Contacts, you — the platform customer — are the sender. You are responsible for obtaining and documenting any consent required under applicable law before sending messages to a Contact. RealEstateDesk.AI acts as the software and communications infrastructure for those messages; the business relationship with the Contact is yours.

Messages sent through the platform. Under Program A, messages are limited to authentication codes and account-security alerts about your RealEstateDesk account. Under Program B, messages are limited to conversational business communications with your own Contacts: lead response, appointment scheduling and reminders, follow-up on documents and applications, and related real-estate and mortgage business communication.

Message frequency. Message frequency varies by your account activity, the configuration of your workflows, and the pace of ongoing conversations. There is no fixed number of messages per day, week, or month.

Message and data rates. Standard message and data rates may apply to any SMS or MMS. RealEstateDesk.AI does not charge you directly for carrier rates; those are governed by your wireless plan.

Opting out. You or your Contacts may opt out of non-essential SMS messaging at any time. Replying STOP (or any standard opt-out keyword including STOPALL, UNSUBSCRIBE, CANCEL, END, or QUIT) is processed automatically and honored on subsequent sends. Consent may also be revoked by any other reasonable method communicated to the sender, and such revocations will be honored. Opting out of Program A authentication messages may prevent you from signing in to your account.

Help and contact. Replying HELP to any message will return a program-appropriate support response. For Program A messages, the response will identify RealEstateDesk.AI and provide RealEstateDesk.AI support contact information. For Program B messages, the response will identify the customer sender or agency associated with the message and provide the applicable support contact information that the sender has configured in the platform. You may also contact RealEstateDesk.AI support directly at support@realestatedesk.ai, monitored Monday–Friday, 9am–5pm Mountain Time.

Carriers are not liable for delayed or undelivered messages. Message delivery is provided through third-party mobile carriers. Carriers are not liable for delayed or undelivered messages.

How we share mobile data. Phone numbers, SMS opt-in status, and mobile consent records are used only for the purposes described in this section. We do not sell, rent, share, or transfer phone numbers, SMS opt-in status, or mobile consent records to third parties for their own marketing purposes. We share phone numbers only with the communications providers (such as Twilio) that deliver messages on our behalf or on behalf of platform customers, and only to the extent necessary to deliver those messages.

Retention of messaging data. Account phone numbers are retained for as long as your account is active and for up to 24 months after your last interaction, consistent with the general retention policy below. Opt-out records and revocation evidence are retained indefinitely to ensure that opt-out requests continue to be honored.

6. Data Retention

We retain your contact information and account data for as long as necessary to provide our services and for up to 24 months after your last interaction. You may request deletion of your data at any time by contacting us.

7. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage, and access controls. While no system is completely secure, we take reasonable steps to protect your information from unauthorized access.

8. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your data
• Opt out of non-essential communications at any time

9. Cookies

We use essential cookies to ensure our website functions properly. We do not use advertising or third-party tracking cookies.

10. Google User Data

RealEstateDesk AI ("RED") lets you connect your Google account so that email you have personally reviewed and approved can be sent from your own address.

What we access. When you connect your Google account we request only: openid and userinfo.email, to identify which Google account you connected and show you its address; and gmail.send, to send an individual email that you have explicitly approved.

What we do not access. We do not request, and are technically unable to obtain, permission to read, search, download, modify, label, or delete your email. We hold no Gmail read scope of any kind. We cannot see your inbox, your sent mail, your drafts, your contacts, or your attachments.

How we use it. Your Google account address is displayed to you so you can confirm which mailbox is connected. Send access is used only at the moment you approve a specific message in RED's approval queue, to send that one message. RED never sends email on your behalf without an explicit human approval action for that message.

What we store. For each connected account we store the Google account email address, Google's stable account identifier, the scopes granted, connection and verification timestamps, and an encrypted OAuth refresh token. The refresh token is encrypted at rest and is never exposed to any user, including administrators of your organisation. For each message you approve and send, we store the content you approved, the recipient, and the identifiers Google returns for that message and its conversation, so RED's record matches what actually left your mailbox.

Who can see it. Your connected Google account and the mail sent through it belong to you. An administrator of your organisation can see that a Google account is connected and can disconnect it, but cannot read or decrypt your credentials.

Sharing. We do not sell Google user data, do not use it for advertising, and do not transfer it to third parties other than to Google itself in order to send the message you approved. We do not use Google user data to develop, improve, or train generalised artificial intelligence or machine learning models.

Human access. No person at RealEstateDesk AI reads your Google user data, except with your explicit consent for a support issue you have raised, where required by law, for a security investigation, or on aggregated anonymised data for internal operations.

Retention and deletion. You can disconnect your Google account at any time from Settings › Integrations. On disconnect, RED deletes the stored credential and asks Google to revoke the authorisation. You can also revoke RED's access directly at myaccount.google.com/permissions. Records of messages you already sent are retained as part of your account history and are removed when your account is deleted.

Limited Use. RealEstateDesk AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.