Privacy Policy

We only collect data we actually need to run the platform:

• Account data — your email address, name, optional avatar, and the password hash (we never see your password in plaintext). For Google sign-in, your Google profile email + name.
• Usage data — the searches you run, the properties you bookmark, the saved searches you create, AI chat conversations you have with the assistant.
• Technical data — your browser type, IP address, and timestamps for sign-in events. Stored short-term for security audit + abuse prevention.
• Notification preferences — channels you've opted into (email, push, Telegram).

We do not collect: payment information (we don't take payments), real-time location, contacts, any data from third-party services beyond what you explicitly link (e.g. Google sign-in or Telegram).

Each piece of data has a job:

• Account data — to log you in and keep your data tied to you across devices.
• Usage data — to make the platform work (your saved searches need to be re-run; your bookmarks need to persist).
• Technical data — to detect abuse, debug crashes, and meet basic security obligations.
• Notification preferences — so we only send you what you asked for.

We do not sell your data. We do not run third-party advertising on the platform. We do not share your usage with any partner — full stop.

Your data lives in:

• CockroachDB Cloud — primary database. EU region. TLS in transit, encrypted at rest.
• Cloudflare R2 — object storage for backups and uploaded media (e.g. profile avatars).
• Upstash Redis — short-lived session + cache state.

Backups are encrypted and retained for 30 days. We pull a fresh backup weekly via a cron at Sunday 03:00 UTC.

You can:

• Access your data — visible in Settings → Profile.
• Update your data — also from Settings → Profile.
• Delete your account — email support@realtorspractice.com. Soft-delete is immediate; hard-delete after a 14-day window.
• Export your data — also via support; we'll send a JSON dump of everything tied to your account within 7 business days.
• Opt out of any notification channel — Settings → Notifications.

If you're an EEA / UK resident, GDPR rights apply additionally — including the right to lodge a complaint with your supervisory authority.

We use these third parties to run the platform. None of them get more data than they need to do their job.

• Vercel — frontend hosting
• Render — backend hosting
• CockroachDB Cloud — database
• Cloudflare — object storage + CDN
• Upstash — Redis cache
• Resend — transactional email delivery
• SambaNova / Cerebras / Groq / Google (Gemini) — AI chat providers (we send the message you type; we don't send your account profile or other listings)
• Mintlify — hosts the documentation at /docs

If we change this policy, we'll update the effective date at the top and email anyone signed up. Material changes (collecting new categories of data, sharing with new third parties) get 30 days' notice before they take effect.

Questions or requests: support@realtorspractice.com. We respond to privacy requests within 5 business days.