1. Scope and roles
We act as a controller for information about account holders (agents, teams, and brokerages) and as a processor for the lead and contact data that customers upload or capture through the platform. When we act as a processor, our customer determines the purposes of processing and is responsible for the lawful basis.
2. Information we collect
- Account data: name, email, brokerage, role, authentication identifiers, and settings.
- Customer Data: leads, contacts, conversations, tasks, notes, campaign content, and site pages you create.
- Usage data: pages viewed, features used, device and browser type, approximate location from IP, timestamps.
- Website analytics: visits, sources, and conversions for sites you publish through the platform.
- Billing data: plan, transaction identifiers, and limited payment metadata handled by our payment processor.
- Support data: messages you send us and diagnostic information you choose to share.
3. How we use information
- Provide, operate, secure, and improve the platform and its AI features.
- Authenticate users, prevent fraud and abuse, and enforce our terms.
- Deliver transactional messages, service notices, and support responses.
- Produce aggregated analytics and product insights that do not identify individuals.
- Comply with legal obligations and resolve disputes.
4. Legal bases
Where required, we rely on performance of a contract (delivering the Service), legitimate interests (security, product improvement, direct business communication), consent (optional marketing and certain cookies), and compliance with legal obligations.
5. AI processing
AI features send relevant workspace content to model providers to generate drafts, summaries, and recommendations. We do not permit our AI vendors to use Customer Data to train their general-purpose models. AI output should always be reviewed by a human before use.
6. Sharing and subprocessors
We share information with service providers who help us run the platform — cloud hosting and database, email delivery, analytics, DNS and certificate issuance, payment processing, and AI inference. Each is bound by contractual confidentiality and data-protection obligations. We may also disclose information to comply with law, enforce agreements, or in connection with a merger or acquisition. We do not sell personal information.
7. Cookies and similar technologies
We use strictly necessary cookies for authentication and session security, and optional analytics cookies to understand product usage. You can control non-essential cookies through your browser or, where offered, an in-product preference control.
8. International transfers
Information may be processed in countries other than your own. Where required, we use appropriate safeguards such as Standard Contractual Clauses and supplementary technical measures.
9. Security
We apply row-level access controls, encryption in transit, least-privilege service credentials, audit logging of privileged actions, and regular review of access. No system is perfectly secure; please report suspected vulnerabilities to security@leadrealpro.com.
10. Retention
We keep account and Customer Data for as long as your workspace is active, and afterward only as needed for legal, accounting, and dispute-resolution purposes. Deleted records are removed from active systems and purged from backups on a rolling schedule.
11. Your rights
Depending on where you live, you may request access, correction, deletion, portability, restriction, or objection, and may withdraw consent at any time. See our GDPR and CCPA notices for region-specific rights and how to exercise them. Contacts stored in a customer workspace should direct requests to that customer, and we will assist them in responding.
12. Children
The Service is not directed to children under 16 and we do not knowingly collect their information.
13. Changes and contact
We will post updates to this policy here and, for material changes, notify you in-product or by email. Questions or requests: privacy@leadrealpro.com.