Privacy Policy

This Privacy Policy describes how RealTrue, LLC ("Company," "we," "us," or "our") collects, uses, shares, and protects your personal information when you use the RealTrue platform ("Service"). By accessing or using the Service, you agree to the practices described in this policy.

If you do not agree with these practices, please do not use the Service.

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly when you use the Service, including:

• Account information -- name, email address, password, and profile details you provide during registration
• Subscription and payment information -- billing address, payment method details, and transaction history (payment processing is handled by third-party processors; we do not store full credit card numbers)
• Investment profile data -- property preferences, investment criteria, deal room affiliations, and onboarding questionnaire responses
• Content you create -- notes, pipeline entries, portfolio records, project data, expense records, documents, and photos you upload or create within the Service
• Communications -- messages you send to us through email, support requests, or feedback forms
• Onboarding recordings -- audio recordings and transcripts submitted through our voice-based onboarding flow, used to create your investor preference profile

1.2 Information Collected Automatically

When you access the Service, we automatically collect certain technical information, including:

• Device and browser information -- device type, operating system, browser type and version, screen resolution, and language preferences
• Usage data -- pages visited, features used, actions taken, timestamps, and session duration
• Log data -- IP address, access times, referring URLs, and error logs
• Cookies and similar technologies -- we use cookies, local storage, and similar technologies to maintain your session, remember preferences, and improve the Service (see Section 6 below)

1.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Public records -- property data, foreclosure filings, tax records, and court records sourced from government agencies and public databases
• Authentication providers -- if you sign in through a third-party service, we may receive your name, email, and profile information from that provider
• Third-party integrations -- data from services we integrate with to provide features such as mapping, transcription, and property enrichment

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service -- creating and managing your account, processing subscriptions, delivering features, and enabling deal room collaboration
• Improving the Service -- analyzing usage patterns, diagnosing technical issues, testing new features, and optimizing performance
• Personalization -- tailoring property recommendations, dashboard views, and notifications to your preferences and investment profile
• AI-assisted features -- processing onboarding recordings for transcription and preference extraction, generating property descriptions, producing property intelligence reports, and powering screenshot-based property import
• Communications -- sending you transactional emails (account confirmation, password reset, task digests), service announcements, and, with your consent, promotional materials
• Security and compliance -- detecting and preventing fraud, enforcing our Terms of Service, complying with legal obligations, and responding to lawful requests from authorities
• Analytics and reporting -- generating aggregated, de-identified analytics to understand platform usage and improve our products

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Within Your Deal Room

If you belong to a deal room, certain information (such as your name, email, pipeline activity, portfolio data, and project updates) may be visible to deal room administrators and other authorized members, as described by the deal room's configuration and your account permissions.

3.2 Service Providers

We share information with third-party vendors who perform services on our behalf, including:

• Cloud infrastructure -- hosting, storage, and database services (Supabase, Vercel)
• Payment processing -- subscription billing and payment handling
• Email delivery -- transactional and digest email services (Resend)
• Transcription -- audio-to-text processing for onboarding recordings (Deepgram)
• AI processing -- natural language processing for preference extraction, property analysis, and description generation (Anthropic)
• Mapping and geolocation -- property location display and directions (Google Maps)
• Analytics -- anonymized usage analytics

These providers are contractually bound to use your information only to perform the services we have engaged them for and to maintain appropriate security measures.

3.3 Legal Requirements

We may disclose your information when we believe in good faith that disclosure is necessary to:

• Comply with applicable law, regulation, or legal process
• Respond to lawful requests from public authorities, including law enforcement
• Protect the rights, property, or safety of RealTrue, our users, or the public
• Enforce our Terms of Service

3.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

3.5 With Your Consent

We may share your information for other purposes with your explicit consent.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. After account termination, we may retain certain data for a reasonable period to:

• Comply with legal, regulatory, or contractual obligations
• Resolve disputes and enforce our agreements
• Maintain records for audit and compliance purposes
• Prevent fraud and abuse

Onboarding audio recordings are retained for up to 90 days after processing, after which they are deleted. Transcripts and extracted preferences are retained as part of your account data.

When data is no longer needed for any of the above purposes, we will delete or de-identify it in accordance with our internal data retention schedule.

5. Data Security

We implement commercially reasonable administrative, technical, and physical safeguards to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Row-level security policies that restrict data access to authorized users
• Regular security assessments and monitoring
• Access controls limiting employee and contractor access to personal data on a need-to-know basis
• Secure authentication with session management via Supabase Auth

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials and for any activity that occurs under your account.

6. Cookies and Tracking Technologies

6.1 What We Use

We use the following types of cookies and similar technologies:

• Essential cookies -- required for the Service to function, including authentication session cookies and CSRF protection tokens. These cannot be disabled.
• Preference cookies -- remember your settings, such as sidebar state, filter preferences, and chart selections
• Analytics cookies -- help us understand how the Service is used so we can improve it

6.2 Your Choices

Most web browsers allow you to control cookies through their settings. You can typically set your browser to refuse cookies or alert you when cookies are being sent. Note that disabling essential cookies will prevent you from using the Service.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

7.1 Access and Portability

You may request a copy of the personal information we hold about you. We will provide this in a commonly used, machine-readable format where technically feasible.

7.2 Correction

You may request that we correct inaccurate or incomplete personal information. You can update much of your information directly through your account settings.

7.3 Deletion

You may request that we delete your personal information. We will comply with such requests unless we have a legitimate legal basis for retaining the data (such as legal compliance or dispute resolution).

7.4 Restriction and Objection

You may request that we restrict the processing of your personal information or object to certain processing activities, including direct marketing.

7.5 Withdrawal of Consent

Where we rely on your consent to process personal information, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

7.6 How to Exercise Your Rights

To exercise any of the above rights, please contact us at privacy@realtrue.ai. We will respond to your request within 30 days (or the applicable period required by law). We may need to verify your identity before processing your request.

8. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at privacy@realtrue.ai.

9. International Data Transfers

The Service is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored in, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction. By using the Service, you consent to the transfer of your information as described in this policy.

10. State-Specific Privacy Rights

10.1 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• The right to know what personal information we collect, use, disclose, and sell
• The right to request deletion of your personal information
• The right to opt out of the sale or sharing of your personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights
• The right to correct inaccurate personal information
• The right to limit use of sensitive personal information

To exercise these rights, contact us at privacy@realtrue.ai.

10.2 Other U.S. States

Residents of Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy laws may have similar rights. Please contact us at privacy@realtrue.ai to exercise your rights under applicable state law.

11. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access through the Service.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" at the top of this document. If we make material changes, we will provide notice through the Service (for example, by displaying a banner in the application or sending an email). Your continued use of the Service after the effective date of any updated Privacy Policy constitutes your acceptance of those changes.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

• Privacy inquiries: privacy@realtrue.ai
• Legal inquiries: legal@realtrue.ai
• Mail: RealTrue, LLC, Wichita, Kansas

We aim to respond to all privacy-related inquiries within 30 days.