Privacy Policy

1. Introduction

We ("us" or "our") operate the AI Realty Assistant service, available at airealtyassistant.com. This Privacy Policy explains how we collect, use, and protect information when you use our Service.

This policy applies to:

• Customers: Real estate professionals who subscribe to our Service
• End Users: Visitors who interact with chat widgets on customer websites

2. Information We Collect

Account Information (Customers):

• Name and email address
• Password (stored securely hashed)
• Business name, phone number, and website URL

Business Content (Customers):

• Property listings and descriptions
• Branding settings (colors, logos, welcome messages)
• Domain configurations

Lead Information (Collected via Chat Widget):

• Name, email, and phone number (when provided by end users)
• Property preferences and interests
• Chat conversation history
• Qualification data (budget, timeline, etc.)

Payment Information:

• Processed securely by Stripe
• We do not store full credit card numbers on our servers

Usage Data:

• Pages visited and features used
• Chat interaction statistics
• API usage and performance metrics

Technical Data:

• IP address
• Browser type and version
• Device information

3. How We Use Your Information

We use collected information to:

• Provide and operate the Service
• Process payments and manage subscriptions
• Deliver leads captured through your chat widget
• Power AI chat functionality
• Send service-related communications
• Improve and optimize the Service
• Respond to support requests
• Detect and prevent fraud or abuse

4. AI and Chat Processing

Our chat widget uses artificial intelligence provided by Anthropic (Claude) to generate responses. When end users interact with a chat widget:

• Messages are sent to our servers
• Messages are processed by AI to generate responses
• Conversations may be analyzed to extract lead information
• No chat data is used to train AI models

5. Information Sharing

We do not sell your personal information. We share information only as follows:

Service Providers:

• Stripe: Payment processing
• Anthropic: AI chat functionality
• Railway: Cloud hosting
• Cloudflare: Security and content delivery

Legal Requirements:

We may disclose information if required by law, court order, or government request.

Business Transfers:

In the event of a merger, acquisition, or sale of assets, user information may be transferred to the acquiring entity.

With Your Consent:

We may share information with your explicit consent.

6. Data Security

We implement appropriate security measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing
• Access controls and authentication
• Regular security reviews

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

7. Data Retention

• Active Accounts: Data is retained while your account is active
• Cancelled Accounts: Data may be retained for a reasonable period after cancellation for legal and business purposes
• Lead Data: Retained according to your account status
• Chat Logs: Retained as part of lead records

You may request deletion of your data by contacting support@airealtyassistant.com.

8. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request deletion of your data
• Export: Receive your data in a portable format

To exercise these rights, contact support@airealtyassistant.com.

9. Cookies and Tracking

Authentication cookies: When you log in, we set a single secure session cookie (named token for customers or adminToken for administrators) marked HttpOnly, Secure, and SameSite=None. The cookie is required to keep you signed in and is used solely for authentication. JavaScript running in your browser cannot read or modify this cookie.

Session storage (chat widget): Our chat widget uses your browser's local sessionStorage to keep a conversation continuous across page refreshes. This data lives only in your browser and is not transmitted to our servers as a cookie.

Analytics and advertising cookies: We do not currently use analytics, advertising, or tracking cookies on our marketing site or in the product. If we introduce them in the future, we will update this policy and present a consent banner before they are set.

Infrastructure cookies: Our hosting provider (Cloudflare) may set strictly-necessary security cookies to detect and block abusive traffic. These are exempt from consent requirements under most privacy laws and are not used for tracking or advertising.

10. Children's Privacy

The Service is not intended for children under 18. We do not knowingly collect information from children. If you believe a child has provided us with personal information, contact us immediately.

11. Third-Party Websites

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy at any time. We will notify you of material changes by email or through the Service. The "Last updated" date at the top indicates when the policy was last revised.

13. Contact Us

For questions about this Privacy Policy or our data practices, contact us at:

Email: support@airealtyassistant.com