Privacy Policy
Effective date: May 12, 2026
What we collect
- Account data: name, email, brokerage, license number.
- Lead & contact data you upload or capture through forms, landing pages, and integrations.
- Listing & MLS data you connect via MLS credentials.
- Communication content: AI-generated and sent emails, SMS, and voice transcripts.
- Usage data: log files, device info, IP address.
- Payment data: processed by Stripe; we never store full card numbers.
How we use it
To provide the Service, generate AI marketing and replies on your behalf, route leads, send transactional emails, prevent fraud, and improve product quality. We do not sell your data and do not use lead/contact data to train shared AI models.
Subprocessors
- Supabase / Lovable Cloud — database, authentication, file storage
- Stripe — payment processing
- Resend — transactional & marketing email delivery
- Twilio — SMS and voice
- ElevenLabs — voice synthesis
- Google, OpenAI — AI inference (via Lovable AI Gateway)
- RapidAPI / Realtor.com — listing & comparable data
Your rights (CCPA / GDPR)
You may request access, correction, export, or deletion of your personal data at privacy@estatly5000.com. We respond within 30 days. California residents have the right to opt out of "sharing" — Estatly does not sell or share personal information for cross-context behavioral advertising.
Lead & consumer privacy
If you upload a lead's contact info, you represent you have a lawful basis to contact them. You are the data controller for your leads; Estatly is the data processor. See our Data Processing Agreement.
Security
Data is encrypted in transit (TLS 1.2+) and at rest. Row-Level Security restricts every database query to the authenticated user. We perform regular vulnerability scans and follow least-privilege access controls.
Retention
Account & lead data are retained for the life of your subscription plus 30 days after cancellation, then deleted. Billing records are retained 7 years for tax compliance.
Children
Estatly is not directed at anyone under 18 and we do not knowingly collect data from minors.