Privacy Notice

Last updated: May 14, 2026

realbasic.ai LLC ("RealBasic", "we", "us") operates the RealBasic platform at realbasic.ai. This Privacy Notice explains what personal data we collect, why we collect it, who we share it with, and the rights you have. We act as the data controller of the personal data described below.

1. Personal data we collect

  • Account information: name, email address, password hash, brokerage or team name, profile photo, public agent slug.
  • Listing & property data: property addresses, listing copy, photos, pricing, open house schedules, and other content you upload or generate.
  • Contacts & Gmail integration: if you connect Gmail, we access your contacts and email metadata via Google's OAuth scopes solely to import, segment, and email your real estate contacts. We do not read the body of unrelated personal email and we do not sell or share Gmail data with third parties.
  • Lead data: name, email, phone, and inquiry details submitted by visitors through your lead-capture forms.
  • Support & communications: messages you send us and our replies.
  • Usage & device data: pages viewed, features used, IP address, browser, device type, approximate location derived from IP, and cookie identifiers.
  • Payment data: billing email and subscription status. Card details are collected and processed directly by Paddle, our Merchant of Record — we do not see or store card numbers.

2. How we use your data

  • To create your account and operate the Service (legal basis: contract).
  • To generate AI listing copy, social posts, flyers, and email blasts on your behalf (contract).
  • To send leads, lead notifications, and product communications (contract).
  • To prevent fraud, abuse, and security incidents and to enforce our Terms (legitimate interest).
  • To improve and develop the Service (legitimate interest).
  • To send marketing emails — only with your consent, which you can withdraw any time.
  • To comply with legal obligations (legal obligation).

3. Google API Services User Data

RealBasic's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail and Google Contacts data is used only to provide user-facing features inside RealBasic, is not transferred to third parties except as necessary to provide the Service, is not used for advertising, and is not read by humans except with your explicit consent or for security/abuse investigations required by law.

4. Who we share data with

  • Infrastructure providers: hosting, database, and storage providers that process data on our behalf under written agreements.
  • Paddle (Merchant of Record): processes payments, subscriptions, tax, invoicing, refunds, and chargebacks. See Paddle's privacy notice.
  • AI processing providers: the AI model providers we use to generate listing copy, social posts, and flyer text. Inputs and outputs are processed solely to return results to you.
  • Email delivery providers: to deliver transactional and marketing email you send through the Service.
  • Analytics & error monitoring: aggregated usage and crash data.
  • Professional advisers: legal, accounting, and audit firms.
  • Authorities: where required by law or to protect rights, property, or safety.

We do not sell your personal data.

5. Data retention

We retain personal data for as long as your account is active and as needed to provide the Service. After account deletion we delete or anonymize personal data within 90 days, except where retention is required for legal, tax, accounting, or fraud-prevention purposes.

6. Security

We use appropriate technical and organizational measures including encryption in transit, encryption at rest for sensitive fields, access controls, and audit logging. No system is perfectly secure; you are responsible for protecting your account credentials.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict processing of your personal data, to object to processing based on legitimate interests, and to withdraw consent. To exercise these rights, email privacy@realbasic.ai. You may also lodge a complaint with your local data-protection authority.

8. International transfers

Our infrastructure providers may process data in the United States and other jurisdictions. Where required, we rely on Standard Contractual Clauses or equivalent safeguards to protect transferred data.

9. Cookies

We use essential cookies for authentication and session management, and limited analytics cookies to understand how the Service is used. You can manage cookies through your browser settings; disabling essential cookies will prevent the Service from functioning properly.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal data.

11. Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be communicated by email or in-app notice.

12. Contact

Questions or requests? Email privacy@realbasic.ai.