Privacy Policy

This Privacy Policy describes how RealtyOps Pro AI Inc., operating as RealtyOps Pro AI Inc. ("we," "us," or "our"), collects, uses, discloses, and protects your personal information when you use our platform at realtyopspro.ai and related services (the "Platform").

We are committed to protecting your privacy and complying with applicable data protection laws, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), British Columbia's Personal Information Protection Act (PIPA), the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and other applicable provincial and state privacy legislation. The Platform is not offered to residents of Quebec.

Privacy Officer and Accountability. In accordance with PIPEDA's accountability principle, RealtyOps Pro AI Inc. has designated its Chief Executive Officer, Behzad Mohazzab, as the Privacy Officer accountable for the organization's compliance with applicable privacy legislation. The Privacy Officer is responsible for overseeing our privacy practices, responding to privacy inquiries and complaints, and ensuring that personal information transferred to third parties for processing is protected by contractual safeguards. The Privacy Officer can be reached at privacy@realtyopspro.ai.

We collect the following categories of personal information:

2.1 Information You Provide Directly

• Account registration: Full name, email address, password, phone number, brokerage name, office address, jurisdiction, license title, incorporation status (PREC/LLC).
• Partner application: Business name, email, phone, service type, service area, portfolio URL, and any additional information submitted during the application and onboarding process (stored as application data).
• Property data: Address, city, province/state, postal/ZIP code, price, bedrooms, bathrooms, square footage, year built, property type, lot size, room measurements, listing descriptions, seller contact information (name, email, phone).
• Booking details: Service type, scheduled date, access instructions, notes, cancellation reasons.
• Offer and transaction data: Buyer agent names, offer amounts, conditions, escalation clauses, financing details, closing dates, earnest money amounts, and estimated net proceeds.
• Portal visitor data: When Sellers or Buyer's Agents access their respective portals via secure link, we collect IP address, browser information, and access timestamps for security and audit purposes.
• Media and documents: Photographs, videos, 3D tour links, floor plans, listing documents, inspection reports, and other files uploaded to the Platform.
• Reviews: Ratings and written comments submitted about Partners.
• Communications: Messages sent through the Platform, support inquiries, and feedback.
• Subscription payment information: Billing details for Subscription fees and AI Credit purchases are collected and processed by our designated third-party PCI-DSS compliant payment processor. We store only the customer and account identifiers provided by the payment processor — never your full credit card or financial account number. RealtyOps Pro AI Inc. does not collect, store, or process payment information for Agent–Partner Booking transactions, as those payments are settled directly between the Agent and the Partner outside the Platform.

2.2 Information Collected Automatically

• Device and browser data: IP address, browser type and version, operating system, device type, screen resolution.
• Usage data: Pages visited, features used, clicks, navigation paths, session duration, referring URL.
• Log data: Server logs including access times, error logs, and API request metadata.
• Authentication data: Login timestamps, session tokens, magic link access events.

2.3 Information from Third Parties

• Payment processor: Subscription payment confirmation, transaction status, and account verification results from our designated third-party PCI-DSS compliant payment processor (limited to Subscription fees and AI Credit purchases charged by RealtyOps Pro AI Inc.).
• Anthropic (Claude API): AI-generated content returned in response to your property data inputs. Anthropic may process your property data in accordance with their data processing terms.

We use your personal information for the following purposes:

• Account management: Creating and maintaining your account, authenticating your identity, managing your Subscription.
• Service delivery: Facilitating Booking coordination between Agents and Partners, enabling communication, scheduling, asset delivery, and notifications. RealtyOps Pro AI Inc. does not process payments between Agents and Partners; those transactions are settled directly between the parties.
• Marketplace operation: Displaying Partner profiles, service listings, ratings, and reviews to Agents.
• AI content generation: Processing property data through the Anthropic Claude API to generate marketing content at your request.
• Asset delivery: Storing, displaying, and delivering Deliverables between Partners and Agents, including watermarked proofing and Partner-controlled release of full-resolution assets to Agents.
• Seller Portal: Providing property sellers with read-only access to listing progress, uploaded documents, and status updates via a secure magic link. Upon first access to the Seller Portal, Sellers are presented with a privacy notice that discloses: (a) the categories of personal information collected (IP address, browser information, access timestamps), (b) the purpose of collection (security and audit), (c) the retention period (six months), and (d) a link to this Privacy Policy. Sellers must acknowledge this notice before accessing the portal. We collect Seller access logs for security and audit purposes only.
• Buyer's Agent Portal: Providing buyer's agents with access to selected property documents and listing details via a secure, time-limited link shared by the listing Agent. Upon first access, Buyer's Agents are presented with a privacy notice disclosing the data we collect (IP address, browser information, access timestamps) and a link to this Privacy Policy. Access logs are retained for six (6) months for security and audit purposes.
• Analytics and improvement: Analyzing usage patterns to improve Platform features, performance, and user experience.
• Fraud prevention and security: Detecting and preventing fraudulent activity, unauthorized access, and abuse of the Platform.
• Legal compliance: Complying with applicable laws, regulations, legal processes, and government requests.
• Communications: Sending transactional notifications (Booking updates, payment confirmations, delivery alerts) and, with your consent, marketing communications about Platform features and updates.

We process your personal information based on the following legal grounds:

• Consent: Where you have provided explicit or implied consent, such as when you create an account, submit property data for AI processing, or opt in to marketing emails.
• Contractual necessity: Processing necessary to perform our contractual obligations to you under the Terms of Service, including providing access to the Platform, facilitating Booking coordination between Agents and Partners, and billing your Subscription.
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, Platform security, service improvement, and analytics, provided these interests are not overridden by your privacy rights.
• Legal obligations: Processing necessary to comply with applicable laws, including tax reporting, anti-money laundering requirements, and responses to lawful government requests.

We share your personal information only as described below:

5.1 Between Agents and Partners. When a Booking is created, we share the information necessary to facilitate the service, including:

• Agent to Partner: Agent name, email, phone, property address, access instructions, Booking details.
• Partner to Agent: Partner name, business name, email, phone, service details, Deliverables.

5.2 With Our Payment Processor. We share Subscription billing information (such as billing name, email, and the customer identifier returned by the payment processor) with our designated third-party PCI-DSS compliant payment processor as necessary to process Agent Subscription payments, AI Credit purchases, and to comply with applicable financial regulations. The payment processor processes this data under its own privacy policy, which is presented at the time of transaction. We do not share Agent–Partner Booking financial data with our payment processor, because RealtyOps Pro AI Inc. does not process those transactions.

5.3 With Anthropic. When you use AI content generation features, the following property data is sent to Anthropic's Claude API: property address, description, features, room measurements, and uploaded images. Anthropic's API terms provide that data submitted through the API is not used to train their AI models. Anthropic retains API inputs for a limited period for trust and safety purposes, after which they are deleted. For current details, see Anthropic's data processing terms.

5.4 With Infrastructure Providers. Your data is processed and stored by our infrastructure providers:

• Vercel: Application hosting and serverless functions (United States).
• Supabase/AWS: Database and file storage (region configurable).
• SMTP provider: Email delivery via mail.realtyopspro.ai.

These providers process data under data processing agreements with us and are contractually obligated to protect your information. Enterprise customers requiring a Data Processing Agreement (DPA) with RealtyOps Pro AI Inc. may request one by contacting legal@realtyopspro.ai. Our standard DPA covers processing scope, security measures, subprocessor notification, breach reporting within seventy-two (72) hours, data subject rights assistance, and data return or deletion upon termination.

5.5 With Sellers. Agents may share limited property and listing information with Sellers through the Seller Portal. RealtyOps Pro AI Inc. enables this sharing but does not control what information Agents choose to share.

5.6 With Law Enforcement. We may disclose your information if required to do so by law, court order, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to (a) comply with a legal obligation, (b) protect our rights or the rights of others, (c) prevent fraud, or (d) protect the safety of any person. Where legally permitted, we will notify you of any government or law enforcement request for your data before disclosure, unless we are prohibited by law or court order from doing so.

5.7 In Business Transfers. If RealtyOps Pro AI Inc. is involved in a merger, acquisition, reorganization, asset sale, or bankruptcy, your personal information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

5.8 We Do Not Sell Your Personal Information. We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. For the purposes of the CCPA/CPRA, we do not "sell" or "share" personal information as those terms are defined under California law.

RealtyOps Pro AI Inc. is headquartered in British Columbia, Canada. Your personal information may be processed and stored in the United States by our infrastructure and service providers. The following third-party processors handle your data outside Canada:

• Vercel Inc. (United States) — Application hosting, serverless functions, and edge network delivery.
• Supabase Inc. / Amazon Web Services (United States) — Database hosting and file storage.
• Our designated payment processor (United States) — Subscription payment processing and AI Credit purchase processing for amounts charged by RealtyOps Pro AI Inc. directly to Agents. Not used for Agent–Partner Booking transactions.
• Anthropic PBC (United States) — AI content generation via the Claude API.
• Resend Inc. (United States) — Transactional and commercial email delivery via mail.realtyopspro.ai.

Each provider processes data under a data processing agreement and is contractually obligated to implement appropriate technical and organizational safeguards. We have assessed the level of data protection provided by each subprocessor and have determined that appropriate safeguards are in place. For a current list of all subprocessors, see our Subprocessor List.

Notice of cross-border transfer. By using the Platform, you are hereby informed that your personal information will be transferred to and processed in the United States by the subprocessors listed above. If you do not consent to this cross-border transfer, you must not use the Platform.

Your personal information is primarily processed in the United States by our infrastructure providers. Data may also be processed in Canada where our company is headquartered. Canada has been recognized as providing adequate protection for personal information by various international bodies.

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Active account data: Retained while your account is active and for thirty (30) days after account closure to allow for data export.
• Booking coordination records: Booking metadata (date, service type, parties, status, deliverable history) is retained for six (6) years after Booking completion or cancellation for tax, legal, and regulatory compliance (CRA requirement). RealtyOps Pro AI Inc. does not retain financial records of Agent–Partner payments because those transactions are settled off-Platform.
• Subscription billing records: Retained for six (6) years after the date of charge for tax, legal, and regulatory compliance (CRA requirement).
• Media assets: Retained until deleted by the Agent or upon account closure, then purged within thirty (30) days.
• AI-generated content: Stored as part of the property record and retained as long as the property record exists.
• Reviews: Retained indefinitely unless removed for policy violation or upon a valid deletion request.
• Logs and analytics: Retained for twelve (12) months.
• Consent records: Retained for the life of the account plus three (3) years after the business relationship ends, as required by CASL.
• Partner application data (rejected): Retained for ninety (90) days after rejection for fraud prevention, then securely deleted.
• Free trial accounts (never converted): If you create an account during the free trial period and do not subscribe to a paid plan, your account data is retained for ninety (90) days after trial expiration to allow you to return and subscribe. After ninety (90) days, your account and associated personal information are securely deleted, except where retention is required by law.
• Seller and Buyer's Agent Portal access logs: Retained for six (6) months.
• Offer and transaction data (listing-side records): Retained for six (6) years after the transaction date for tax, legal, and regulatory compliance (CRA requirement).
• Communications between Agents and Partners: Retained for six (6) months after Booking completion or cancellation.
• AI input data sent to Anthropic: RealtyOps Pro AI Inc. does not independently retain AI input data beyond the property record. Anthropic retains API inputs for a limited period for trust and safety purposes; see Anthropic's data processing terms for current details.

When personal information is no longer needed, we securely delete or anonymize it.

We implement technical and organizational measures to protect your personal information, including:

• Encryption: Data encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption (via Supabase/AWS).
• Access controls: Row Level Security (RLS) in our database ensures Users can only access their own data. Administrative access is restricted to authorized personnel.
• Subscription payment security: Subscription payment processing is handled by a third-party PCI-DSS compliant payment processor. We never store, process, or transmit full credit card or financial account numbers. Agent–Partner Booking payments are settled directly between the parties outside the Platform; their security is the responsibility of the parties and their chosen payment methods.
• Authentication: Passwords are hashed using industry-standard algorithms. Magic links for Seller Portal access expire after use.
• Infrastructure: Our application and database infrastructure is hosted on enterprise-grade platforms (Vercel, Supabase/AWS) with redundancy and monitoring.

We maintain a documented incident response plan that is reviewed and updated at least annually. The plan covers breach detection, containment, investigation, notification, and remediation procedures.

While we take reasonable steps to protect your information, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

In the event of a security breach involving your personal information that creates a real risk of significant harm, we will:

• Notify affected individuals without unreasonable delay, including a description of the incident, the types of personal information involved, steps we are taking, and steps you can take to protect yourself;
• Report to the Office of the Privacy Commissioner of Canada as required under PIPEDA's mandatory breach reporting provisions;
• Report to applicable Canadian provincial privacy commissioners where required by provincial law;
• Report to applicable US state authorities within the timelines required by state breach notification laws (ranging from thirty (30) to seventy-two (72) days depending on jurisdiction);
• Maintain a breach register documenting all incidents involving personal information, whether or not they meet the notification threshold, for a minimum of twenty-four (24) months from the date of each incident as required by PIPEDA, or longer where required by applicable law.

The Platform uses automated processing in the following areas:

• Partner search ranking: Partners are ranked in Marketplace search results based on ratings, reviews, response time, and proximity to the property. This ranking is algorithmic and not influenced by payments from Partners.
• AI content generation: Property data is processed by the Anthropic Claude API to generate marketing content at the Agent's request.
• Fraud detection: Automated systems may flag suspicious payment activity, unusual login patterns, or policy violations for review.

These automated processes do not make decisions with legal or similarly significant effects on individuals without human involvement. Where required by applicable law (including under the upcoming federal Consumer Privacy Protection Act), you have the right to be informed when a decision about you is based exclusively on automated processing, to receive an explanation of the logic involved, and to request human review. Contact support@realtyopspro.ai to exercise this right.

Depending on where you reside, you have certain rights regarding your personal information. The specific rights available to you are detailed in the jurisdiction-specific sections below.

How to Exercise Your Rights. To exercise any of your privacy rights, you may contact us at privacy@realtyopspro.ai or submit a request through your account settings. We will verify your identity before processing your request and respond within the timeframes required by applicable law.

If you reside in a US state not specifically listed above, you may still have privacy rights under your state's laws. As of 2026, twenty US states have enacted comprehensive privacy laws, with additional states expected to follow. We honor the consumer rights provided under all applicable state privacy laws, including rights to access, correct, delete, and obtain portable copies of personal data, and rights to opt out of targeted advertising and the sale of personal data. Under federal law, you have rights under the FTC Act and CAN-SPAM Act, including the right to opt out of commercial email communications. Contact us at privacy@realtyopspro.ai to exercise your rights. We respond to all verified privacy requests within forty-five (45) days.

RealtyOps Pro AI Inc. currently uses Vercel Analytics, a privacy-friendly, cookieless analytics service that does not use cookies or track individual users. It collects aggregate performance data (page views, web vitals) without identifying individuals.

We use essential, session-based technologies (such as authentication tokens and session identifiers) necessary for the Platform to function. These are not tracking cookies and cannot be disabled without preventing Platform access.

Third-party services integrated into the Platform (such as our designated payment processor for Subscription billing) may set strictly necessary cookies for fraud detection and security purposes during checkout. These are essential to Platform functionality and cannot be disabled. If we introduce cookie-based analytics or marketing tools in the future, we will update this Privacy Policy and, where required by law (including CCPA/CPRA), implement a cookie consent mechanism that obtains your consent before activating non-essential cookies.

We honor Global Privacy Control (GPC) signals and other recognized universal opt-out mechanisms as required by applicable US state privacy laws, including the California Consumer Privacy Act (CPRA), the Colorado Privacy Act, the Connecticut Data Privacy Act, the Delaware Personal Data Privacy Act, the Maryland Online Data Privacy Act, the Minnesota Consumer Data Privacy Act, the Montana Consumer Data Privacy Act, the New Hampshire Privacy Act, the New Jersey Data Privacy Act, the Oregon Consumer Privacy Act, and the Texas Data Privacy and Security Act. If your browser or device sends a GPC or equivalent universal opt-out signal, we treat it as a valid opt-out of the sale or sharing of personal information.

The Platform is designed for licensed real estate professionals and service providers and is not directed at or intended for use by anyone under the age of eighteen (18). We do not knowingly collect personal information from minors. In compliance with the US Children's Online Privacy Protection Act (COPPA), we do not knowingly collect information from children under thirteen (13). If we discover that we have collected personal information from a minor, we will delete such information promptly. If you believe a minor has provided us with personal information, please contact us at privacy@realtyopspro.ai.

RealtyOps Pro AI Inc. does not intentionally collect biometric data (such as fingerprints, voiceprints, or facial geometry). If you upload content containing biometric identifiers (for example, facial images in property photographs or virtual tours), you represent that you have obtained any consents required under applicable law, including the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act (CUBI), and any other applicable biometric data legislation.

Some browsers transmit "Do Not Track" (DNT) signals. There is currently no industry-wide standard for how websites should respond to DNT signals. Our Platform does not use tracking cookies, so DNT signals do not change your experience. If we introduce tracking technologies in the future, we will update our response to DNT signals in this section.

The Platform may contain links to third-party websites, services, or applications, including Partner-provided URLs (portfolio sites, external scheduling pages, or Partner-issued invoices). We are not responsible for the privacy practices, content, or security of any third-party site. We encourage you to review the privacy policies of any third-party sites you visit. When you communicate with a Partner directly or visit their site, the Partner's own privacy policy and terms of service govern that interaction.

Transactional messages: We send transactional messages (Booking confirmations, payment receipts, delivery notifications, status updates) that are necessary for the operation of the Platform. You cannot opt out of transactional messages while maintaining an active account.

Commercial messages: We may send commercial electronic messages about Platform features, promotions, and updates. In compliance with Canada's Anti-Spam Legislation (CASL), we obtain your express consent before sending commercial electronic messages. You may withdraw your consent at any time by using the unsubscribe link in any commercial message or by contacting us at privacy@realtyopspro.ai.

Under the US CAN-SPAM Act, all commercial emails include a clear unsubscribe mechanism, our physical mailing address, and accurate header information. We honor unsubscribe requests within ten (10) business days.

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date and provide notice through email, an in-Platform banner, or both. For material changes, we will provide at least thirty (30) days' notice and, where required by law, obtain your renewed consent. Your continued use of the Platform after the effective date constitutes acceptance of the updated Privacy Policy.

If you have questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact:

• Privacy Officer: Behzad Mohazzab, Chief Executive Officer — privacy@realtyopspro.ai
• Mail: RealtyOps Pro AI Inc., Attention: Privacy Officer, British Columbia, Canada (mailing address available upon request to privacy@realtyopspro.ai)

If you are a US resident and are not satisfied with our response, you may contact your state Attorney General's office or file a complaint with the Federal Trade Commission (FTC) at ftc.gov.