What we collect, and what we do with it.
Written to be read by a working agent, not by a lawyer. Every section describes what the platform actually does today.
Effective 31 August 2026
01What this covers
This policy describes the information Interactive.RealEstate collects when you visit the public site, enroll, or use the tools in your account, and what we do with it. It applies to the platform itself. It does not cover what your brokerage, your MLS, or the social networks you publish to do with information you give them directly.
02Information you give us
Most of what we hold is information you typed in yourself, because the tools cannot brand your marketing without it.
- Account details: your name, email address, phone number, and password. Passwords are handled by our authentication provider and are stored only as salted hashes — we never see or store the plaintext.
- Professional details: brokerage or team name, office address, license number and licensing state, service areas, websites, and social handles. Much of this is required on marketing material by state advertising rules.
- Brand assets: logos, headshots, colors, taglines, and any photos or video you upload for a tool run.
- Content you create: the listings, topics, notes, and adjustments you type into a tool, plus the assets it generates and any refinement instructions you send afterwards.
- Support and correspondence: anything you send us by email or through a form.
03Information we generate or receive
Some information appears without you typing it — either because the system records what happened, or because a third party supplied it.
- Usage records: which tool you ran, when, on which plan, whether it succeeded, and what it cost us to run. This is how entitlement, run counts, and billing work.
- Administrative audit records: consequential account actions — a role change, a suspension, an admin-initiated password reset — with who did it and when. These are append-only by design.
- Listing data: when you run a tool against an MLS listing, we retrieve that listing's data and photos from the MLS or its licensed feed under the terms your MLS sets.
- Property and estimate data for the Investment Property Finder: public and licensed third-party records used to build the figures shown, which are estimates and are labeled as such wherever they appear.
- Technical records: standard server logs, and error reports if a page fails.
04Payment information
We do not store card numbers, expiration dates, or security codes. Card details go directly to our PCI-compliant payment processor, which returns a token. What our database holds is that token, the card brand, the last four digits, the subscription state, and a history of billing events — enough to show you what you are paying for and to take the next payment, and not enough to charge a card anywhere else.
Junior administrators cannot see billing records or payment methods at all.
05Where your files live
Generated assets — videos, images, flyers, scripts, and recordings — are stored in a Dropbox folder structure created for your account. Our database holds links to those files rather than copies of them, so your assets stay in one place you can also reach directly.
Uploads that need to stay private before they are processed — logos, headshots, and source photos — are held in private storage buckets that are not publicly readable. Access is granted per request through short-lived signed URLs.
06How we use it
We use your information to run the product you are paying for: authenticating you, applying your brand to what you generate, enforcing plan limits, screening generated content for compliance problems before you see it, filing your assets, supporting you when something breaks, and billing you.
We do not sell your personal information. We do not share your listings, brand assets, or generated content with other customers.
07AI providers and generated content
The tools send the relevant parts of your input — listing details, brand profile fields, your notes — to third-party AI providers to produce text, images, audio, or video. Which provider handles which job is chosen per task and changes as the technology moves.
We contract for our providers not to train their general models on our customers' content. Provider terms are outside our control and can change; when a change matters we will say so here rather than quietly.
Generated output is yours to publish. You remain the publisher and the licensee: the compliance screener is a safety net, not a lawyer or a broker, and it will miss things.
08Who else can see your account
Access inside the platform follows the role you hold, and is enforced in the database rather than only in the interface.
- You can see your own profile, assets, and history.
- An office manager can see the seats they hold, including usage and tool access for those seats — not the personal billing details of the people in them.
- Administrators can see accounts and platform records in order to support and operate the service. Junior administrators are deliberately blocked from payment methods, billing, and the API registry.
- Service providers — hosting, authentication, storage, payments, email, and the AI providers above — see only what they need to perform their function.
- We will disclose information if the law requires it, and will tell you unless we are prohibited from doing so.
09How long we keep things
Retention windows are configured in the platform and run automatically rather than being left to good intentions. The current defaults:
- Order and query history: 60 days, with a warning 7 days before removal.
- Resolved prompt text: 30 days.
- Video Studio recordings held on the platform: 30 days.
- Inspiration folders: 100 days.
- API telemetry used for cost reporting: 90 days.
- Account, licensing, brand profile, and billing records: for as long as your account is open, and afterwards only as long as tax and accounting obligations require.
- Administrative audit records: retained as a security record and not deleted on request, because a deletable audit log is not an audit log.
10Exporting and deleting your account
You can ask for a copy of your account data — profile, brand fields, run history, and the list of your generated assets — and we will provide it in a machine-readable format. Your generated files are already in your Dropbox folders and remain yours.
You can ask us to close and delete your account. We will remove your profile, brand assets, uploads, and generated content records within 30 days, keeping only what we are required to keep: billing records for tax purposes, and the append-only audit log of administrative actions. Deletion is not reversible.
Email privacy@interactive.realestate for either request. We will confirm your identity before acting on it.
11Security
Traffic is encrypted in transit. Session tokens are held in HttpOnly cookies so that a script on the page cannot read them. Row-level security is forced on every table, so a query that should not return your data cannot return it even if the application layer has a bug. Secrets and API keys live in server-side environment storage and are never sent to the browser. Uploads are restricted by file type and size.
No system is perfectly secure. If we discover a breach affecting your information, we will notify you and any regulator the law requires, promptly.
12Children
This is a professional tool for licensed real estate practitioners. It is not directed at anyone under 18 and we do not knowingly collect information from children.
13Changes and contact
If we change this policy in a way that materially affects you, we will email account holders rather than silently updating the date at the top.
Questions, requests, or complaints: privacy@interactive.realestate.