This Privacy Policy describes how Our Application ("we", "our" or "us") collects, uses and discloses your information, including your Google user data, in connection with the use of our real estate management services.
1. Information we collect
We collect information that you provide to us directly, such as when you create an account, connect your Google account or communicate with us.
Google user data
When you connect your Google Account to our application, we access the following specific data scopes to provide our services:
1. Google Drive (Limited Access)
auth/drive.file
- Access: We only access files and folders created or opened by our application.
- Purpose: To store and organize real estate documents, contracts and property presentations specifically related to your agency's operations within our system.
2. Google Calendar
auth/calendar.events auth/calendar.freebusy auth/calendar.app.created auth/calendar.acls
- Access: We access your calendar events, free/busy status and manage calendars created by our app.
- Purpose: To schedule property visits, synchronize appointments between our CRM and your calendar, and verify your availability to avoid double bookings.
3. Google Sheets
auth/spreadsheets
- Access: We read and write to Google Sheets.
- Purpose: To export CRM data (leads, properties) to spreadsheets for your reporting and analysis needs, and to synchronize data from your existing spreadsheets into our system.
4. Gmail
auth/gmail.readonly auth/gmail.compose
- Access: We read your emails and have the ability to send emails on your behalf.
- Purpose — Read: To automatically detect inquiries from potential clients (e.g. from real estate portals) and synchronize communication history with the lead's profile in our CRM.
- Purpose — Compose: To allow you to send property proposals, follow-ups and responses to leads directly from our CRM interface.
2. How we use your data
We use the information we collect, including Google user data, for the following purposes:
- Service Delivery: To provide, maintain and improve our real estate CRM features (contact management, scheduling, document storage).
- Automation: To automate routine tasks such as data entry from emails and calendar synchronization.
- Communication: To facilitate communication between you and your leads/clients.
3. Data sharing and disclosure
We do not share your Google user data with third parties, except:
- With your consent.
- With our service providers (e.g. database hosting, AI processing) who are bound by confidentiality obligations and process data only on our behalf.
- To comply with legal obligations.
We do not sell your personal data or Google user data to advertisers or other third parties.
4. Roles in data processing (GDPR)
For the purposes of the General Data Protection Regulation (EU 2016/679):
A) Client Data (the Real Estate Agency)
RSAGENTIC LLC acts as "Data Controller" with respect to the billing and registration data of the real estate agency that contracts with us.
B) Third-Party Data (Leads/Prospects)
RSAGENTIC LLC acts as "Data Processor". We process the data of potential buyers/tenants EXCLUSIVELY following the instructions of the Real Estate Agency (Data Controller) to provide the automation service.
5. International transfer and privacy shield
Data is processed in the United States. To ensure the security of data of European citizens, we adhere to the Standard Contractual Clauses (SCC) approved by the European Commission to legitimize the international transfer of data to processors in third countries.
6. Sub-processors
To provide the AI service, we use trusted technology providers. By accepting this policy, you authorize the use of:
- AI Model Providers (e.g. OpenAI, Anthropic) for text generation.
- Cloud Hosting Providers (e.g. AWS, Netlify/Vercel) for hosting.
- Messaging Providers (e.g. Twilio, Meta API) for WhatsApp/SMS.
We guarantee that all our providers comply with SOC2 or ISO 27001 security standards.
7. Data retention
We will retain personal data while your account is active. If you cancel your subscription, your leads' data will be deleted from our active systems within a maximum of 30 days, retaining only the information legally required by Delaware tax laws.
8. Data security
We take reasonable measures to help protect your information against loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. Your Google tokens are encrypted at rest in our database.
9. Limited use disclosure
Our use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically with respect to Restricted Scopes (Gmail and Drive):
- We do not use this data to display advertisements.
- We do not allow humans to read this data unless we have your affirmative consent for specific messages, doing so is necessary for security reasons such as investigating abuse, to comply with applicable law, or for the internal operations of the application and the data has been aggregated and anonymized.
10. Contact us
If you have any questions about this Privacy Policy, please contact us at: rsagentic@gmail.com