Privacy Policy

1. Introduction

RealAroha ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our real estate marketing platform.

By using RealAroha, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not use our services.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us:

• Account information (name, email address, password)
• Profile information (company name, phone number, bio)
• Billing information (payment details, billing address)
• Property information (addresses, descriptions, pricing)
• Media content (photos, videos, documents)

2.2 Automatically Collected Information

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, features used, time spent)
• Log data (access times, error logs, performance metrics)
• Cookies and similar tracking technologies

2.3 Information from Third Parties

• Social media profile information (if you connect accounts)
• Payment processor information (for billing)
• Analytics providers (for usage insights)

3. How We Use Your Information

We use your information for the following purposes:

• Provide, maintain, and improve our services
• Process your property listings and marketing materials
• Manage your account and subscriptions
• Send you service-related communications
• Respond to your comments, questions, and support requests
• Analyze usage patterns and optimize platform performance
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our terms

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 Service Providers

We work with third-party service providers who perform services on our behalf:

• Media Processing Service: Image and video hosting, processing, transformations, and AI enhancements
• Resend: Transactional email delivery and marketing communications
• Neon Database: Data storage and management
• Anthropic: AI-powered copywriting services
• Ayrshare: Social media publishing automation
• Stripe: Payment processing and subscription management
• Vercel: Hosting and analytics

4.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental request, or to protect our rights, property, or safety.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Password hashing using bcrypt
• Regular security audits and penetration testing
• Access controls and authentication
• Secure media storage with enterprise-grade infrastructure
• Secure cloud infrastructure with SOC 2 Type II compliance

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights:

6.1 Access and Portability

Request a copy of your personal data in a machine-readable format. Available in your account settings.

6.2 Correction

Update or correct inaccurate personal data. You can edit your profile information directly in your account.

6.3 Deletion

Request deletion of your personal data. Note that some information may be retained for legal or operational purposes.

6.4 Objection and Restriction

Object to or restrict certain processing of your data. Contact us to exercise these rights.

6.5 Withdraw Consent

Withdraw consent for data processing where consent is the legal basis. This will not affect the lawfulness of processing before withdrawal.

7. Cookies and Tracking

We use cookies and similar technologies to provide and improve our services:

7.1 Essential Cookies

Required for authentication, security, and core platform functionality. These cannot be disabled.

7.2 Analytics Cookies

Help us understand how users interact with our platform (via Vercel Analytics). You can opt out in your browser settings.

7.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling cookies may affect platform functionality.

8. Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (e.g., tax records)
• Resolve disputes and enforce agreements
• Maintain audit trails and security logs

After account deletion, we will delete or anonymize your personal data within 90 days, except where retention is required by law.

9. Children's Privacy

RealAroha is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and maintained on servers located outside your country. By using RealAroha, you consent to the transfer of your information to countries that may have different data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on our platform. Your continued use after changes constitutes acceptance of the updated policy.