Privacy Policy

This Privacy Policy explains how RealTeaCRM (“RealTeaCRM,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with our real-estate CRM and marketing software and related websites and services (the “Service”). By using the Service, you agree to this Policy.

RealTeaCRMis a tool operated by real-estate professionals and teams (“Customers”) to manage their own contacts, leads, and transactions. If you are a contact of one of our Customers, that Customer — not RealTeaCRM — is the controller of your information; please contact them regarding their data practices.

Information we collect

Information you provide. Account and profile details (name, email, phone, headshot, license and brokerage information), authentication credentials, billing information, and any content you submit to support.

Customer Data. Information you enter or import to run your business — contacts, leads, deals, notes, tasks, calendar events, and messages. You are responsible for having the right to provide this data and for how you use it.

Data from connected services. RealTeaCRM is bring-your-own-credentials: you may connect third-party accounts (for example Twilio, your email provider, social platforms, and Google). When you connect an account, we access only the data needed to power the feature you enabled, using the permissions you grant. See Google user data below.

Usage and device data. Log data, device and browser information, and cookies used to operate, secure, and improve the Service.

Google user data

If you connect a Google account to use Google Calendar sync, we request the calendar.events scope. We use this access only to provide the calendar features you turn on: reading your calendar events to display them in your RealTeaCRM calendar, and creating, updating, or deleting the events you manage in RealTeaCRM on your Google Calendar (two-way sync). We access your Google email address to identify and label the connected account.

We store the OAuth tokens needed to keep the connection working — encrypted at rest — along with a mapping between your RealTeaCRM events and the corresponding Google events. You can disconnect at any time from your RealTeaCRM calendar settings, which revokes our access and deletes the stored tokens.

Limited Use. RealTeaCRM’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not use Google user data for advertising, we do not sell it, and we do not transfer it to others except as necessary to provide or improve the user-facing feature you requested, to comply with applicable law, or as part of a merger or acquisition with notice to you. We do not allow humans to read your Google data except with your consent (for example, to help you with support), where necessary for security or to comply with law, or where the data has been aggregated and anonymized.

How we use information

• Provide, operate, secure, and improve the Service and its features.
• Draft outbound messages for your review — nothing is sent without your approval.
• Authenticate you, process billing, and provide customer support.
• Detect, prevent, and address fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our terms.

How we share information

We do not sell your personal information. We share information only as follows:

• Service providers (subprocessors) that host and power the Service — such as our cloud database and hosting providers and AI providers — under contracts that limit their use of the data to providing services to us.
• Your own connected providers. When you send a message or sync an event, the content flows through the accounts you connected (for example your Twilio, email, or Google account), under your identity.
• Legal and safety — where required by law, or to protect the rights, property, or safety of RealTeaCRM, our Customers, or others.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice consistent with this Policy.

Data retention and deletion

We retain information for as long as your account is active or as needed to provide the Service, then delete or anonymize it within a reasonable period, unless a longer period is required by law. You can disconnect a Google account at any time to revoke access and delete the stored tokens, and you can request deletion of your account and associated data by contacting us.

Security

We use administrative, technical, and organizational safeguards to protect information, including encryption in transit, encryption of stored OAuth tokens at rest, and database row-level security that isolates each Customer’s data. No method of transmission or storage is perfectly secure, but we work to protect your information and to notify you of material incidents as required by law.

Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. You can update your profile in the app, disconnect connected accounts at any time, and contact us to exercise other rights. We will not discriminate against you for exercising these rights.

Cookies

We use cookies and similar technologies that are necessary to operate the Service (for example to keep you signed in) and to understand and improve usage. You can control cookies through your browser settings, though some features may not function without them.

Children

The Service is not directed to children under 18, and we do not knowingly collect their information.

Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the effective date above and, for material changes, provide additional notice. Your continued use of the Service after an update means you accept the revised Policy.

Contact us

Questions about this Policy or your information? Contact us at mitchell@mitchellwhiterealtor.com.