Privacy Policy
Effective Date: March 20, 2026
Good Creator LLC ("RealtorAI," "we," "us," or "our") operates the RealtorAI platform
and website at realtorai.app. This Privacy Policy describes how we
collect, use, store, and protect your personal information when you use our service.
1. Information We Collect
1a. Information You Provide
- Account & Onboarding Information: Full name, email address, phone number, Instagram handle, brokerage or team name, primary market area, brand description, and posting preferences submitted through our intake form.
- Brand & Voice Assets: Brand voice guidelines, audience profiles, content examples, local market knowledge, and voice recordings used for AI voice cloning.
- Approval Decisions: Content approval, rejection, and editing actions taken via Telegram bot or admin dashboard, including rejection reasons and preference notes.
- Payment Information: Billing details processed through our payment provider. We store a customer identifier and purchase history but do not store credit card numbers.
1b. Information Collected Automatically
- Instagram & Facebook Data: Account metrics (reach, saves, shares, comments, follower count), post performance data, and audience engagement patterns collected via Instagram Graph API and Facebook Pages API with your authorization.
- Market & Research Data: MLS listing data, mortgage rates, census demographics, competitor account insights, and local market information gathered by our AI agent to inform content creation.
- Usage Data: IP address, browser type, device information, pages visited on our website, and activity logs from the admin dashboard.
2. Lawful Basis for Processing (EEA/UK)
For users in the European Economic Area and United Kingdom, we process personal data under the following lawful bases:
- Performance of Contract: Account creation, content generation, publishing, approval workflow, and payment processing.
- Legitimate Interest: Content safety and Fair Housing compliance checks, security and abuse prevention, service improvement, and support communications.
- Consent: Voice cloning, analytics, and marketing communications. You may withdraw consent at any time.
3. How We Use Your Information
- Operate and provide the RealtorAI service, including autonomous content research, generation, scheduling, and publishing.
- Configure your AI agent with your brand voice, market data sources, and compliance rules.
- Generate AI-animated Reels, Stories, and posts with voice-cloned voiceovers.
- Run the self-learning loop: analyze post performance, extract winning patterns, and improve content strategy.
- Learn from your approval and rejection decisions to refine future content.
- Perform Fair Housing compliance checks on all generated content.
- Process payments and enforce subscription terms.
- Send service communications (onboarding updates, weekly learning reports).
- Monitor service health, prevent abuse, and maintain security.
4. Cookies & Tracking
Essential Cookies (No Consent Required)
- Session cookies: Authentication and CSRF protection.
- Preference cookies: Cookie consent state storage (1-year expiry).
Analytics Cookies (Consent Required)
- We may use privacy-focused analytics to understand website usage. Analytics are only loaded after you provide consent.
- We do not use advertising cookies or sell data to advertisers.
5. Third-Party Services
We share data with the following third-party services as necessary to provide our service:
| Service | Data Shared | Purpose | Location |
|---|
| Instagram Graph API | Account credentials, post content, media | Content publishing & metrics | USA |
| Facebook Pages API | Post content, media | Cross-posting to Facebook | USA |
| Anthropic (Claude) | Text prompts, brand context | AI content generation, safety checks, learning analysis | USA |
| Google (Gemini) | Image prompts | AI image generation, video animation | USA |
| Telegram | Post previews, approval actions | Content approval workflow | Global |
| Cloudflare R2 | Generated images, videos, audio | Media storage & delivery | USA |
| Stripe | Email, customer ID, payment info | Payment processing | USA |
| Cloudflare | IP address | CDN, DNS, website hosting | USA/Global |
We do not sell your personal information to third parties.
6. International Data Transfers
Your data is processed in the United States. If you are located in the EEA or UK, transfers are protected
by Standard Contractual Clauses (SCCs) or equivalent safeguards. By using our service, you acknowledge
and consent to the transfer of your data to the USA.
7. Data Retention
| Data Type | Retention Period |
|---|
| Account & onboarding information | Until account deletion or service cancellation |
| Brand voice & context files | Until account deletion or service cancellation |
| Generated content (posts, Reels, Stories) | Until account deletion (or individual deletion) |
| Voice clone recordings | Until account deletion; deleted within 30 days of cancellation |
| Post performance & learning data | Until account deletion |
| Approval history & rejection reasons | Until account deletion |
| Purchase & payment history | 7 years (tax/legal compliance) |
| Activity & access logs | 90 days |
| Analytics data | Anonymized after 90 days |
8. Your Privacy Rights
8a. All Users
- Cancel your subscription and request deletion of all associated data.
- Request deletion of specific generated content.
- Request a copy of your data.
- Change cookie consent preferences.
8b. California Residents (CCPA/CPRA)
If you are a California resident, you have the right to:
- Right to Know: Request disclosure of personal information collected, used, and shared.
- Right to Delete: Request deletion of your personal information.
- Right to Correct: Request correction of inaccurate personal information.
- Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising.
- Right to Non-Discrimination: We will not discriminate against you for exercising your rights.
Categories of Personal Information Collected: Identifiers (name, email, phone, IP address, Instagram handle), commercial information (purchase history, subscription status), internet/electronic network activity (website interactions, admin dashboard usage), and inferences drawn from the above.
How to exercise: Email goodcreatorllc@gmail.com with subject line "CCPA Request." We will verify your identity and respond within 45 days.
8c. EEA/UK Residents (GDPR/UK GDPR)
You have the following rights under the General Data Protection Regulation:
- Right of Access (Art. 15) — Obtain a copy of your personal data.
- Right to Rectification (Art. 16) — Correct inaccurate data.
- Right to Erasure (Art. 17) — Request deletion of your data.
- Right to Restrict Processing (Art. 18) — Limit how we process your data.
- Right to Data Portability (Art. 20) — Receive your data in a structured, machine-readable format.
- Right to Object (Art. 21) — Object to processing based on legitimate interest.
- Right to Withdraw Consent — Withdraw consent at any time without affecting prior processing.
- Right to Lodge Complaint (Art. 77) — File a complaint with your local data protection authority.
How to exercise: Email goodcreatorllc@gmail.com with subject line "GDPR Request." We will respond within 30 days.
8d. Canadian Residents (PIPEDA & Quebec Law 25)
- Right to access your personal information.
- Right to request correction of inaccurate information.
- Right to withdraw consent for data processing.
- Right to file a complaint with the Office of the Privacy Commissioner of Canada (OPC) or Quebec's Commission d'acces a l'information du Quebec (CAI).
How to exercise: Email goodcreatorllc@gmail.com with subject line "PIPEDA Request."
8e. Indian Residents (DPDPA 2023)
- Right to access your personal data.
- Right to correction and erasure of your data.
- Right to grievance redressal, escalable to the Data Protection Board of India.
- Right to nominate another person to exercise your rights upon death or incapacity.
Data Fiduciary: Good Creator LLC, 1401 21st ST #15039, Sacramento, CA 95811, USA.
How to exercise: Email goodcreatorllc@gmail.com with subject line "DPDPA Request."
9. Children's Privacy
RealtorAI is a business-to-business service intended for real estate professionals. It is not directed at
children. We do not knowingly collect personal information from anyone under 13 years of age (or 16 in
the EEA/UK, or 18 in India). If you believe we have collected information from a child, please contact
us at goodcreatorllc@gmail.com.
10. Data Security
We implement reasonable security measures to protect your data, including:
- Encrypted sessions and secure authentication.
- HTTPS encryption for all data in transit.
- Time-limited signed URLs for media access.
- Server-side access controls and ownership verification.
- Isolated per-tenant data storage.
No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
11. Data Breach Notification
In the event of a data breach affecting your personal information, we will notify affected users and
relevant supervisory authorities as required by applicable law. For EEA/UK users, we will notify the
relevant data protection authority within 72 hours of becoming aware of a qualifying breach.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page with
a new Effective Date. For material changes, we will provide prominent notice via email or service notification.
Continued use of RealtorAI after changes constitutes acceptance of the updated policy.
13. Contact Us