Privacy Policy

1. Introduction

AI Property Writer ("we," "our," or "us") provides branded lead-capture pages for real estate agents and AI-generated marketing copy. This Privacy Policy explains what we collect, how we use it, who we share it with, and your rights.

This policy applies to three categories of people we receive data about:

• Users — real estate agents (or others) who sign up for an account and use the Service to host listing pages.
• Buyers — visitors who submit a lead form on a User's listing page expressing interest in a property. Buyers do not have accounts with us.
• Prospective Users — real estate agents whose publicly-available contact information we use to generate a branded preview page and send a single outreach email inviting them to claim that page.

2. Information We Collect

2.1 From Users (account holders)

• Identifiers: name, email address, password (stored as a salted hash by our auth provider; we never see it in plaintext)
• Account preferences: brand colors, logo, headshot, agency name, agent profile fields
• Subscription details: plan, status, billing interval, price cohort, Stripe customer ID, last four digits of card and country (Stripe holds the full card number; we do not)
• Property data you submit to generate listings or pages
• API key prefix and last-used timestamp (we do not retain the API secret in plaintext after generation)
• Optional CRM webhook URL you configure
• Support communications

2.2 From Buyers (lead-form submissions)

When a buyer submits the lead form on a User's listing page, we collect what they enter and what their browser sends:

• Identifiers: name, email, phone (if provided)
• Message and interest type (schedule a tour, request info, mortgage pre-approval, general)
• Optional buyer-qualification fields: mortgage pre-approval status, purchase timeline, whether they are working with another agent, maximum budget
• Technical metadata: IP address, user agent, referer, submission timestamp

Buyer Lead Data is the User's data. We process it on the User's behalf to deliver it to them and (optionally) to their CRM. We do not sell, rent, license, repurpose, profile, or use Buyer Lead Data for our own marketing or analytics.

2.3 From Prospective Users (outreach previews)

Before signup, we may receive a real estate agent's name, email, brokerage, and listing-address information from public real-estate sources (multiple-listing service feeds, brokerage websites). We use this information to generate a branded preview page for that agent's listing and send one outreach email inviting them to claim it.

If a Prospective User engages with the preview page (for example by entering their email in the "save my page" modal), we record that email so we can deliver the one-click claim link and include them in a short nurture sequence (see 3.4).

Every outreach email contains a one-click unsubscribe. If a Prospective User does not claim the page or unsubscribe, the page archives automatically after 14 days. Prospective Users may also email support@aipropertywriter.com to request immediate takedown of a preview page.

2.4 Automatically collected (all visitors)

• IP address (used for rate limiting, abuse prevention, and aggregating geographic visitor counts)
• Browser type, device type, operating system
• Pages viewed, referrer, session duration
• Anonymous-usage records when an unauthenticated visitor uses the homepage listing generator (we tie usage to a session ID + IP to prevent abuse)

2.5 Cookies and similar technologies

We use the following cookies and storage:

• Strictly necessary — Supabase authentication session cookies (so you stay logged in), CSRF protection
• Analytics — Google Analytics 4 (_ga, _gid, _gat) to measure aggregate usage and traffic sources
• Security — Cloudflare Turnstile (cf_clearance, __cf_bm) for bot protection on auth and lead-capture forms
• Local storage — your dark-mode preference and a per-page flag that remembers when you've dismissed the "save your preview" modal (apw_expiry_dismissed_*). No personal data is in localStorage.

3. How We Use Information

3.1 To provide the Service

• Create and authenticate User accounts
• Generate AI listing copy, presentations, marketing content
• Host User listing pages and serve them to visitors
• Receive Buyer Lead Data and forward it to the User by email and (if configured) to the User's CRM webhook
• Process payments and manage subscriptions through Stripe
• Send service notifications (account, billing, security)

3.2 To improve the Service

• Aggregate analytics on usage patterns, conversion funnels, page performance
• Debug errors and monitor performance
• Develop new features informed by anonymized usage data

3.3 For security and abuse prevention

• Rate limit requests by IP
• Run CAPTCHA challenges on auth and lead forms (Cloudflare Turnstile)
• Detect fraudulent payment activity (Stripe Radar)
• Maintain audit logs for security events

3.4 For outreach (Prospective Users only)

We may send a real estate agent a single email about a branded preview page we generated from public listing data. If the recipient engages (clicks the preview link or enters their email on the preview page) but does not claim the page, we may send up to two follow-up emails over the following two weeks reminding them about the preview. Every email has a one-click unsubscribe; unsubscribing stops all future outreach immediately.

3.5 Legal and safety

To comply with applicable law, respond to lawful requests, enforce our Terms of Service, and protect against fraud, abuse, or harm to users.

4. Information We Do Not Use

• We do not sell personal information.
• We do not share personal information for cross-context behavioral advertising.
• We do not use Buyer Lead Data for our own marketing, analytics, or to train AI models.
• We do not use property descriptions or AI-generated copy you create as training data for our AI models.

5. Service Providers and Sub-Processors

We rely on the following service providers to operate the Service. Each has access only to the data necessary to perform their function and is contractually bound to process it consistent with this policy.

User-configured forwarding. If a Pro User sets up a CRM webhook, we forward Buyer Lead Data to the URL the User specifies (Zapier, Follow Up Boss, Make, or any service the User chooses). The User — not us — controls and is responsible for the privacy practices of that downstream service.

6. Sharing and Disclosure

We share personal information only:

• With the User who owns the listing page (Buyer Lead Data goes to them)
• With service providers listed in section 5, under contract
• To comply with valid legal process (subpoenas, court orders, lawful government requests)
• To protect rights, safety, or property (ours, Users', or the public)
• In connection with a merger, acquisition, or sale of assets — with notice to affected Users

7. Data Retention

• User account data — retained while account is active; deleted within 30 days of account-deletion request, except where retention is required by law (for example, payment records under tax law)
• Generated listings and pages — retained while account is active; archived (not publicly accessible) after subscription cancellation; deleted on account deletion
• Buyer Lead Data — retained while the receiving User's account is active and for 90 days following cancellation, then permanently deleted (matching our Terms of Service)
• Outreach state — retained until unsubscribe + 30-day suppression-list grace; preview pages archive automatically after 14 days if unclaimed
• Aggregate analytics — retained indefinitely in de-identified form; raw IP-linked logs retained for up to 12 months for security and debugging
• Payment records — retained as required by tax and accounting law (typically 7 years)

8. Your Rights

Depending on where you live, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you
• Correction — request that we correct inaccurate or incomplete information
• Deletion — request that we delete your personal information
• Portability — request your data in a portable, machine-readable format (CSV export is built into the dashboard for lead data)
• Opt-out — opt out of marketing emails using the unsubscribe link in any message
• Withdraw consent — where we rely on consent, you may withdraw it at any time
• Lodge a complaint — with your local data-protection authority (EEA / UK residents)

To exercise any of these rights, email support@aipropertywriter.com from the address on your account, or for Buyers, from the email you submitted on the lead form. We will respond within the timelines required by applicable law (typically 30–45 days).

Buyer requests through Users. If you submitted a lead form on an agent's page and want your information removed, you can contact us directly or contact the agent who received your information. Our Terms of Service require Users to honor buyer deletion requests and to notify us so we can purge our copy.

9. California Residents (CCPA / CPRA)

If you are a California resident, you have the rights described in section 8 above, plus the following CCPA/CPRA-specific rights:

• Right to know what categories of personal information we collect, the sources, the purposes, and the categories of recipients
• Right to delete personal information we have collected
• Right to correct inaccurate personal information
• Right to limit the use and disclosure of sensitive personal information
• Right to opt out of the sale or sharing of personal information for cross-context behavioral advertising
• Right to non-discrimination for exercising any of these rights

Categories of personal information we collect: identifiers (name, email, phone, IP address); commercial information (subscription history); internet activity (page views, browser metadata); inferences (buyer qualification fields when voluntarily submitted on a lead form). Sources: directly from you (Users), directly from buyers via Users' listing pages, publicly available real-estate sources (for preview generation only).

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We have not done so in the preceding 12 months.

California residents may submit requests via authorized agent. We will verify any authorized-agent request before responding.

10. European Residents (GDPR / UK GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the rights described in section 8 above. We process your information on the following legal bases:

• Contract — providing the Service to Users who sign up
• Legitimate interest — security, fraud prevention, aggregate analytics, outreach to real estate agents in their professional capacity (subject to your right to object)
• Consent — non-essential cookies and marketing emails (you can withdraw at any time)
• Legal obligation — tax records, lawful disclosure requests

International transfers. Our infrastructure is located in the United States. If you are in the EEA, UK, or Switzerland, your information will be transferred to the US. We rely on Standard Contractual Clauses (SCCs) and supplementary measures with our sub-processors where applicable.

You may lodge a complaint with your local supervisory authority. For data-protection inquiries email support@aipropertywriter.com.

11. Data Security

We use industry-standard measures to protect personal information, including:

• Encryption in transit (TLS 1.2+)
• Encryption at rest for production databases
• Hashed authentication credentials (we never store passwords in plaintext)
• Access controls and least-privilege service accounts
• CAPTCHA and rate limiting on public endpoints
• Regular dependency updates and security review

No system is 100% secure. If you believe your account or any data has been compromised, contact us immediately at support@aipropertywriter.com.

12. Children's Privacy

The Service is intended for real estate professionals and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

13. Third-Party Links

The Service may contain links to third-party websites (CRM tools, MLS portals, social platforms). We are not responsible for the privacy practices of those external sites and recommend you review their policies.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be announced via email to active Users and posted at the top of this page with a new "Last updated" date. Continued use of the Service after a change constitutes acceptance of the updated policy.

15. Contact Us

For privacy questions, requests, or concerns: