Legal

Privacy Policy

This policy explains what personal information ReelEstate collects, why, who we share it with, how long we keep it, and the rights you have over it. It applies to our website, tools, and mobile app.

Effective date: July 8, 2026

1. Who we are

ReelEstate (“ReelEstate”, “we”, “us”) operates a platform that connects renters with real-estate agents and provides renter and agent tools. We are based in Illinois, United States.

For anything in this policy — including to exercise your privacy rights — contact us through our contact page.

For most personal data we handle, ReelEstateis the “controller”. One important exception: when an agent loads a renter's details into their CRM, the agent is the controller of that data and ReelEstateacts as their “processor” — see “Agent CRM data” below.

2. Information we collect

We collect the following categories of personal information:

Account dataEmail, password (stored hashed by our auth provider), and your account type (renter/client or agent).
Agent profile dataFor agents: name, company, contact email, phone, real-estate license number, service areas, bio, photos, and listings you publish.
Content you createSaved tour checklists, apartment comparisons, commute searches, move-in plans, and (for agents) CRM records, templates, and scheduling.
Lead / inquiry dataWhen you contact an agent, the details you submit — which can include name, contact info, budget, monthly income, credit score, desired move-in date, and preferences. This is sensitive; see sections 3 and 8.
Payment dataFor agents who subscribe: a Stripe customer ID, subscription tier/status, and renewal date. Card numbers are handled directly by Stripe — we never receive or store full card details.
Location inputsAddresses you type into the commute tool (e.g. a home and a work address). These are precise-location inputs and are treated as sensitive; see section 4.
Technical dataBasic session/device information and logs needed to operate and secure the service.

We do not run third-party advertising or analytics trackers. We use only the cookies/local storage needed to keep you signed in and remember your work — see section 9.

3. How we use your information (and our legal basis)

We use personal information for the purposes below. For users in the EU/UK, the GDPR “lawful basis” for each is shown in brackets.

  • Create and run your account, sign you in, and remember your saved work. (Performance of a contract.)
  • Connect renters with agents and deliver messages/inquiries you send. (Performance of a contract.)
  • Run commute and amenity lookups you request. (Performance of a contract.)
  • Take subscription payments and manage billing (agents). (Performance of a contract; legal obligation for tax records.)
  • Verify an agent's real-estate license against the Illinois public license record. (Legitimate interests — trust and safety; legal obligation where applicable.)
  • Keep the service secure, prevent abuse, fix bugs, and improve it. (Legitimate interests.)
  • Comply with law and enforce our Terms. (Legal obligation / legitimate interests.)

We do not sell your personal information, and we do not use your tour notes, comparisons, or CRM data for advertising.

4. Commute lookups and Google

When you use the commute tool, the addresses you enter are sent to Google's Maps Platform (Geocoding, Routes, and Places APIs) through our own server so we can calculate travel times and nearby amenities. Google processes those addresses to return results and under its own terms.

These location inputs are treated as sensitive information. We use them only to answer the specific lookup you asked for and do not build an advertising or tracking profile from them.

5. Who we share information with

We do not sell your personal information. We share it only with the service providers (“sub-processors”) that run parts of our platform, and only as needed to provide the service:

SupabaseDatabase, authentication, and file storage (US).
StripeSubscription payments and billing (agents).
Google Maps PlatformGeocoding, routing, and amenity lookups for the commute tool.
VercelWebsite and app hosting / content delivery.
ResendSending transactional and contact-form email.
TwilioSending SMS/notifications where you opt in.

We also share information when you direct us to (for example, the inquiry you send to an agent goes to that agent), and when required by law or to protect rights, safety, and security.

This list may change as our providers do. When it changes, we will update this policy and its effective date.

6. Agent CRM data (agents as controllers)

Agents can store renter/lead information in the ReelEstateCRM, which may include a renter's contact details, budget, income, and credit score. For this data, the agent is the controller and ReelEstate acts as a processorhandling the data on the agent's behalf, under the Data Processing Addendum in our Terms of Service.

Agents are responsible for having a lawful basis to collect and store that information. If you are a renter and want a correction or deletion of data an agent holds about you, contact that agent; you may also contact us and we will help route the request.

7. Where your data is processed

ReelEstate and our providers process and store data in the United States. If you access the service from the EU, UK, or elsewhere, your information is transferred to the US.

Where required, these transfers rely on appropriate safeguards such as the Standard Contractual Clauses and/or our providers' Data Privacy Framework participation. [CONFIRM the specific transfer mechanism with counsel and name an EU/UK representative if you target EU/UK users.]

8. Your privacy rights

Depending on where you live, you may have some or all of the following rights. To exercise any of them, use our contact page. We will verify your request and respond within the time the law requires.

Everyone

  • Access a copy of the data we hold about you.
  • Correct inaccurate data.
  • Delete your account and associated data.

EU / UK (GDPR)

  • Data portability, restriction, and objection to processing.
  • Withdraw consent where processing relies on consent.
  • Complain to your local data-protection authority.

California (CCPA/CPRA) and similar US state laws

  • Know, delete, and correct your personal information.
  • Opt out of “sale” or “sharing” — we do not sell or share personal information as those terms are defined, so there is nothing to opt out of.
  • Limit the use of sensitive personal information (e.g. credit score, precise location); we already limit these to providing the service you requested.
  • Not receive discrimination for exercising your rights.

9. Cookies and local storage

We use only essential cookies / browser storage — mainly to keep you signed in and to remember your work between visits. We do not currently use third-party advertising or analytics cookies, so there is no tracking to consent to. If that ever changes, we will add a consent banner and update this section.

10. How long we keep data

We keep personal information for as long as your account is active and as needed to provide the service. After you delete your account, we remove or anonymise your personal data within a reasonable period, except where we must keep certain records longer (for example, billing/tax records, or to resolve disputes and enforce our agreements).

[CONFIRM specific retention periods per data category with counsel before publishing.]

11. Security and breach notification

We protect your information with measures including encryption in transit, row-level access controls in our database, and least-privilege handling of secrets. No system is perfectly secure, but we work to keep your data safe.

If a data breach affects your personal information, we will notify you and the relevant authorities as required by applicable law, without undue delay.

12. Children's privacy

ReelEstate is intended for adults (18+) and is not directed to children. We do not knowingly collect personal information from children under 18. If you believe a child has provided us information, contact us and we will delete it.

13. Changes to this policy

We may update this policy as the product or the law changes. When we make material changes, we will revise the effective date above and, where appropriate, notify you in the app or by email.

Last updated: July 8, 2026