Legal

Privacy policy

Last updated: August 2026

This Privacy Policy explains how GetEstateOS ("we", "us", "our") collects, uses, shares and protects information when you use our marketplace, AI assistant, and related services (the "Service"), whether you are a visitor browsing listings, a customer submitting an enquiry, or an agency, agent, or administrator using an authenticated account. By using the Service, you agree to the practices described here.

1. Information we collect

Information you provide directly — your name, email address, phone number, and the content of messages you submit through inquiry forms, the AI chat assistant, appointment requests, or open-house reservations. If you register an agency account, we also collect company details (name, business registration number, contact person, address) and, for account holders, a hashed password.

Information collected automatically — usage data generated as you browse the marketplace and interact with listings (such as which properties you view), device and browser information, and standard web-server logs (IP address, timestamps, requested pages).

Payment information — if you subscribe to a paid plan, payment card details are collected and processed directly by our payment processor (Stripe); we never receive or store your full card number ourselves. We do retain records of the transaction (amount, plan, date, status) needed for invoicing and support.

2. How we use your information

We use the information we collect to: connect you with the agency or agent behind a listing you enquired about; power the AI assistant's property recommendations; operate, secure, and improve the platform; process payments and manage subscriptions; send transactional messages (account confirmation, password resets, appointment confirmations, license-expiry notices, invoices); and send product updates or newsletters you've opted into. Property enquiries submitted through a specific agency's listing or widget are shared only with that agency — never with other agencies on the platform.

3. Cookies and similar technologies

We use strictly necessary cookies to keep you signed in and to remember your theme preference (light/dark mode). We do not use third-party advertising or cross-site tracking cookies. If this changes in the future, we will update this policy and, where required by law, request your consent first.

4. How we share your information

We share information with: the specific agency/agent you contacted, so they can respond to your enquiry or appointment request; service providers who process data on our behalf under contractual confidentiality obligations (for example, our payment processor, transactional email provider, and cloud hosting infrastructure); and law enforcement or regulators where required by law. We do not sell personal information to third parties, and we do not share your data with other agencies on the platform — each tenant's data is logically isolated (see §5).

5. Data isolation and security

GetEstateOS is a multi-tenant platform: each agency's data is logically isolated at the database layer and is not accessible to other agencies. Passwords are hashed, never stored in plain text. Sensitive integration credentials (WhatsApp, SMS, email, calendar) are encrypted at rest. Material account actions — sign-ins, payment events, tenant activation/suspension, license changes — are logged for audit purposes. Access to production data is restricted to authorized personnel only.

6. Data retention

We retain personal information for as long as your account is active, or as needed to provide the Service, comply with our legal obligations (including tax and accounting requirements for payment records), resolve disputes, and enforce our agreements. When you close your account, we delete or anonymize personal data that is no longer needed, except where retention is required by law.

7. International data transfers

GetEstateOS operates across the UK, Canada, and the USA. If your information is transferred between these jurisdictions, we take steps to ensure it continues to be protected in a manner consistent with this policy and applicable law.

8. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing — including rights under the UK/EU General Data Protection Regulation (GDPR), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and the California Consumer Privacy Act (CCPA). You can unsubscribe from marketing emails at any time using the link in those emails. To exercise any of these rights, contact us using the details in §10 — we will respond within the timeframe required by applicable law.

9. Children's privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

10. Contact us

Questions about this policy, or requests to exercise your data rights, can be sent to ajaz95@gmail.com.

11. Changes to this policy

We may update this policy from time to time to reflect changes to our practices or for legal, operational, or regulatory reasons. We will update the "Last updated" date above when we do, and for material changes we will provide additional notice (such as an email or an in-app banner).