Privacy Policy
Realbard (“Realbard”, “we”, “us”) is an AI marketing operations platform for real estate teams: it ingests property listings, generates advertising campaigns, routes them through human approval, publishes approved campaigns to advertising platforms, and reports results. This policy explains what personal data we process to do that, why, how long we keep it, and the rights you have over it.
It applies to the Realbard web application and to this website. It is provided by Realbard, which is the data controller for the processing described here. If anything is unclear, write to [email protected].
Contents
1. Information we collect
We collect only what the service needs to operate:
- Account information. Your name, email address and password when you create an account. Passwords are stored only as salted hashes — we cannot read them.
- Workspace data. Your organization’s name, membership, roles, and the settings your team configures (including brand-voice material you add to Brand Memory).
- Listings and campaign content. The property listings you connect or upload, and the marketing content (copy, creative, targeting) generated from them, including approval decisions and their history.
- Connected platform data. When you connect an advertising account (see sections 4 and 5), the account identifiers, campaign structures, and performance metrics needed to run and report on the campaigns you approve, together with the OAuth tokens that authorize that access. Tokens are stored encrypted.
- Usage and log data. Standard technical records — IP address, browser type, pages requested, timestamps — kept for security and debugging.
- Support correspondence. Anything you send us when you contact support.
We do not collect data from your device beyond what is described here, and we use no third-party advertising or tracking cookies (see our Cookie Policy).
2. How we use information
- To provide the service: ingest listings, generate campaign drafts, run your approval workflow, publish approved campaigns, and report results.
- To secure the service: authentication, abuse prevention, and audit trails for approval decisions.
- To support you: answering requests you send us.
- To improve the product, using aggregated usage patterns that do not identify individuals.
- To meet legal obligations, such as billing and tax records.
We do not sell personal data. We do not use your data, your listings, or data obtained from connected platforms for advertising our own or anyone else’s products.
3. AI processing
Realbard uses artificial-intelligence models to generate marketing content from your listings and brand material. Content generated this way is always placed in your approval queue — it is not published without a human decision from your workspace.
We do not use your personal data, your listings, or data obtained from connected platforms to train generalized AI or machine-learning models. Data sent to AI model providers for generation is processed to produce your requested output and is subject to contractual restrictions on further use.
4. Google user data
If you connect a Google account (for example, a Google Ads account), Realbard accesses it through Google’s OAuth consent flow and official APIs, using only the scopes shown on the consent screen. We use that access solely to provide features visible in Realbard’s interface: creating and managing the advertising campaigns you approve, and reading their performance for your analytics. OAuth tokens are stored encrypted and are deleted when you disconnect the account.
Realbard’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular: we do not transfer Google user data to third parties except as necessary to provide the features you use, with your consent, or as required by law; we do not use it for serving advertisements other than the campaigns you yourself run; we do not use it to train generalized AI or machine-learning models; and no humans read it except with your explicit permission, where necessary for security or legal compliance, or in aggregated, anonymized form.
You can revoke Realbard’s access at any time from the Connections page in the app or from your Google account permissions.
5. Meta platform data
If you connect a Meta ad account (Facebook or Instagram), Realbard accesses it through Meta’s OAuth flow and official Marketing API, in accordance with the Meta Platform Terms and Developer Policies. We use that access solely to publish the campaigns you approve and to read their performance for your analytics. We do not use Meta platform data for any other purpose, and we do not share it except with service providers processing it on our behalf.
You can disconnect at any time from the Connections page in the app or from your Facebook settings under Settings → Business integrations. Disconnecting stops all access; the platform data we hold about that connection is then deleted as described on our Data Deletion page.
7. Data retention
- Account and workspace data are kept for as long as your account exists.
- OAuth tokens for connected platforms are deleted immediately when you disconnect the platform.
- When you delete content, or delete your account, the data is removed from production systems within 30 days and from encrypted backups within 90 days.
- Billing and tax records are kept for the period the law requires.
- Server logs are retained for up to 12 months for security purposes.
8. Security
All traffic is encrypted in transit (TLS). Passwords are stored as salted hashes. OAuth tokens and other secrets are encrypted at rest. Access to production data is restricted to personnel who need it, and password-reset links are single-use and expire within an hour. No system is perfectly secure; if we learn of a breach affecting your personal data we will notify you and the relevant authorities as the law requires.
9. International transfers
Our infrastructure and service providers may process data outside your country. Where data protected by GDPR or similar laws is transferred internationally, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
10. Your rights
Depending on where you live (including under GDPR and CCPA/CPRA), you have the right to:
- access the personal data we hold about you and receive a portable copy;
- correct inaccurate data;
- delete your data — see the Data Deletion page for exactly how, what is removed, and on what timeline;
- object to or restrict certain processing;
- not be discriminated against for exercising any of these rights.
To exercise any of them, use the in-app controls or write to [email protected]. We respond within 30 days. If you are in the EU/EEA or UK you may also lodge a complaint with your supervisory authority.
11. Children
Realbard is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, contact [email protected] and we will delete it.
12. Changes to this policy
When we change this policy we will update the date at the top, and for material changes we will notify account owners by email or an in-app notice before the change takes effect. Earlier versions are available on request.
13. Contact
Privacy questions and requests: [email protected].