Privacy Policy

This policy covers real estate agents, teams, and brokerages who use Realty Labz (“you” or “agents”), and the clients those agents work with, who may receive a document to sign or a portal link but never create an account of their own.

Account info. Your name, email address, and either a securely hashed password (we never store or can see your plaintext password) or, if you sign in with Google, the basic profile info Google shares (name and email) after you approve it.

Client information you enter. Contact details, notes, lead source, and pipeline stage for the clients you work with. This data belongs to you and your team, never to us, and we never share it with anyone outside your account.

Financial data. Business income/expenses, mileage logs, deal and commission details, budgets, and — if you choose to enter it — your own personal finances (assets, loans, net worth). Personal financial data (your own investments and personal transactions) is never visible to anyone else on your team, even a broker or admin — this is a deliberate design choice, not an oversight. Business data on a team account is visible to your team's managers, the same way a real brokerage works.

Documents and signed contracts. Files you upload are stored in a private location only your account can reach. When a document is sent for e-signature, we record the signer's name, email, IP address, and the exact timestamp consent was given — this is standard practice for legally-binding electronic signatures under the U.S. ESIGN Act and UETA, and forms the audit trail behind every signed document.

Client portal access. If you share a portal link with a client, their browser holds a private access token in a cookie. That token expires automatically after 30 days and only ever reveals that one client's own deal status and documents — never anyone else's.

We use a small number of well-established providers to run Realty Labz, and none of them receive more than what they need to do their specific job:

• Supabase — our database and private file storage.
• Resend — sends transactional email (signing requests, portal access links) on our behalf.
• Vercel — hosts the application.
• Google — only if you choose “Sign in with Google.”
• A small set of free, public price-lookup services (for crypto wallet balances and stock prices, only if you choose to link one) — these only ever receive a wallet address or ticker symbol you provide, never any client or account information.

You can edit or delete your clients, transactions, documents, and other records directly in the app at any time. If you'd like your account and all associated data permanently deleted, contact us on the Support page and we'll take care of it.

If you have questions about this policy or how your data is handled, reach out through the Support page.