Privacy Policy

AI Realty Kit ("we," "our," or "us") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Information We Collect

Account Information

You can sign in with Google or with an email address and password, both through Google Firebase Authentication. With Google Sign-In, we receive your name, email address, and profile photo from your Google account; we never see your Google password. With email and password, we receive your email address; your password is handled by Firebase Authentication and is never stored by us in readable form. We also record whether your email address has been verified.

Documents and Files

You may upload documents to the Service, including home inspection reports, seller disclosures (TDS, SPQ), property condition reports, and related real estate documents. These documents may contain personally identifiable information such as names, addresses, and property details, including information about other people (for example sellers, buyers, or agents named in a document).

Please do not upload documents containing government identification numbers (such as Social Security numbers), bank account numbers, or payment card numbers, or redact them before uploading. Purchase agreements, title documents, and HOA financial documents are the most likely to contain them. We do not intentionally collect this information and do not use it for any purpose.

Property Information

You may provide property addresses and related details when creating properties within the Service.

Usage Data

We automatically collect certain information when you use the Service, including pages visited, features used, browser type, device information, and IP address. This data is collected through Google Analytics and is used to improve the Service.

Payment Information

Payments are processed by Stripe. We receive a record of the purchase (such as the amount, the property or plan it applies to, and its status), but we do not receive or store your full payment card number.

Error and Performance Data

We use Sentry for error tracking and performance monitoring. When an error occurs, diagnostic data (including browser information and the actions leading to the error) may be collected to help us identify and fix issues.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Analyze your uploaded documents using AI to extract findings, cost estimates, and maintenance recommendations
• Generate reports and summaries from your documents
• Enable collaboration features such as shared reports and client workspaces
• Authenticate your identity and manage your account
• Respond to requests from AI assistants you have connected to your account (see Section 4)
• Determine whether your account includes analysis for a property, including a free analysis where offered
• Communicate with you about the Service, including support requests
• Monitor and analyze usage patterns to improve the Service
• Detect, prevent, and address technical issues

3. AI Document Processing

When you upload a document for analysis, it is processed by Google's Gemini AI to extract relevant information such as inspection findings, cost estimates, and maintenance recommendations. Your documents are sent to Google's AI services for processing and are subject to Google's Gemini API Terms of Service.

When the document chat feature is enabled for your account, we also use Google's File Search API so you can ask questions about your uploaded documents. Documents indexed for this feature are stored in Google's infrastructure in an isolated, per-user store, and are removed from it when you delete the document.

We do not use your documents or findings to train AI models.

Important: AI-generated analysis is provided for informational purposes only. It does not constitute professional advice. Always consult licensed professionals for decisions about property conditions and repairs.

4. Connecting AI Assistants (ChatGPT, Claude and Others)

You can connect AI Realty Kit to an AI assistant that supports the Model Context Protocol (MCP), such as ChatGPT, Claude, Claude Code, or Codex. This section explains what happens when you do.

Connecting and Consent

When you add AI Realty Kit to an assistant, you are sent to our /connect page, where you sign in to your AI Realty Kit account and choose whether to allow the assistant access. The page names the app or website asking for access. If you decline, nothing is shared. If you allow, the assistant can act on your AI Realty Kit account only through the tools listed below, and only for your own properties.

What We Receive from the Assistant

We receive only the inputs the assistant sends when it uses one of our tools:

• Property addresses you ask it to create or look up
• Documents you attach in the conversation or ask it to upload (files only; we fetch an attached file from the link the assistant provides)
• Identifiers and filters, such as which property or finding to show, or which priority or category to filter by

We do not request or receive your chat history, conversation transcripts, the assistant's memory, or other files from your assistant account. We do not ask the assistant for your location or other personal details.

What We Send Back

In response, we return information from your AI Realty Kit account: your account email and name, your properties and their addresses, analysis status, findings (including descriptions, cost ranges, priorities, and source document page numbers), and links to your reports on our website. We do not send the full text of your documents. Once returned, this information is part of your conversation with the assistant and is handled by its provider under its own privacy policy, for example OpenAI's Privacy Policy or Anthropic's Privacy Policy.

What We Store About the Connection

• Access and refresh tokens. Access tokens expire after one hour. Refresh tokens last up to 60 days, are replaced each time they are used, and are stored only as a one-way hash. We also store the app's registration details (its name and redirect address).
• A connection record for your account: when you first and last connected an assistant, which kind of app it was (for example ChatGPT, Claude, or a command-line tool), and, where offered, whether your account is eligible for a free property analysis and which property it was used on. We use this record to provide the free analysis and to understand how people find AI Realty Kit.
• Upload links. Command-line assistants upload files through a private upload link that expires after 15 minutes and works only for the property it was created for.
• Documents and findings created through an assistant are stored and protected exactly like those created on our website, and appear in your account there.

Disconnecting

You can disconnect AI Realty Kit at any time in your assistant's settings (for example, the apps or connectors settings in ChatGPT or Claude). You can also ask us to revoke every assistant connection on your account by emailing support@airealtykit.com; once revoked, an assistant can no longer refresh its access, and any remaining access token expires within one hour. Disconnecting does not delete your documents or findings; delete those on our website or request account deletion.

5. Third-Party Services

We use the following third-party services to operate the Service:

Each third-party service has its own privacy policy governing how it handles data. We encourage you to review their policies.

6. Data Storage and Security

Your data is stored on Google Cloud infrastructure (Firebase) in the United States. We implement appropriate technical and organizational measures to protect your data, including:

• All data transmitted between your browser and our servers is encrypted using HTTPS/TLS
• Documents are stored in user-specific, authenticated storage paths
• Access to documents and data requires signing in to your account
• Connected AI assistants use short-lived access tokens; refresh tokens and authorization codes are stored only as one-way hashes
• Server-side API endpoints verify your identity before returning any data
• Administrative access is restricted to authorized personnel only

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

7. Data Retention

• Account data is retained for as long as your account is active.
• Uploaded documents are retained until you delete them or request account deletion.
• Analysis results and findings are retained alongside the documents they were generated from.
• Usage analytics are retained according to Google Analytics' standard retention policies.
• AI assistant access tokens expire after one hour; refresh tokens expire after 60 days, or sooner when they are used, revoked, or the assistant is disconnected. Upload links expire after 15 minutes.
• The AI assistant connection record is retained for as long as your account is active.
• Payment records are retained as required for accounting and legal purposes.

When you delete a document, the file is removed from storage and associated analysis data is deleted from our database. When you request account deletion, all associated data is permanently removed.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Delete your documents and associated data at any time through the Service
• Request account deletion by contacting us at the email below
• Disconnect any AI assistant from your account at any time (see Section 4)
• Export your data, including generated reports in PDF format
• Opt out of analytics tracking by using browser-based opt-out tools

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: We do not sell your personal information to third parties.
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at support@airealtykit.com.

10. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us and we will take steps to remove that information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: support@airealtykit.com

See also our Terms of Service.