Privacy Policy

Effective date: September 17, 2026

Version: 2026-09-17

This Privacy Policy explains what information RealTea AI LLC ("RealTea," "we," "us," or "our") collects when you use the RealTea application and the AI assistant we call Ellis (together with realtea.ai and our related services, the "Service"), how we use it, who we share it with, how long we keep it, and the choices you have. It is written for the real estate professionals who use the Service. By using the Service you agree to this Policy, which is part of our Terms of Service.

The short version

• We never sell your information or your clients' information, and we never share it for advertising.
• We never use your content to train AI models, and the AI providers we use process your content under business terms that do not allow them to train on it either.
• Ellis remembers your business context so it can help you. You can ask Ellis to forget any fact at any time.
• Your chat history, voice transcripts, and text messages with Ellis are automatically deleted 90 days after they are created.
• You can delete your account, and everything in it, by emailing support@realtea.ai. We finish within 30 days.
• We share your content only with the service providers we need to run the Service, and only for that purpose. They are all listed in Section 9.
• We use no advertising trackers and no third-party analytics on the Service.

1. Who this Policy covers

This Policy covers the people who use the Service (real estate professionals) and visitors to realtea.ai.

The Service also handles information about other people that you bring into it: your clients and prospects, other agents, lenders, and people who take part in meetings you record. You are responsible for that information, and we process it only on your behalf and under your instructions. Section 10 explains what that means in practice.

People who receive content you publish or send through the Service (for example, visitors to a listing website we host for you, or subscribers to your newsletter) are covered by your own privacy practices and by the platforms involved, not by this Policy.

2. Information you give us

Account information. Your email address and password (or a sign-in link we email you), and the record of your acceptance of our Terms and this Policy.

Professional identity and brand profile. Your name, real estate license number and licensing state, brokerage, market area, region and time zone, phone number, business email, website, social media handles, headshot, logo, brand colors and fonts, tagline, positioning, audience, tone and writing style preferences, preferred and banned phrases, default calls to action, hashtags, NAR membership, and the brokerage disclosure line you want on your materials. During onboarding you also answer questions about how you like to communicate, which we save as preferences.

Mobile number and texting choice. If you turn on texting, the mobile number you confirm, your texting on/off choice, and any STOP or START replies you send.

Payment and plan information. When you buy a plan, our payment processor, Stripe, collects your card details directly. We never receive or store your full card number. We receive and store your Stripe customer and subscription identifiers, your plan, its status and renewal date, and the payment events Stripe sends us (for example, paid or failed), stored as Stripe sends them, which can include the billing name, email address, and billing address you gave Stripe and the type of payment method you used, but never your full card number.

Content you create and upload. Listing details and property addresses, photos, logos and headshots, documents you upload such as inspection reports and documents you ask Ellis to revise, brand and marketing materials, and the instructions you write for custom skills.

Your conversations with Ellis. What you type to Ellis, transcripts of what you say to Ellis by voice and what Ellis says back, and the text messages you send Ellis. If you attach a picture to a text message, we record the carrier's link to it but do not download, open, or store the picture.

Meeting Notes recordings. If you use Meeting Notes, the audio your device records, the transcript with speaker labels, the notes produced from it, and the subject of the meeting.

Deals and client information. Information you enter about your transactions and the people in them: client names, email addresses, and phone numbers; property addresses; deal stages and dates; client notes; and buyer profiles, which can include price range, target areas, school districts, must-haves, timeline and motivation, financing type, pre-approval status and amount, representation agreement dates, and commission terms.

Connected accounts. If you connect Instagram or Facebook, the connection record, the names of the connected accounts, and the captions, links, and performance statistics of posts made through the Service. If you connect Mailchimp, your Mailchimp account name, your audience's name and size, and the campaigns you create, test, and send through the Service. We do not download your Mailchimp subscribers' contact details.

Support and feedback. Your name, email address, and message when you contact support, and any feedback you give us.

3. Information we collect automatically

Log and device data. Internet protocol (IP) address, browser type and version, device type, operating system, the pages and features you use, timestamps, and error information. This is standard for any online service and we use it to run, secure, and troubleshoot the Service.

Consent records. When you accept our Terms and this Policy, we record the version accepted, the time, your IP address, and your browser (user agent). This record cannot be edited or deleted while your account exists.

Product usage events. Which features you use, how often, and whether they succeeded (for example, "flyer created" or "voice session started"). These events record counts, statuses, and identifiers only, never the content of what you made or said.

Usage and cost metering. A record of the tasks Ellis performs for you and how much of your monthly allowance they use, so we can show your usage and bill you correctly.

Cookies and similar technologies. We use only the cookies the Service needs to work:

• sign-in cookies that keep you signed in;
• a short-lived cookie that remembers you have accepted the current Terms and Privacy Policy so we do not have to check on every page; and
• a cookie that remembers your chosen theme.

The Service also uses your browser's local and session storage to remember app settings on your device (for example, your layout choices and whether you have seen the welcome message), to hold a voice transcript briefly until it has been saved, to keep track of the deal you are working on, and, during sign-up, to save a draft of your onboarding answers (including your name and license number) so you can pick up where you left off. This information stays in your browser and is not sent anywhere except to our own Service when the corresponding step is saved. We do not use advertising cookies, cross-site tracking, or third-party analytics services on the Service, so there is no tracking to opt out of. Because we do not track you across other sites, we do not respond to "Do Not Track" or similar browser signals.

4. Information we collect from other sources

Public sources about you. When you onboard, we use your name, license number, and state to find your public professional profile and pre-fill your brand. This uses web search and AI-assisted search and can include public real estate license records, Zillow, Realtor.com, Redfin, Homes.com, HomeLight, your brokerage's website and roster, Google search results, and public social media profiles (Instagram, Facebook, LinkedIn, YouTube, X). From these we may collect your headshot, logo, brand colors, bio or tagline, business phone, business email, website, and the brokerage you are licensed with. What we find is saved to your brand profile automatically and shown to you on a review screen during onboarding, where you can correct or clear any of it, and you can change it later in your brand settings. Two things are used only after you explicitly confirm them: your phone number (for texting) and your license confirmation.

MLS data. Where the Service is connected to an MLS (currently FMLS in Georgia, delivered through Bridge Interactive), we look up your MLS member record by license number and pull your own listings, their status, open houses, and listing photos, and we refresh them regularly.

Property and market data. To build reports and marketing, we gather property details, comparable sales, and market information from public real estate websites (such as Zillow, Realtor.com, and Redfin), and photos and place information from Google Maps.

Payment information from Stripe. Plan and payment status, as described above.

Connected-platform data. Post performance statistics from your connected social accounts, and campaign reports from your Mailchimp account.

5. How we use information

We use information to:

• provide the Service: sign you in, run Ellis, create the deliverables you ask for, and keep your account working;
• personalize Ellis to you: apply your brand, your writing style, and your preferences, and maintain Ellis's memory of your business (Section 6);
• take the actions you direct, such as posting to your connected social accounts, sending your newsletter, publishing a listing website, creating share links, and emailing or texting you;
• run automatic features you turn on, such as an automatic monthly newsletter, automatic listing websites, automatic event flyers, or a morning briefing;
• run compliance checks on deliverables, such as fair housing and disclosure checks, and tell you what they found;
• communicate with you about your account and the Service, including confirmations, deliveries, receipts, security notices, and support;
• send you occasional emails about the product itself, such as new features, tips, and pricing changes, which you can opt out of at any time using the unsubscribe link in each email (we will still send the account and service emails above);
• bill you, meter your usage, prevent fraud, and enforce our Terms;
• keep the Service secure, prevent abuse, and troubleshoot problems;
• understand how the Service is used, using aggregated or de-identified information that does not identify you, so we can improve it; and
• comply with the law, respond to lawful requests, and protect the rights and safety of our users, the public, and us.

We do not use your information for advertising, and we do not use your content, your clients' information, or your conversations to train AI models.

6. Ellis's memory

Ellis keeps a working memory of your business so that it can help you without being told the same things twice. Here is how it works:

• What goes in. Facts about your business, brand, listings, deals, clients, and preferences drawn from your conversations with Ellis (typed, spoken, and texted), your onboarding answers, your deals, and your MLS listings. You can also tell Ellis directly to remember something.
• How it is built. Shortly after a conversation ends, and again each night, Ellis reviews recent conversations and consolidates what it learned into a set of facts. To find the right facts later, we create mathematical representations of them (embeddings) using Google's embedding model.
• Forgetting. You can ask Ellis what it remembers about something, correct it, and tell Ellis to forget any fact at any time. A forgotten fact is immediately removed from what Ellis uses and is permanently deleted when your account is deleted.
• Raw conversations are not kept forever. Your chat history, voice transcripts, and text messages with Ellis are deleted 90 days after they are created. The consolidated facts Ellis learned from them remain in Ellis's memory until you forget them or delete your account.
• Meeting Notes are kept separate. The notes and transcripts from meetings you record are not fed into Ellis's general memory. Ellis looks at them only when you ask it to recall a meeting.

7. Voice, recordings, and text messages

Talking with Ellis by voice. When you talk with Ellis by voice, your browser or app streams the audio directly to Google's Gemini real-time voice service using a short-lived access token we issue. Google processes the audio to understand you and to generate Ellis's spoken reply. We do not receive or store the audio of these conversations. We do save a transcript of the conversation (what you said and what Ellis said) to your account, and we may show live captions during the conversation. Transcripts are deleted after 90 days, as described in Section 6.

Voice Setup and your voiceprint. Voice Setup is optional and separate from talking with Ellis. If you choose it, Ellis asks you a few short questions (up to four, some of them about your business, drawn from your brand profile) and we record each spoken answer. We do store those recordings, and we send them to our voice provider fish.audio to build a model of how you sound. fish.audio makes a transcript of your recordings as part of building the model, and we keep that transcript with your voiceprint. The recordings, the transcript, and the model together are a voiceprint. A voiceprint is biometric information: it can identify you personally, and several states treat it as a sensitive category.

We collect it only with your agreement, recorded before anything is captured. We use it for one purpose: producing audio and video you ask Ellis to make in your voice, beginning with a short preview at the end of Voice Setup (your name, brokerage, market and tagline) so you can hear the result. Nothing you say in Voice Setup is added to your brand profile or to Ellis's memory. We never sell, license, lease, trade, or otherwise profit from it, we never use it to train any model, and we never use it to identify you. fish.audio processes your recordings under its own terms and states that it does not train on its API customers' data by default. We keep it while you are using the feature and delete it twelve months after your last use of it, sooner if you ask or if you delete your account. You can delete it yourself at any time from your Brand page, which also removes the model from fish.audio.

Meeting Notes. When you record a meeting, your device records audio through its microphone and uploads it to our private storage in short chunks while the meeting is in progress. When you finish, the audio is transcribed with speaker labels by Google's transcription model, the notes are written by Anthropic's Claude model, and the results are turned into documents that are emailed to you and saved to your Creations. If you turn on live captions, a separate real-time transcription stream from Google shows captions during the meeting. We delete the raw audio from our storage as soon as processing succeeds; if processing fails, the audio is kept so that you can retry, until you retry or discard the recording, and discarding a recording deletes its audio immediately. Meeting recordings can capture other people. Our Terms of Service require you to tell everyone in the room that you are recording and to obtain any consent the law requires before you record.

Text messages. If you turn on texting, we send you text messages through our messaging provider, ClickSend, at the mobile number you confirmed, and you can text requests to Ellis at the number we text you from. We store the text of the messages you send Ellis (and the carrier's link to any picture you attach, without downloading the picture) and treat them as part of your conversation history, so they are deleted after 90 days. Reply STOP at any time to stop receiving texts; we record your opt-out so we do not text you again unless you reply START or turn texting back on in the app.

8. Artificial intelligence and our no-training promise

The Service uses AI models from third-party providers to understand your requests, write, analyze documents and photos, generate images and video, transcribe speech, and hold voice conversations. To do that, the relevant parts of your content (for example, your request, your brand profile, the listing details, the photos, or the document) are sent to the provider that performs that task, and its response comes back to you through the Service.

We make these commitments about AI and your content:

• We never use your content, your clients' information, or your conversations to train AI models, whether our own or anyone else's.
• We use our AI providers through their business (API) services under terms that do not allow them to use your content to train their models. We do not use consumer versions of these tools.
• We send a provider only what is needed for the task you asked for, and only when you ask for it.
• Providers may keep the content of a request for a limited time for operational purposes such as abuse monitoring, under their business terms. Where a provider offers a setting to turn off storage of your content entirely, we use it.

We choose providers with these commitments in mind, and we will update this Policy if we change providers.

9. Who we share information with, and who we do not

We never sell your information or your clients' information. We never share it with anyone for advertising or marketing purposes, and we never give data brokers or advertisers access to it. This applies to every category of information in this Policy.

Service providers who help us run the Service. We share information with companies that process it for us, only as needed for the purpose described, and under contracts that restrict how they may use it. They are:

• Anthropic (Claude models) - writing, analysis, reasoning, compliance review, understanding photos and documents, and web search for facts. Receives the content relevant to a task.
• Google (Gemini models and Google Cloud AI services) - request routing, search-grounded lookups (including your license lookup during onboarding), real-time voice conversations, transcription and live captions, understanding photos, and memory embeddings. Receives the content relevant to a task and, for voice, your audio.
• Google Maps Platform - place information, Street View imagery, and place photos for property and neighborhood materials. Receives property addresses and place searches.
• OpenAI - one analysis step of the inspection summary feature. Receives the inspection report content, with data storage turned off.
• fal.ai - image generation and editing (including virtual staging and graphics) and video generation. Receives the photos and prompts for the task; the photos are uploaded to fal's storage so that fal can process them, where each upload receives a publicly reachable web address that is not linked from anywhere.
• Creatomate - assembling listing videos. Receives the video clips, photos, your headshot and logo, music, and text for the video.
• Browserless - rendering documents into PDFs. Receives the document content being rendered.
• Apify - collecting public web data: property details and comparable sales from public real estate websites, and public search results and profile pages during brand discovery. Receives property addresses and, during onboarding, your name, license number, state, and brokerage.
• Bridge Interactive (a Zillow Group company) - delivery of MLS data from FMLS. Receives your license number to find your member record.
• Supabase - our database, sign-in, and private file storage, hosted on Amazon Web Services in the United States (us-east-1). Holds your account data and files.
• Fly.io - hosting for our servers and background workers, in the United States (Ashburn, Virginia).
• Vercel - hosting for the web application.
• Cloudflare - security protection for our public surfaces, email routing for our support addresses, and hosting for the listing websites you choose to publish.
• Sentry - error monitoring, so we learn about crashes and failures without waiting for you to report them. Receives technical error reports (what failed and where in our code, with request identifiers); we configure it to exclude personal data, message content, and the values of variables.
• Axiom - storage of our servers' operational logs, so we can diagnose problems after the fact. Receives our servers' technical logs (timestamps, request and account identifiers, and event details).
• fish.audio - building and using the voice model for Voice Setup, if you choose that feature. Receives the voice recordings you make in Voice Setup and the exact text you ask Ellis to speak in your voice: the short preview at the end of Voice Setup (your name, brokerage, market and tagline) and any script you approve later. Because the recordings contain whatever you said, they can include details about your business such as your market. fish.audio makes its own transcript of your recordings to build the model, and we keep that transcript with your voiceprint. The voice model is labeled with an internal account identifier, not your name. fish.audio does not receive your email address or anything else from your account or brand profile beyond the words in that preview.
• Stripe - payments and subscriptions. Receives your email address, your payment details (directly from you), and your plan.
• Resend - sending our emails to you (deliveries, receipts, meeting notes, briefings, support replies). Receives your email address and the email content.
• ClickSend - sending and receiving text messages with you. Receives your mobile number and the message content.
• Ayrshare - posting to your connected social media accounts and retrieving post performance. Holds the connection to your accounts and receives the content you approve for posting.
• Mailchimp - if you connect it, sending your newsletter to your own audience from your own Mailchimp account. Receives the newsletter content.

At your direction. When you ask, we send or publish information to others on your behalf: posts to your connected social accounts; newsletters to your Mailchimp audience; listing websites published to the public internet on Cloudflare-hosted pages, which include the listing details and photos you choose and your name, phone, email, brokerage, and license number as real estate advertising rules require; and share links, which let anyone who has the link view the shared document without signing in (share links are unguessable and marked so search engines do not index them, and you can revoke them). What you send or publish this way is under your control and governed by your choices, not this Policy.

Legal reasons. We may disclose information if we believe in good faith that it is required by law, subpoena, court order, or government request, or that disclosure is necessary to protect the rights, property, or safety of our users, the public, or RealTea, to investigate fraud or abuse, or to enforce our Terms. Where the law allows, we will tell you before disclosing your information in response to a legal request.

Business transfers. If RealTea is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction. The commitments in this Policy, including never selling or sharing your information and never training AI on your content, will bind whoever takes over the Service, and we will notify you of any such transfer.

Aggregated or de-identified information. We may share information that has been aggregated or de-identified so that it does not identify you or any client, for example usage statistics. We will not try to re-identify it.

10. Your clients' and other people's information

You bring information about other people into the Service: clients, prospects, other agents, lenders, and meeting participants. Under privacy laws, you decide why and how that information is used, and we process it only on your behalf. This means:

• You are responsible for having a lawful basis to collect it and share it with us, for giving those people any notices the law requires, for obtaining any consents the law requires (including consent to record where required), and for honoring the confidentiality you owe your clients.
• We use your clients' information only to provide the Service to you and under your instructions. We never contact your clients, never sell or share their information, never use it for advertising, and never use it to train AI models.
• We keep your clients' information only as long as we keep your account data, and we delete it when you delete the deal or your account.
• If a client or other person contacts us directly about their information, we will refer them to you unless the law requires us to act ourselves. If you receive a request from a client to access or delete their information and need our help, email support@realtea.ai and we will assist.

Some information you might hold about clients is more sensitive than the Service needs. Please do not upload government identification numbers, Social Security numbers, bank or card numbers, or health information about anyone.

11. How long we keep information

• Account, profile, and brand information - for as long as your account exists, then deleted within 30 days of your deletion request.
• Deliverables, uploads, deals, client information, custom skills, and Ellis's consolidated memory - until you delete them or your account, then deleted within 30 days of your deletion request. A deliverable you remove in the app is taken out of your library and archived; it is permanently deleted when your account is deleted, or sooner if you ask us.
• Chat history, transcripts of your voice conversations, and text messages with Ellis - automatically deleted 90 days after they are created.
• Meeting Notes - raw audio is deleted as soon as processing succeeds, or when you discard a recording; audio from a failed recording is kept until you retry or discard it. The notes and transcripts are kept until you delete them or your account.
• Voice Setup recordings, their transcript, and voiceprints - kept while you are using the feature and permanently destroyed twelve months after your last use of it, or sooner if you delete your voice or delete your account. We delete the raw recordings from our own storage as soon as your voice model has been built; if building fails, they are kept so that you can retry, until you retry or delete them. Deleting removes the model from fish.audio as well as from us. This is our written retention and destruction schedule for biometric information.
• Connected-account credentials - until you disconnect the account or delete your account.
• Payment and subscription records - for as long as required by tax, accounting, and payment rules, generally seven years, even after your account is deleted.
• Consent records and legal records - for as long as needed to demonstrate your acceptance of our Terms and to resolve disputes, which may extend beyond the life of your account.
• Log data, usage events, and metering records - retained while your account exists for security, billing, and troubleshooting, then deleted or de-identified within 30 days of your deletion request, except for the payment and legal records above.
• Support correspondence - kept as long as needed to help you and to improve our support, then deleted.
• Backups - deleted data may remain in encrypted backups for up to 30 days before it is permanently removed.

12. Your choices and rights

You can do the following at any time:

• See and correct your information. Your profile, brand, deals, deliverables, and connected accounts are editable in the app. For anything you cannot reach in the app, email us.
• Manage Ellis's memory. Ask Ellis what it remembers, correct it, or tell it to forget any fact.
• Remove deliverables and deals. Delete deals in the app. Deliverables you remove in the app are taken out of your library and archived until your account is deleted; email us if you want one permanently deleted sooner.
• Disconnect accounts. Disconnect a connected account from your Connections settings where a disconnect control is offered, remove RealTea's access in that platform's own settings, or email us and we will disconnect it for you.
• Stop text messages. Reply STOP or switch texting off in the app.
• Opt out of product emails. Use the unsubscribe link in any product email. We will still send you account, billing, delivery, and security emails while you have an account.
• Export your information. Email us and we will provide a copy of your information in a commonly used format within 30 days.
• Delete your account. Email support@realtea.ai from the email address on your account with "Delete my account" in the subject line. We will cancel any active plan, delete your account and all of your information from our systems (except the records described in Section 11), and confirm by email within 30 days.

To make a request, email support@realtea.ai from the email address on your account, or tell us how to verify that the request comes from you. We may ask for additional information to confirm your identity before acting on a request. You may also have an authorized agent make a request for you if you give the agent written permission and we can verify your identity. We will not discriminate against you for exercising any of these rights.

We honor these rights for everyone who uses the Service, regardless of where you live. Section 16 describes additional rights under specific state laws.

13. Security

We use technical and organizational measures designed to protect your information, including encryption in transit, encryption of stored credentials for connected accounts, database-level isolation so that one user cannot read another user's data, private file storage that is reachable only through short-lived signed links, access controls on our systems, and immutable records of consent and billing events. Files stored on the public internet at your direction (published listing websites) are, by design, public.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we learn of a security incident that affects your information, we will notify you and any authorities as required by law. You can help by using a strong, unique password, keeping your devices secure, and telling us right away at support@realtea.ai if you suspect your account has been accessed without permission.

14. Children

The Service is intended for licensed real estate professionals who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided us with personal information, email support@realtea.ai and we will delete it.

15. Where your information is processed

We are based in the State of Florida, and the Service is operated from and hosted in the United States, using the providers listed in Section 9. The Service is intended for use by U.S.-licensed real estate professionals. If you use the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those of your country.

16. State privacy rights

Several states, including California, Colorado, Connecticut, Virginia, Texas, Oregon, and others, have privacy laws that give their residents rights to access, correct, delete, and obtain a copy of their personal information, to opt out of the sale of personal information, targeted advertising, and certain profiling, and to appeal a decision about a request. Whether or not a particular law applies to us, we honor the rights in Section 12 for everyone. In addition:

• We do not sell personal information, we do not share it for cross-context behavioral or targeted advertising, and we do not engage in profiling that produces legal or similarly significant effects. There is nothing to opt out of.
• We collect one category of "sensitive personal information" defined by these laws, and only if you choose it: a voiceprint, through Voice Setup (Section 7). We collect it with your agreement, use it only to produce audio and video you ask for, never sell or share it, never use it to infer anything about you, and delete it on the schedule in Section 11. Apart from that, we do not collect these categories as a product of the Service, and we ask you not to upload such information about anyone (Section 10).
• We do not use dark patterns to obtain consent, and we do not respond to browser opt-out preference signals because we have no sale or targeted-advertising activity to opt out of.
• If we decline a request, we will tell you why, and you may appeal by replying to our response with "Appeal" in the subject line. We will respond to an appeal within 45 days and tell you how to contact your state attorney general if you are not satisfied.

California residents: the categories of personal information we have collected in the preceding 12 months are those described in Sections 2 through 4 (identifiers, professional information, commercial information, internet activity, audio and visual information, inferences in the form of Ellis's memory, and the client information you provide). We collect it from you, from your devices, and from the public and third-party sources described in Section 4, for the purposes in Section 5, and we disclose it for business purposes to the service providers in Section 9. We have not sold or shared personal information in the preceding 12 months and do not sell or share it.

17. Changes to this Policy

We may update this Policy from time to time. Each version has a version date at the top. If we make material changes, we will notify you in the app or by email and ask you to accept the new version the next time you sign in. If a change would allow a use of your information that this Policy does not allow today, we will ask for your consent before applying it to information we already hold. We will never change this Policy to allow selling or sharing your information or training AI on your content.

18. Contact us

RealTea AI LLC, a Florida limited liability company

Email: support@realtea.ai

Use this address for questions about this Policy, requests to access, export, correct, or delete your information, and any privacy concern. We aim to answer every privacy request within 30 days.