Privacy Policy

Last updated: June 14, 2026

RealLead (“we”, “us”) provides an AI-powered website and landing-page builder for Canadian real estate agents. This policy explains what personal information we handle, why, and the choices you have. We follow the Personal Information Protection and Electronic Documents Act (PIPEDA) and, for Quebec residents, the Act respecting the protection of personal information in the private sector (Law 25).

Two roles: your account vs. the leads you collect

For your account (your profile, brokerage details, billing), we are the organization responsible for that information. For the leads captured on the pages you publish, you (the agent and your brokerage) decide why that information is collected and how it is used — we process it on your behalf as your service provider. You are responsible for handling those leads in line with PIPEDA, CASL, and your brokerage’s obligations.

What we collect

Account & profile: name, email, phone, brokerage name and address, licence type and number, and the registration details that must appear on published pages for RECO compliance.
Billing: subscription tier and status. Card payments are processed by Stripe; we do not store full card numbers.
Content you create: the prompts, page text, and images you submit to generate and publish pages.
Leads (on your behalf): the name, email, phone, message, and CASL consent record submitted through your published lead forms.
Usage & device data: log data needed to operate and secure the service. Behavioural analytics are collected only on the Authority tier, and only where enabled.

Why we use it (identified purposes)

To create and operate your account; generate, publish, and serve your pages; capture and route leads to you; process payments; send transactional messages (for example trial reminders and lead notifications); provide support; and keep the service secure and compliant. We do not sell personal information.

We collect, use, and disclose personal information with consent, except where the law permits otherwise. Lead forms on published pages carry an unchecked CASL consent checkbox, and each submission writes an auditable consent record. You may withdraw consent for non-essential processing at any time, subject to legal and contractual limits.

AI generation

Page content is generated using third-party AI services (Anthropic and Together AI). Prompts and the resulting content are sent to those providers to produce your pages. We instruct providers not to train on your content. Property facts in marketing content come from you or the MLS feed — not invented by the model.

Service providers & cross-border processing

We store core data in Canada (Supabase, ca-central-1 region). To run the service we rely on providers that may store or access personal information outside Canada (including the United States): Stripe (payments), Resend (email), Telnyx (SMS), Cloudflare (image storage and network), Anthropic and Together AI (content generation), and, on the Authority tier, PostHog (analytics). When information is handled outside Quebec or Canada, it is subject to the laws of those jurisdictions, and we use contractual and technical safeguards with each provider. We disclose personal information to these providers only as needed to operate the service, and otherwise only where required by law.

Retention

We keep personal information only as long as needed for the purposes above or as required by law, then delete or de-identify it. Leads you collect are retained for you while your account is active; you control their deletion. Closing your account removes your published pages and starts deletion of account data, subject to records we must keep (for example billing records).

Safeguards

We use row-level tenant isolation, encryption in transit, encryption at rest for sensitive credentials, access controls, and audit logging. Canadian data residency is the default for core storage. No method of transmission or storage is perfectly secure, but we work to protect information appropriately to its sensitivity.

Breach response

If a confidentiality incident creates a real risk of significant harm, we will notify affected individuals and the applicable regulator(s) — including the Office of the Privacy Commissioner of Canada and, for Quebec residents, the Commission d’accès à l’information — as required, and keep records of incidents.

Your rights: access, correction, complaints

You may ask to access or correct the personal information we hold about you, and we will respond within the timelines the law requires. If a lead wants to access, correct, or delete information submitted through a page you published, that request is directed to you as the responsible agent; we will assist you as your service provider. To make a request or raise a concern, contact our Privacy Officer below. If you are not satisfied, you may contact the Office of the Privacy Commissioner of Canada or the Commission d’accès à l’information du Québec.

Contact our Privacy Officer

RealLead — Privacy Officer
Email: privacy@reallead.ca
Kitchener, Ontario, Canada

Changes to this policy

We may update this policy as the service or the law changes. Material changes will be reflected by the “last updated” date above and, where appropriate, communicated to you.