Privacy Policy

1. Introduction

Welcome to Relvara ("we," "our," or "us"), a product of Zensen Media LTD, located in Ohio, USA. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at temp-app-iota.vercel.app and use our platform (collectively, the "Service").

By accessing or using the Service, you agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the Service immediately.

2. Information We Collect

2.1 Personal Information

When you register for an account, use our services, or communicate with us, we may collect:

• Full name
• Email address
• Phone number
• Brokerage or organization affiliation
• Professional license information

2.2 Real Estate Transaction Data

To power our platform features, we collect and process real estate–specific data, including:

• MLS (Multiple Listing Service) data, including listing details, property information, and sales history
• Transaction management data synced from integrated platforms such as Dotloop, including loop details, document statuses, and participant information
• Documents uploaded to or generated within the platform (e.g., contracts, onboarding forms, compliance documents)

2.3 Usage & Analytics Data

We automatically collect certain technical and usage information when you interact with the Service:

• Browser type and version
• Device type and operating system
• IP address and approximate location
• Pages visited and features used
• Referring URLs and session duration

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service, including CRM, marketing, recruiting, and transaction management features
• Power AI–driven features such as content generation, prospect analysis, and smart recommendations using the Anthropic Claude API
• Sync and manage real estate transactions through integrations like Dotloop
• Authenticate users and manage account access
• Communicate with you about your account, updates, and support requests
• Analyze usage patterns to improve the Service and develop new features
• Comply with legal obligations and enforce our terms of service

4. Third-Party Services & Data Sharing

We do not sell your personal information. We share data with third-party service providers only as necessary to operate and improve the Service:

• Supabase — Database hosting, user authentication, and serverless functions. Your account data and application data are stored in Supabase's infrastructure.
• Vercel — Application hosting and deployment. Vercel processes web requests and may collect standard server logs (IP addresses, request metadata).
• Dotloop (Zillow Group) — Transaction management integration. When you connect your Dotloop account, we exchange OAuth tokens and sync transaction data including loop details, document statuses, and participant information between Dotloop and the Service.
• Anthropic (Claude API) — AI-powered features. Text prompts and relevant context may be sent to the Anthropic API to generate content, analyze data, or provide recommendations. We do not send personally identifiable information to the API unless required to fulfill a specific feature request you initiate.
• Google OAuth — Authentication. If you sign in with Google, we receive your name, email address, and profile picture from Google. We do not access any other Google account data.

We may also disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Third-Party Platform Data

Data received from third-party real estate platforms (such as Dotloop) — including transaction details, document statuses, participant information, and any AI-extracted fields — is used solely to provide platform-related functionality to the subscribing user's account (e.g., the Transaction Coordinator module). It is not used to build or improve generalized products for other customers.

Third-party platform data is not used in any machine learning training or model improvement pipelines, including aggregated or de-identified datasets. AI models process this data for inference only (real-time feature extraction and analysis) and do not retain it for training.

Third-party platform data is retained only as long as needed to provide active functionality and meet legal retention obligations. Upon disconnection of the integration or subscription termination, this data — including structured and extracted fields — will be deleted within 30 days. It is not retained indefinitely for analytics or product improvement.

Third-party platform data is not sold, licensed, rented, or disclosed to third parties beyond necessary infrastructure providers acting as data processors (e.g., hosting, database, and AI inference providers). It is never used for marketing, prospecting, or lead generation.

6. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (TLS/SSL) for all data transmitted between your browser and our servers
• Encryption at rest for stored data
• Row-level security policies on database tables to ensure users can only access data within their organization
• OAuth 2.0 for secure third-party integrations (no third-party passwords are stored)
• Regular token rotation and automatic expiration for API credentials

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining appropriate safeguards.

7. Data Retention

We retain your personal information and transaction data for as long as your account is active or as needed to provide the Service. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., audit trails, dispute resolution).

Aggregated and de-identified data that cannot be used to identify you may be retained indefinitely for analytics and product improvement purposes. This does not apply to third-party platform data, which is governed by Section 5.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate or incomplete data
• Deletion — Request deletion of your personal data, subject to legal retention requirements
• Data Portability — Request an export of your data in a machine-readable format
• Opt-Out — Opt out of marketing communications at any time by using the unsubscribe link in our emails or contacting us directly
• Withdraw Consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at zensenmedia@gmail.com. We will respond to your request within 30 days.

9. Cookies & Tracking Technologies

We use the following types of cookies and similar technologies:

• Essential Cookies — Required for authentication, session management, and core platform functionality. These cannot be disabled.
• Analytics Cookies — Help us understand how users interact with the Service so we can improve the experience. These may be managed through your browser settings.

Most web browsers allow you to control cookies through their settings. Please note that disabling essential cookies may prevent you from using certain features of the Service.

10. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly. If you believe a child under 13 has provided us with personal data, please contact us at zensenmedia@gmail.com.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Effective Date" at the top of this page and, where appropriate, notify you via email or a prominent notice within the Service.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: