1. Scope and Contact
This Privacy Policy explains how Realest ("Realest," "we," "us") handles information through realest.casa, our browser extension, user accounts, and related APIs (the "Services"). Questions and privacy requests can be sent to [email protected].
2. Information We Collect
Account information
If you create an account, we collect your name, email address, authentication information, account settings, and records of operational emails. Passwords are stored only in hashed form. If you sign in with Google, Google provides your name, email address, and Google account identifier; we do not receive your Google password.
Property requests
When you request information about a property, the Services process the address and related location details needed to find the relevant public records and return a building report.
Device, usage, and operational information
We collect information such as IP address, browser and device type, referring page, pages or features used, timestamps, request identifiers, and error information. We use this information to operate, secure, troubleshoot, and improve the Services.
Browser extension information
The extension reads property information from supported StreetEasy pages to provide building reports and commute-time features. It sends property details to Realest only when needed to provide those features. If extension analytics are enabled in a published build, the extension sends a random installation identifier, extension version, and limited feature-use events. Its analytics do not include StreetEasy URLs, property addresses, search terms, or map coordinates, and the extension does not use session replay.
3. How We Use Information
We use information to provide and personalize the Services; authenticate accounts; return property reports; send account and security messages; maintain security and prevent abuse; diagnose errors; understand feature performance; comply with law; and protect our users, Services, and rights.
4. Cookies, Analytics, and Session Replay
We use essential cookies to keep accounts secure and local browser storage to remember your analytics choice. With your permission, we use Google Analytics and other analytics and product-improvement providers to understand how people use the Services and improve them. These providers may process IP address, online identifiers, device and browser information, pages viewed, timestamps, and interactions.
Our website analytics may include session replay, which may capture page structure, visible page text, scrolling, and interactions. We mask form inputs and content marked as sensitive, remove URL query strings before sending analytics or replay data, and identify signed-in users with an internal account identifier rather than a name or email address.
Learn more about how Google uses information from sites or apps that use its services.
If your browser sends Global Privacy Control or an enabled Do Not Track signal, we treat it as a request not to load optional website analytics. You can change your stored choice above at any time. The change applies to future collection on that browser.
5. When We Disclose Information
We disclose information to vendors that help us provide hosting, authentication, analytics, error monitoring, security, and email delivery. We may also disclose information when required by law; to investigate fraud, abuse, or security incidents; to protect rights or safety; or as part of a merger, financing, acquisition, bankruptcy, or sale of assets. We do not sell personal information.
6. Retention
We keep information only for as long as reasonably necessary for the purposes described above. Retention depends on the type of information, whether your account remains active, operational and security needs, legal obligations, dispute prevention, and backup cycles. When information is no longer needed, we delete or deidentify it where reasonably practicable.
7. Your Choices and Rights
You can update account information through account settings, disconnect Realest from Google at your Google account permissions page, and request account deletion through account settings or by contacting [email protected]. Depending on where you live, applicable law may also give you rights to access, correct, delete, or obtain a copy of personal information, or to object to or restrict certain processing.
Send a request to [email protected]. We may need to verify your identity and will respond within the time required by applicable law. Some information may be retained where law permits or requires it.
8. Security
We use reasonable technical and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. Changes to This Policy
We may update this Privacy Policy as the Services or legal requirements change. We will post the updated policy here, revise the date above, and provide any additional notice required by law.
10. Contact Us
Contact [email protected] with questions, concerns, or privacy requests.