Privacy Policy
Effective May 21, 2026 · Version 1.0
RealBooster ("we", "us", "our") provides an AI Visibility software-as-a-service ("Service") for local businesses. This Privacy Policy explains what personal information we collect, how we use it, and your rights under Canadian privacy law (PIPEDA) and applicable provincial legislation.
By creating an account or using the Service, you agree to this Policy. If you do not agree, do not use the Service.
Information we collect
- Account information you provide: name, email, business name, brokerage affiliation, real estate license number, mailing address, phone number, profile photo, and company logo.
- Business profile data you grant us access to via OAuth, including your Google Business Profile content, photos, hours, services, and review history.
- Service usage data: pages viewed, audits run, deliverables generated, and interactions with our application.
- Payment information processed by Stripe; we receive only billing metadata, never card numbers.
- Communications with our team or AI assistants.
How we use information
- To provide and operate the Service.
- To improve the Service through analytics; we do not train third-party AI models on your private data.
- To communicate with you about your account, billing, and product changes.
- To comply with legal obligations including tax law, CASL, and lawful requests from authorities.
Sharing
We share data only with service providers that operate the platform — Google Cloud, Firebase, Vercel, Stripe, Resend, Anthropic, OpenAI, and similar — and only as needed to deliver the Service. We do not sell personal information. We may disclose information when required by law.
Security
OAuth refresh tokens are encrypted at rest using Google Cloud KMS. We use TLS in transit, role-based access controls, and audit logging on sensitive operations. We will notify affected users of material breaches as required by applicable law.
Your rights (PIPEDA)
You may request access to, correction of, or deletion of your personal information at any time. You may revoke OAuth permissions at any time via your account settings or directly through Google. Account deletion can be requested by email; we delete or anonymize data within 30 days, except where retention is required by law.
CASL (Canada anti-spam)
We send only transactional and account-related email by default. When customers use RealBooster to send email blasts to their own contacts, the customer is the sender of record and is responsible for CASL compliance regarding their list; we provide unsubscribe handling, suppression lists, and sender identification fields to facilitate compliance.
Children
The Service is not intended for individuals under 18.
International data
The Service operates from Canada with infrastructure hosted in Canada and the United States. By using the Service you consent to your data being processed in these jurisdictions.
Changes to this Policy
We may update this Policy as the Service evolves. Material changes will be communicated via email or in-app notice.
Contact
Privacy questions or PIPEDA requests: dev.realbooster@gmail.com