Privacy policy

Last updated September 16, 2026 · Contact: [email protected]

REALsite builds websites and lead-management tools for Canadian real estate agents, operated from Winnipeg, Manitoba. This policy covers two situations: information you give us when you hold a REALsite account, and information that passes through an agent's website that we host. We design the platform's privacy and consent controls to support responsibilities under the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL). We never sell personal information. Ever.

If you hold a REALsite account

We collect what the service needs to run: your name, email address, password (stored hashed, never readable by us), your site's content, your billing status, and — if you connect them — your MLS® feed credentials (stored encrypted) and optional two-step sign-in secrets (also encrypted). Payments are handled by Stripe; your card number never touches our servers.

We use PostHog to understand how account holders use the admin tools and to diagnose errors. This includes workflow events and session replays with form inputs and customer content masked, and media and embedded previews blocked. Static navigation labels remain visible. We exclude sign-in, password reset and billing screens from replay, and do not record console logs or network request bodies. Events use internal account identifiers rather than your name or email address. This monitoring does not add session replay to the public websites we host for agents.

If you visit a website we host for an agent

The agent whose site you're visiting is responsible for that site and owns its data — we process it on their behalf. When you submit a form (a valuation request, a message, a guide download, an open-house sign-in), your name, email, phone, and message go to that agent's private lead inbox. If you tick the consent box, the agent may send you their mailing list, and every such email carries a working unsubscribe link that never expires. When you opt in, we record the time, form and page, the consent wording, and the sender details shown to you so the agent has a record of your choice. We also record when marketing email is stopped. If you previously unsubscribed, we require confirmation from your inbox before adding the address back. We use first-party analytics only: a random visitor identifier in a cookie (_rs, expiring after 180 days) lets the agent see which listings a lead viewed before reaching out. We do not track you across different agents' sites, and we do not use third-party advertising trackers. Agents may add their own analytics or ad pixels to their sites; those are governed by the agent's own disclosures.

Who else touches the data

We use a small set of service providers to run the platform: Fly.io (hosting, with our primary infrastructure in Toronto, Canada), Tigris (file storage for photos and documents), Resend (email delivery), Stripe (payments), Cloudflare (DNS, content delivery, and bot-verification on account signup), Anthropic (optional AI drafting — when an agent asks for a draft, the relevant site content is sent to generate it, and Anthropic does not train on it), Google (address autocomplete — the typed address query only), PostHog (admin product analytics, masked session replay and error reports), Sentry (error reports during the monitoring transition), and UptimeRobot (uptime monitoring). PostHog processes this monitoring data in the United States. Each receives only what its job requires.

How long we keep things

Account and site data lives as long as the account does; when an account closes, the agent can export their contacts and content first. Encrypted backups are kept for 30 days. Site analytics events are deleted after 13 months. Admin session replays are kept for 30 days. Consent and unsubscribe records are kept with the contact; provider bounce and suppression records may also be kept at platform level so the same undeliverable address is protected if it appears again. These records let the agent honour the person's choice and avoid mailing an address that should not be sent to.

Your rights

You can ask us what we hold about you, ask us to correct it, or ask us to delete it — write to [email protected] and a human answers. If your information is in an agent's lead inbox, we'll route the request to that agent, since it's their client relationship. If we ever suffer a breach creating a real risk of significant harm, we'll notify affected people and the Privacy Commissioner of Canada as PIPEDA requires.

Changes

If this policy changes in a way that matters, account holders get an email before it takes effect. The date at the top always tells you the current version.