Privacy Notice
Updated October 2, 2026
This notice explains the information used by AI Realtor Pro’s website and private workspace. For privacy questions, contact Jeremy McDonald at jeremy@mcdonald-mtg.com.
Information you provide
Our inquiry form asks for your name, work email, request type, topic, optional context and permission to reply. We use this information to respond to access, product and support requests. Submitting an inquiry does not enroll you in a marketing list or automatically create workspace access.
Google sign-in uses Firebase Authentication. Account information can include your account identifier, email, display name and profile image. Approved workspace access also depends on server-held role, status and organization membership records. Administrators use these records to manage access; signing in alone does not grant approval.
AI inputs and outputs
The public guided studio example runs in your browser. It does not send its input to an AI provider. Its current edits are held in the page while you use it.
In the private workspace, AI writing and coaching requests send your submitted text and a bounded recent conversation history to our server and, when configured, OpenRouter and the model provider selected for that request. These services process the input to return a draft. The browser keeps the current chat in page memory. The application does not intentionally write chat transcripts into its database as part of the text-generation route.
Do not enter passwords, access tokens, consumer contact details, financial information, identification numbers, loan applications or private documents into AI tools. Automated checks reject some sensitive inputs, but they cannot identify every private detail. AI output may be inaccurate and needs human review.
Workspace storage and uploads
Existing project, draft and writing-preference tools use local browser storage. Some existing tools also permit locally selected images or file data. Local storage can remain on the device after the page closes. It is not a shared cloud CRM, an encrypted document vault or a reliable backup. Avoid storing sensitive consumer information in these tools, and use a device and workflow approved by your organization.
Firebase and Firestore support account authorization, organization records and security controls. Existing integration code supports storing authorized provider connections, but connected publishing, video generation and automation are not enabled in this release. Existing saved settings and data are preserved; they are not evidence that an external service is connected or that an action has occurred.
Service providers
- Netlify hosts the website and server routes. Hosting services may process request information such as IP addresses, browser details, timestamps and error or security information needed to operate the service.
- Google Firebase provides authentication and Firestore services for access records and server security controls.
- OpenRouter and the selected model provider process private-workspace AI requests when that service is available.
- Resend processes inquiry emails when online delivery is configured. The inquiry is routed to the product contact’s email account for follow-up.
These providers may process information under their own service terms, privacy notices and operational requirements. Their processing locations and retention practices may differ. We do not promise a vendor-specific deletion period that has not been established for this implementation.
Security and abuse prevention
We validate requests, check approved account access and limit certain request volumes. Security counters may use hashed account or email identifiers and, where supplied by the hosting service, a hashed connection address. These controls help prevent abuse. We avoid intentionally placing form contents, private AI messages or credentials into application diagnostics.
Cookies and measurement
Authentication and saved workspace preferences use browser storage. Separately, optional Google Analytics measures public page visits, planning-tool use, contact actions and inquiries accepted by our server. The Google tag loads only after you allow analytics. Declining analytics does not prevent you from using the website.
When allowed, Google Analytics uses cookies and pseudonymous browser identifiers and processes technical information such as device/browser details and interactions. Our events use approved public page paths and fixed categories. We exclude URL query strings, raw external referrers, form values, private workspace routes, AI conversations and consumer financial information. A fixed discovery-source label (ChatGPT, Google, Bing, or other/direct) may be derived in your browser from a recognized referrer or ChatGPT campaign source. The original URL and campaign text are not sent by our event code. Advertising signals and personalized advertising are disabled in our tag configuration.
Your analytics choice is stored in this browser. You can change it using “Analytics preferences” in the footer. Declining stops further measurement and removes this site’s Analytics cookies; it does not delete information already processed by Google. Google processes information under its own terms and privacy practices. See how Google uses information from sites that use its services.
Retention and your choices
Information is retained only as necessary for the stated business purpose, legal obligations, security, dispute resolution or the applicable service provider’s operational requirements. The application does not establish one universal deletion schedule. Local browser data remains subject to your browser and device controls; email and service records may be retained under their respective operational processes.
You can avoid submitting optional context, sign out of the workspace and use your browser controls to manage local storage. Clearing storage can remove locally saved work and sign-in state. Contact us to ask about access, correction or deletion of information associated with your use of the product. We will review the request, verify identity where appropriate and explain any applicable limitations rather than promise deletion we cannot verify.
External destinations and updates
Links to other websites and any separately authorized external accounts operate under their own notices. We may update this notice when the product’s actual practices change. Material changes to privacy or consumer handling require review before release.