Privacy Policy

RealtyTree Inc. (“RealtyTree”, “we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy describes how we collect, store, process, transfer, share, and use data that identifies or is associated with you (“personal information”) and information regarding our use of cookies and similar technologies.

We provide a link-in-bio platform for realtors and brokerages (“Subscribers”), enabling them to showcase property listings, integrate social media, and manage their online presence (the “Service”). This Privacy Policy applies to our website (realtytr.ee), all Subscriber pages hosted through the Service, and all associated applications, features, and services. It applies equally to Subscribers who create accounts and to members of the public (“Visitors”) who view Subscriber pages, browse property listings, or submit information through contact or inquiry forms.

This Privacy Policy is designed to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), the Saskatchewan Freedom of Information and Protection of Privacy Act (FOIP), and other applicable Canadian and international privacy laws.

Before accessing or using the Service, please ensure that you have read and understood our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy. By accessing or using the Service, you accept and consent to the practices described herein.

• We collect personal information that you provide directly, as well as technical information automatically gathered by our systems, including IP addresses, browser details, and usage data for optimizing the Service and improving user experience.
• We collect information you provide to us through registration, profile setup, and interactions with our platform.
• We may collect data from third-party integrations (e.g., CRM tools, payment processors, MLS data feeds) used within the platform.
• We do not sell or rent personal information to third parties.
• Your information is stored securely and may be transferred outside of your jurisdiction under appropriate safeguards.
• You may contact us at any time to exercise your rights regarding your personal data.

We process your personal information based on the following legal grounds:

• Consent: Where you have provided explicit consent for a specific purpose (e.g., marketing communications). You may withdraw consent at any time.
• Contractual Necessity: Where processing is necessary to perform our contract with you (e.g., providing the Service, processing payments).
• Legitimate Interests: Where processing is necessary for our legitimate business interests (e.g., fraud prevention, security, analytics), provided such interests are not overridden by your rights and freedoms.
• Legal Obligations: Where processing is necessary to comply with applicable laws, regulations, or legal proceedings.

We collect personal information when you voluntarily submit details through registration, profile setup, or by interacting with the Service. This may include:

• Account Information: Name, email address, business name, phone number, professional license information, brokerage affiliation, and other relevant contact details.
• Profile Information: Profile photo, biography, social media links, professional designations, and customization preferences.
• Listing Details: Property addresses, descriptions, images, pricing, virtual tour links, and related metadata uploaded to the platform.
• Payment Information: Payment details are processed securely via third-party payment providers (e.g., Stripe). We do not directly store your full credit card number on our servers.
• Communications: Messages, emails, support tickets, feedback, or other interactions with our team.
• Survey & Feedback Data: Responses to surveys, questionnaires, or product feedback forms you choose to complete.

When you access or use the Service, we may automatically collect:

• Technical Data: Device type, operating system, IP address, browser type and version, screen resolution, language preferences, referring URLs, and general usage metrics.
• Usage Data: Pages visited, features used, time spent on the Service, click patterns, search queries, and interaction data.
• Location Data: Approximate geographic location derived from your IP address.
• Log Data: Server logs that record requests made to our servers, including timestamps, request methods, and response codes.
• Cookies & Tracking Technologies: We use cookies, web beacons, pixels, and similar technologies to analyze user behavior, remember preferences, and improve the Service. See the “Cookies and Tracking Technologies” section below for more details.

We may receive data from:

• MLS & Real Estate Data Providers: Property listing data, transaction data, and related real estate information from MLS systems and data feeds.
• CRM or Brokerage Software: When integrating with third-party platforms, data such as customer inquiries, lead information, or property details may be synced to the Service.
• Authentication Providers: If you sign in using a third-party service (e.g., Google, Apple), we may receive your name, email address, and profile information from that provider.
• Analytics & Marketing Providers: Aggregated data to improve targeting, user engagement, and Service performance.
• Payment Processors: Transaction confirmation data and limited billing details from payment providers.

When you visit a Subscriber's page hosted through the Service (e.g., a realtor's link-in-bio page or property listing page), we may collect the following information:

• Automatically Collected Data: Page views, click interactions, time spent on pages, referring URLs, device type, browser type, operating system, screen resolution, and approximate geographic location derived from your IP address. This data is collected for analytics purposes and to help Subscribers understand how Visitors interact with their pages.
• Inquiry Data: If you submit a contact form, inquiry form, or similar mechanism on a Subscriber's page, we collect the information you provide, which may include your name, email address, phone number, and the content of your message (“Inquiry Data”). This information is shared with the relevant Subscriber so they can respond to your inquiry.
• Cookies & Tracking on Subscriber Pages: Subscriber pages may use cookies and similar tracking technologies for functionality, analytics, and performance monitoring. These are the same categories of cookies described in Section 18 of this Privacy Policy. By browsing a Subscriber page, you consent to the use of strictly necessary and performance cookies. You may manage your cookie preferences through your browser settings.

We do not use Visitor data collected on Subscriber pages for independent marketing purposes. Visitor data is used to operate the Service, provide analytics to Subscribers, and improve the platform.

Understanding who is responsible for your personal information depends on how it is collected and used:

• RealtyTree as Data Controller: RealtyTree is the data controller for all data collected automatically through the Service, including analytics data, technical data, and usage data from both Subscribers and Visitors. RealtyTree controls this data for the purposes of operating the platform, maintaining security, providing analytics, and improving the Service.
• Subscribers as Data Controllers: When a Visitor submits Inquiry Data (e.g., through a contact form on a Subscriber's page), both RealtyTree and the Subscriber act as independent data controllers. RealtyTree processes this data to facilitate delivery to the Subscriber and to operate the platform. The Subscriber independently controls the data for the purposes of responding to inquiries and conducting their real estate business. Each party is independently responsible for complying with applicable privacy laws with respect to the data they control.
• Subscriber Obligations: Subscribers who collect Visitor data through the Service are responsible for: (a) using such data only for lawful purposes; (b) complying with applicable anti-spam legislation (including CASL) when contacting Visitors; (c) not selling or transferring Visitor data to unrelated third parties; and (d) responding to data access, correction, or deletion requests from Visitors in a timely manner.

If you have questions about how a specific Subscriber uses your data, we encourage you to contact them directly. If you are unable to resolve a concern with a Subscriber, you may contact us at privacy@realtytr.ee and we will assist where possible.

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and manage your account
• Send you service-related communications and administrative notices
• Respond to your inquiries, comments, and support requests
• Personalize your experience and deliver content and features relevant to your interests
• Analyze usage patterns and trends to improve the Service and develop new features
• Detect, prevent, and address fraud, security issues, and technical problems
• Comply with legal obligations and enforce our Terms of Service
• Send marketing communications (with your consent, where required by law)
• Generate aggregated, de-identified analytics and insights about Service usage

We do not sell, rent, or trade your personal information to third parties. However, we may share data with:

• Service Providers: Third-party vendors who assist with platform hosting, cloud infrastructure, analytics, email delivery, marketing, customer support, and payment processing. These providers are contractually bound to use your data only for the purposes we specify.
• Business Partners: Brokerage firms, real estate boards, and realtors using the platform for collaboration and listing syndication purposes.
• Legal & Compliance: When required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of RealtyTree, our Users, or the public.
• Business Transfers: In connection with a merger, acquisition, sale of assets, bankruptcy, reorganization, or similar corporate transaction, your information may be transferred to the acquiring entity. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.
• With Your Consent: We may share your information with third parties when you have given us explicit consent to do so.

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, including:

• Active Accounts: We retain your data for the duration of your account and for a reasonable period thereafter.
• After Account Closure: We may retain certain information for up to 36 months after account closure for legitimate business purposes, including fraud prevention, dispute resolution, and compliance with legal obligations.
• Transaction Records: Financial and billing records are retained for a minimum of 7 years as required by applicable tax and accounting laws.
• Visitor Inquiry Data: Inquiry Data submitted through Subscriber pages is retained for up to 24 months from the date of submission, or until the associated Subscriber account is closed, whichever comes first.
• Aggregated Data: De-identified and aggregated data that cannot be used to identify you may be retained indefinitely for analytical purposes.

When personal information is no longer required, we will securely delete or anonymize it in accordance with our data retention and disposal procedures.

Storage: All personal information is stored on secure servers with restricted access, utilizing industry-standard encryption and security controls.

International Transfers: Your data may be transferred to and processed in countries outside of Canada, including the United States, where our service providers operate. When we transfer data internationally, we ensure appropriate safeguards are in place, including contractual data protection clauses and compliance with applicable cross-border transfer requirements under PIPEDA.

Encryption: Payment transactions are encrypted using SSL/TLS protocols. Data at rest is encrypted using AES-256 or equivalent encryption standards.

Access Controls: Access to personal information is limited to authorized personnel who require it for legitimate business purposes and who are subject to confidentiality obligations.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and vulnerability testing
• Access controls and authentication mechanisms
• Employee security training and confidentiality agreements
• Incident response and breach notification procedures
• Regular backups and disaster recovery planning

While we take reasonable precautions to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your personal information.

In the event of a data breach involving your personal information that poses a real risk of significant harm, we will:

• Notify affected individuals as soon as feasible, and in any event in compliance with applicable breach notification laws (including PIPEDA's mandatory breach reporting requirements)
• Report the breach to the Office of the Privacy Commissioner of Canada and any other relevant regulatory authorities as required by law
• Maintain records of all data breaches, regardless of whether they meet the notification threshold
• Take immediate steps to contain the breach and mitigate potential harm

Under applicable privacy laws, including PIPEDA, you have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you and receive a copy in a structured, commonly used format.
• Rectification: Request correction of inaccurate or incomplete personal information.
• Erasure: Request deletion of your personal information, subject to our legal obligations and legitimate retention needs.
• Restriction: Request that we limit or restrict certain types of processing of your personal information.
• Objection: Object to the processing of your personal information for direct marketing or other purposes based on our legitimate interests.
• Data Portability: Request transfer of your personal information to another service provider in a machine-readable format, where technically feasible.
• Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us at privacy@realtytr.ee. We will respond to your request within 30 days, as required by PIPEDA. We may request verification of your identity before processing your request.

As a Canadian company, we comply with PIPEDA's ten fair information principles: accountability, identifying purposes, consent, limiting collection, limiting use disclosure and retention, accuracy, safeguards, openness, individual access, and challenging compliance.

If you are not satisfied with our response to your privacy concern, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• The right to know what personal information we collect and how it is used
• The right to delete your personal information
• The right to opt out of the sale or sharing of personal information
• The right to non-discrimination for exercising your privacy rights
• The right to correct inaccurate personal information
• The right to limit the use of sensitive personal information

We do not sell personal information as defined by the CCPA/CPRA. To exercise your California privacy rights, contact us at privacy@realtytr.ee.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you may have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local data protection authority. For EEA data subjects, our legal basis for processing is as described in Section 1 above.

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to promptly delete that information. If you believe that a child under 18 has provided us with personal information, please contact us at privacy@realtytr.ee.

We use the following types of cookies and tracking technologies:

• Strictly Necessary Cookies: Required for core platform functionality, authentication, and security. These cannot be disabled.
• Performance & Analytics Cookies: Help us understand how users interact with the Service, measure performance, and identify areas for improvement (e.g., PostHog, Google Analytics).
• Functional Cookies: Remember your preferences and settings to provide a personalized experience.
• Marketing & Advertising Cookies: Used to deliver relevant advertisements and measure campaign effectiveness.

Managing Cookies: You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, disabling certain cookies may affect the functionality of the Service. For more information about cookies, visit www.allaboutcookies.org.

Cookies on Subscriber Pages: The same categories of cookies described above may also be used on Subscriber pages hosted through the Service. These cookies are set by RealtyTree (not by individual Subscribers) and are used for platform functionality, analytics, and performance monitoring. Subscribers do not have the ability to add their own cookies or tracking scripts to their pages.

Do Not Track: Some browsers offer a “Do Not Track” (DNT) signal. There is currently no industry standard for how companies should respond to DNT signals. We do not currently respond to DNT signals, but we honor your cookie preference settings.

The Service may contain links to third-party websites, applications, or services that are not owned or controlled by RealtyTree. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through the Service.

We may use automated processes for analytics, fraud detection, and content personalization. We do not use automated decision-making that produces legal effects or similarly significant effects on you without human review. If you have concerns about automated processing of your data, please contact us.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. If we make material changes, we will notify you by email or through a prominent notice on the Service at least thirty (30) days before the changes take effect. Your continued use of the Service after the effective date of any modifications constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

RealtyTree Inc.
Attn: Privacy Officer
116 Research Dr, Saskatoon, SK S7N 0X4
Email: privacy@realtytr.ee
General Support: support@realtytr.ee

For complaints regarding our privacy practices, you may also contact the Office of the Privacy Commissioner of Canada at 1-800-282-1376 or www.priv.gc.ca.