Privacy Policy

1. Who we are

RealtyTwin is operated by HCS Holdings, LLC. This Privacy Policy explains how HCS Holdings, LLC (“RealtyTwin”, “we”, “us”) handles personal information when you use realtytwin.ai and the RealtyTwin services (the “Service”). Contact: admin@realtytwin.ai.

2. Information we collect

2.1 Waitlist

If you join the waitlist, we store your email address, where you signed up (the homepage) and when. We send a notification of each new signup to RealtyTwin's own inbox through our email provider.

We may use your waitlist email address only to send occasional updates about RealtyTwin's early access, availability and product development, as described when you joined. Every such update will include a way to unsubscribe, and we will honour your request. We do not use your waitlist email address for unrelated promotional marketing, and we do not sell or share it for third-party marketing.

2.2 Exploring a property

• When you type an address, the text you type and a random session token are sent to Google Maps Platform (Places) to suggest addresses. We do not send private Home Profile content to Google.
• When you look up a property, the address may be used to request property information from our property-data provider (section 4). The address may appear in the page address of the results page, so it can appear in our hosting provider's request logs.

2.3 Your account

• Your first name, last name and email address, whether your email address is verified, and a securely hashed password. We do not ask for your phone number, mailing address, date of birth, gender or household information.
• Session and security records: when you signed in, the IP address and browser (user agent) of your sessions, and rate-limiting records used to protect sign-in and other requests.
• Which version of the Terms of Use and of this Privacy Policy you accepted, and when.
• Age confirmation: that you confirmed you are at least 18 years old, the version of the wording you confirmed (for example age-18-v1) and when. We do not collect your date of birth or any identity document.

2.4 Your Home Profile

• The property address you confirm and the property information we obtained for it, with its source and retrieval time.
• Ownership confirmation: that you confirmed you own or co-own the property, the version of the wording you confirmed (for example home-owner-v2) and when. We do not collect deeds, identity documents, mortgage or insurance documents or other ownership proof.
• We do not collect mortgage or insurance information: the Service has no fields, uploads, AI features or exports for it.

2.5 Technical and security information

Our hosting provider processes requests to the Service and keeps request and error logs. We design our application logs not to contain private Home Profile content, documents, secrets or unnecessary personal information.

3. How we use information

We use personal information, including the content you add, only as needed to provide the Service to you, operate and maintain it, keep it secure, give you support, and meet legal, security, fraud-prevention and abuse-prevention obligations: for example to create and protect your account, show and keep your Home Profile, carry out what you ask (such as export or deletion requests), send account and security emails, prevent abuse and keep required records (such as policy acceptance). We do not use the content you add for unrelated secondary purposes, for product-improvement datasets (including aggregated or de-identified datasets derived from it), or to train artificial-intelligence or machine-learning models. For the waitlist, we use your email address only as described in section 2.1.

We do not sell personal information, and we do not share personal information for targeted or cross-context behavioural advertising. We do not use advertising pixels, advertising networks, data brokers or similar integrations for targeted advertising. We disclose personal information to the service providers described in section 4 only as needed to operate, secure, support and provide the Service.

4. Service providers

We use service providers to run the Service. They process information on our behalf:

• Vercel — hosting, request handling and logs.
• Neon — our database. Our Production database is hosted in a U.S. region (AWS US East 1, N. Virginia), and our development and production environments are kept separate.
• Resend — sending email: notifications of new waitlist signups to RealtyTwin's own inbox, and account and security emails from RealtyTwin <no-reply@notify.realtytwin.ai>. These emails are sent as plain text.
• Google Maps Platform (Places) — address suggestions, using only the minimum information needed. We do not claim that this processing happens only in the United States.
• RentCast — property information for addresses you look up, when property lookups are available; we keep it separate from information you provide and show it with its retrieval time.

We may also disclose personal information when we reasonably believe disclosure is necessary to comply with applicable law, regulation, legal process or a valid governmental request; to protect the rights, property, safety or security of RealtyTwin, HCS Holdings, LLC, our users or others; to detect, prevent or address fraud, abuse, security incidents or unlawful activity; or to enforce our agreements and policies.

We do not authorize our service providers to use personal information for purposes unrelated to providing their services to RealtyTwin, except as permitted or required by law.

5. How long we keep information

We keep information for as long as needed to provide the Service and for security, recovery and legal purposes. Information deleted from our database may remain in our database provider's recovery history and backups under its applicable retention practices; deletion from the active database does not mean immediate, irreversible removal from those recovery copies.

6. Your choices and requests

You may ask us to provide access to, correct or delete personal information associated with you. We intend to provide these basic request options to U.S. users even when a particular state privacy law does not require us to do so. Contact admin@realtytwin.ai with any request.

• Export: you may request a copy of your eligible data, including a readable summary and structured data, with provider and homeowner information identified. Provider information is included only where our provider's terms permit it.
• Deletion: you may request deletion of your account and eligible private data. Deletion is subject to recovery periods, backups and our fraud, security and legal obligations, so we do not promise immediate or irreversible deletion where backups or recovery still apply. Provider information we obtained independently, or that is shared with others, may remain only where it is no longer linked to you.

Depending on where you live and applicable law, you may have additional rights concerning your personal information, which may include rights to confirm whether we process your information, obtain a copy of certain information, correct inaccurate information, delete information, or exercise other rights provided by applicable law.

We may need to verify that a request relates to you before completing it. We will use information reasonably necessary for verification and will not use verification information for unrelated purposes.

Some requests may be limited or denied where permitted by law, including when we must retain information to comply with legal obligations, protect security or prevent fraud, maintain records of prior requests, establish or defend legal claims, or protect the rights of others.

We will respond within the time required by applicable law. Where applicable law provides a right to appeal a denied privacy request, we will provide a way to submit that appeal and information about the result.

Where permitted by applicable law, an authorized agent may submit certain requests on your behalf. We may take reasonable steps to confirm the agent's authority and, where appropriate, verify your identity.

We will not discriminate against you for exercising privacy rights provided by applicable law.

7. Security

We protect information with access controls, server-side authorisation checks, encrypted connections and separate environments, and we limit what our logs contain. No system is perfectly secure.

8. Age

The Service is for people 18 and older. It is not directed at children.

9. Changes to this Privacy Policy

This Privacy Policy has a version identifier, an effective date and a publication date. A change creates a new version; a published version is never edited. A version never takes effect before it is published: it may take effect on the day it is published, or it may be published in advance with a later effective date. For a material change, we may ask you to acknowledge the new version before you continue using account features. We record which version you acknowledged and when.

10. Contact

admin@realtytwin.ai. RealtyTwin is operated by HCS Holdings, LLC.