How we handle your data.

RealHQ (“we”, “us”, “our”) is operated by BrainFeed Solutions, registered in Ahmedabad, India. We provide a software-as-a-service platform for real estate agencies. This policy covers data we process on behalf of our customers (“Agencies”) and the data we process about visitors to our website.

For purposes of GDPR and AU Privacy Act, we are a data controller for our website visitors and a data processor for the contacts and pipeline data inside Agency accounts.

We collect the minimum necessary to operate the service and bill for it.

• Account data — name, work email, agency name, role.
• Agency content — contacts, listings, pipelines, appointments, notes you add. Processed on your instruction.
• Usage data — pages viewed, features used, error reports. Used to debug and improve the product.
• Billing data — payment metadata via Stripe (we never see card numbers).
• Communications — support emails and chat transcripts, retained while the account is active.

We process personal data for the following purposes only:

• Deliver the service you've signed up for
• Send transactional notifications (signup, password reset, billing)
• Provide customer support
• Detect, prevent, and respond to security incidents
• Comply with legal and tax obligations

Where GDPR applies: contract performance (delivering the service you’ve signed up for), legitimate interest (security, fraud prevention, product improvement), legal obligation (tax, compliance), and consent (marketing emails, optional product analytics).

Where the AU Privacy Act applies: collection is in accordance with the Australian Privacy Principles. We collect only what’s necessary for the primary purpose of providing the service.

We use the following third-party processors to deliver the service. The full list is also maintained as a separate document and you’ll be notified before we add or change a sub-processor.

• Railway — application hosting + Postgres database (Mumbai / Sydney).
• Vercel — edge delivery, image and file storage (Vercel Blob).
• Upstash — Redis cache for domain lookups (no customer data).
• Twilio — WhatsApp message delivery.
• Resend — transactional email delivery.
• Stripe — payment processing (card data never touches our servers).
• Sentry — error monitoring (no customer payloads, IDs only).

Agency data is stored in the region matched to the Agency’s primary market. India accounts: Mumbai. Australia + UK accounts: Sydney. We do not transfer data across regions without your written consent or a clear lawful basis.

• Active accounts — for as long as the account exists.
• Closed accounts — 30 days, then permanent delete.
• On-demand export — CSV or JSON at any time from settings.
• Legal hold — invoices and tax records retained for the statutory period in our operating jurisdictions.
• Backups — 30-day point-in-time recovery window; deleted data is unrecoverable after that.

You can access, correct, export or delete your personal data at any time. Most actions are available from your account settings. For anything else, email privacy@realhq.io and we’ll respond within 30 days.

• Access — see what data we hold about you
• Rectification — correct anything inaccurate
• Erasure — delete your account and personal data
• Portability — export your data in a machine-readable format
• Object / restrict — limit how we process your data
• Withdraw consent — for anything you previously consented to

We use a small set of essential and functional cookies. See our Cookie Policy for the full table, what each cookie does, and how to manage them.

TLS 1.3 in transit, AES-256 at rest, Postgres RLS for tenant isolation, daily backups with 30-day point-in-time recovery. Full details on our Security page.

RealHQ is a B2B service. We do not knowingly collect personal data from anyone under 18. If you believe we have, please contact us and we’ll delete it.

We update this policy as the product evolves. Material changes are notified by email at least 30 days before they take effect. The “Last updated” date at the top of the page reflects the most recent revision.

Privacy queries: privacy@realhq.io. Postal: BrainFeed Solutions, [Address], Ahmedabad, Gujarat 380015, India. EU/UK queries can also be directed to our designated representative — request details by email.