REAL ESTATE AUTOPILOT

Privacy Policy

Effective July 11, 2026 · Real Estate Autopilot is operated by Totalis Real Estate Solutions (Indiana broker license RB20001289).

This policy describes what we collect, why, and what we do with it — in plain language, because that's how we run everything else.

What we collect

Access requests. When you request access we collect what you submit: your name, email, market, brokerage or team details, and your message. For abuse prevention we also record a salted one-way hash of your network address — never the raw address — and a correlation ID for troubleshooting.

Open-house sign-ins. When you sign in at an open house we collect the name and contact details you provide and your consent choice. Your sign-in is stored as a tamper-evident consent record and is shared only with the real-estate organization hosting that open house, for the follow-up you consented to.

Platform workspaces (invited operators). Client records, communications, documents, and business data you bring into your workspace belong to you and stay isolated to your organization.

What we don't do. This site runs no third-party advertising trackers. We do not sell personal data. Ever.

How we use it

  • To review access requests and respond to you.
  • To deliver open-house follow-up on behalf of the hosting organization, per your consent.
  • To operate, secure, and improve the platform (rate limiting, abuse prevention, debugging).

AI processing

The platform uses AI to draft work product. Drafts are reviewed by a human before anything client-facing is sent. Your workspace data is never shared across organizations and is never used to train models available to anyone else.

Isolation & security

Workspace data is isolated per organization at the database layer with row-level enforcement. Data is encrypted in transit and at rest. Public forms are protected by rate limiting and proof-of-work challenges rather than tracking-based bot detection. Service access follows least privilege.

Sharing

We use a small set of infrastructure providers to run the service — cloud database/authentication, web hosting, and AI model providers — each processing data only to provide their service to us. We may disclose information if required by law. There is no sale or ad-targeting use of your data.

Retention

Access requests are kept while we evaluate them and for a reasonable period after. Open-house sign-ins are retained as consent evidence for the hosting organization. Workspace data is retained while your organization uses the platform and deleted on verified request after departure.

Your rights

You can ask us to access, correct, export, or delete your personal information at any time: devdog27@gmail.com. We'll verify the request and respond promptly.

Children

The service is for real-estate professionals and their clients and is not directed to anyone under 18.

Changes

If this policy changes, we'll update this page and the effective date above. Material changes will be called out plainly, not buried.

Questions: contact us.