Privacy Policy

1. Introduction

R7 ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI voice agent platform for real estate professionals (the "Service").

By using R7, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Password (encrypted and securely stored)
• Account creation date

2.2 Property Information

When you create property listings, we collect:

• Property address and details (bedrooms, bathrooms, square footage, etc.)
• Property descriptions
• Custom questions and answers you provide for your AI agent

2.3 Lead Information

When potential buyers interact with your AI voice agents, we collect:

• Name (if provided during conversation)
• Email address (if provided during conversation)
• Phone number (if provided during conversation)
• Conversation transcripts
• Call duration
• Timestamp of interaction

2.4 Voice Data

Our Service processes voice data in real-time to enable AI conversations. Voice audio is:

• Streamed directly to our AI provider for processing
• Converted to text transcripts which are stored
• Not permanently stored in audio format

2.5 Usage Analytics

We automatically collect certain information about how you use the Service:

• QR code scans
• Call initiation events
• Lead capture events
• Browser type and device information

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Create and manage your account
• Enable AI voice agent functionality for your properties
• Capture and deliver leads to you
• Send you email notifications about new leads
• Generate analytics and insights about your voice agents
• Respond to your inquiries and provide customer support
• Detect, prevent, and address technical issues or fraud
• Comply with legal obligations
• Develop new features and improve AI capabilities
• Conduct research and analysis to enhance the Service

3.1 AI and Machine Learning

We may use anonymized and aggregated data derived from your use of the Service to train, improve, and develop our AI models and algorithms. This data is stripped of personally identifiable information before being used for these purposes. By using the Service, you consent to this use of anonymized data for AI improvement.

3.2 Business Purposes

We may process your information for our legitimate business interests, including:

• Analyzing usage patterns to improve user experience
• Marketing and promotional activities (with your consent where required)
• Protecting against fraud, abuse, and security threats
• Enforcing our Terms of Service and other policies
• Facilitating corporate transactions (mergers, acquisitions, asset sales)

4. Third-Party Services

We use the following third-party services to operate R7:

4.1 Supabase

We use Supabase for authentication and database services. Your data is stored securely in Supabase's infrastructure. View their privacy policy at supabase.com/privacy.

4.2 xAI

We use xAI's Grok API for AI voice processing. Voice data is transmitted to xAI for real-time conversation processing. View their privacy policy at x.ai/privacy.

4.3 Email Services

We use SMTP email services to send you lead notifications. Your email address and lead information may be processed by our email service provider.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide you with our Service. Specifically:

• Account data: Retained until you delete your account
• Property data: Retained until you delete the property or your account
• Lead data: Retained until you delete the lead or your account
• Analytics data: Retained for up to 2 years for reporting purposes

You may request deletion of your data at any time by contacting us.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of passwords using industry-standard algorithms
• Row-level security policies in our database
• Regular security assessments and updates

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request a copy of your data in a portable format
• Objection: Object to certain processing of your data
• Withdrawal: Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us using the information provided below.

8. California Privacy Rights (CCPA/CPRA 2026)

If you are a California resident, you have specific rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), effective January 1, 2026.

8.1 Your California Rights

• Right to Know: Request disclosure of personal information we have collected about you
• Right to Delete: Request deletion of your personal information, subject to certain exceptions
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: Opt out of the sale or sharing of personal information
• Right to Limit: Limit the use and disclosure of sensitive personal information
• Right to Non-Discrimination: Not receive discriminatory treatment for exercising your rights

8.2 Do Not Sell or Share

R7 does not sell your personal information for monetary consideration. We do not share your personal information for cross-context behavioral advertising purposes. Therefore, we do not offer an opt-out mechanism for the sale or sharing of personal information.

8.3 Sensitive Personal Information

We may collect and process certain sensitive personal information, including precise geolocation data (for analytics purposes only). We use sensitive personal information only as necessary to provide the Service and do not use it for purposes beyond those disclosed in this Privacy Policy.

8.4 Exercising Your Rights

To exercise your California privacy rights, please contact us at privacy@rs7ven.com. We will verify your identity before processing your request. You may designate an authorized agent to submit requests on your behalf. We will respond to verifiable consumer requests within 45 days, as required by law.

8.5 Request Limitations

You may submit a maximum of two (2) access requests within any 12-month period. We reserve the right to deny requests that are manifestly unfounded, excessive, or repetitive. Certain information may be exempt from disclosure or deletion under applicable law.

9. Other U.S. State Privacy Rights

If you reside in Virginia, Colorado, Connecticut, Utah, Oregon, Texas, Montana, Indiana, Kentucky, Rhode Island, or other states with comprehensive privacy laws, you may have similar rights to access, correct, delete, and port your personal information. Contact us at privacy@rs7ven.com to exercise these rights.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that are different from the laws of your country.

By using the Service, you consent to the transfer of your information to the United States and other jurisdictions where we or our service providers operate. We implement appropriate safeguards for international transfers, including standard contractual clauses where required.

11. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@rs7ven.com. If we become aware that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to delete that information.

12. Data Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf
• Legal Requirements: When required by law, subpoena, court order, or legal process
• Protection of Rights: To protect our rights, property, safety, or the rights of others
• Business Transfers: In connection with any merger, acquisition, financing, or sale of assets
• With Your Consent: When you have given us explicit permission to share your information

We require all third parties to respect the security of your personal information and to treat it in accordance with applicable law.

13. Limitation of Liability

While we implement reasonable security measures to protect your data, no system is completely secure. To the maximum extent permitted by law, R7 shall not be liable for any unauthorized access, use, or disclosure of your personal information resulting from:

• Hacking, cyberattacks, or other malicious activities beyond our reasonable control
• Your failure to maintain the confidentiality of your account credentials
• Third-party service provider failures or breaches
• Force majeure events or circumstances beyond our control

14. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we may also send you an email notification (if you have provided your email).

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically for any changes.

15. Governing Law

This Privacy Policy and any disputes arising from it shall be governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to its conflict of law provisions. Any disputes related to this Privacy Policy shall be subject to the dispute resolution provisions in our Terms of Service.

16. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: