Privacy policy

This policy covers everyone who interacts with SitesEzy — real-estate agents who sign up for a workspace, members invited into that workspace, and buyers who submit enquiries on a public listing page. It applies to the SitesEzy web app, our public listing pages, our Progressive Web App (PWA) and any emails we send on your behalf.

The data controller is SitesEzy, operated from Chennai, India. Reach us at sitesezy@gmail.com for any privacy question.

Account information. When you register, we store your name, email address, optional phone number and company, and a hashed password. We don't store passwords in plain text.

Workspace content. Properties, photos, ad copy, descriptions, lead records and notes that you create inside the app. Photos are stored on Cloudinary; everything else lives in our managed Postgres database.

Buyer enquiries. When someone submits the contact form on one of your public listing pages, we collect the name, phone, email and message they provide so they can reach you. We may also tag the lead with a channel hint based on the link they clicked (e.g. ?via=facebook).

Usage data. Standard server logs (request paths, IP addresses, user agents), property page views, and AI credit ledger entries so the platform can meter and bill correctly.

Push subscriptions. If you enable browser push notifications, we store the endpoint and cryptographic keys provided by your browser's push service — only your device can receive messages signed for those keys.

Payment information. SitesEzy does not currently process payments. Once Stripe billing ships, card details will be handled directly by Stripe — SitesEzy only ever sees Stripe's opaque customer / subscription IDs.

• Run the workspace, properties, leads and analytics you signed up for.
• Generate AI ad creatives and descriptions on your request — the relevant property details are sent to Google's Gemini API for the duration of the request. We don't retain anything at the provider beyond what their terms describe.
• Send transactional emails: new-lead alerts, auto-replies to buyers on your behalf, password reset links, team invites and support correspondence.
• Send push notifications when a new lead lands, a buyer requests a site visit or your listing crosses a view milestone — only to devices that opted in.
• Detect abuse, fix bugs, improve the product. Aggregated usage metrics may inform feature work; we don't look at individual workspaces unless you ask us to (e.g. during a support ticket).

We use a short list of well-known vendors to operate the service. None of them are permitted to use your data for their own purposes.

• Google Gemini — runs the AI generation requests you submit (ad creatives, descriptions). Per-request only.
• Cloudinary — stores listing photos.
• Resend — delivers transactional email.
• Neon — managed Postgres database with daily backups.
• Vercel — application hosting and edge runtime.
• Browser push services — Apple, Google and Mozilla relay push notifications to subscribed devices. We sign the payloads with our VAPID keys; they relay the bytes.
• Stripe (planned) — payment processing once billing ships.

Workspace content lives for as long as your account is active. When you delete your account, we delete the workspace and its properties, leads, notes and credit history within 30 days. Server logs are kept for 30 days for incident triage and then rotated out. Email send logs at our provider may be retained for their own audit windows.

You can ask us to:

• Export everything in your workspace as a downloadable archive.
• Correct or update information that's wrong.
• Delete your account, your leads and any other content you supplied.

The fastest path is an email to sitesezy@gmail.com from the address linked to your workspace. We aim to respond within 7 business days.

SitesEzy uses one essential, httpOnly session cookie (sitesezy_session) to keep you signed in. It can't be read by any script on the page. We don't use third-party advertising or tracking cookies.

Passwords are hashed with industry-standard algorithms. The database is reachable only over TLS-encrypted connections. Your workspace data is scoped strictly to your organisation at the query layer — there is no cross-workspace visibility from any API route. SitesEzy staff can access ticket conversations and workspace metadata only when you raise a support request or in response to a security incident.

SitesEzy is intended for working real-estate professionals and their clients. It is not directed at children under 16, and we do not knowingly collect data from them.

We update this page when we add a vendor, change retention windows or otherwise change how we process data. The "Last updated" date at the top of the page reflects the most recent edit. Material changes will be announced in-app or by email.

Questions about this policy or your data? Email sitesezy@gmail.com or open a support ticket from inside the app.