Privacy Policy

Last updated: 2026-05-28

1. Who we are

Realty Stack is operated by 1814629 Alberta Ltd (Brent Deptuck, REALTOR® at Real Broker) (“we”, “us”, “our”), based in Edmonton, Alberta, Canada. Realty Stack is an AI-assisted real estate platform used by licensed REALTORS® to manage their own client relationships and practice operations.

2. What personal information we collect

We collect personal information in two categories:

2.1 Information about operators (REALTORS® using Realty Stack)

• Name, email, phone, brokerage affiliation, REALTOR® license details
• Authentication identifiers via Clerk (our identity provider)
• Usage analytics within the Realty Stack application
• Configuration choices (engagement preferences, integrations connected)

2.2 Information about leads (clients and prospects of the operator)

• Name, phone, email
• Property search criteria (price range, bedrooms, neighborhoods, timeline)
• Source of the lead and the operator who is responsible for them
• Communication history (call logs, message logs, appointment history)
• Consent flags (whether the lead has opted in or out of SMS, email, voice)

Lead information is collected on behalf of the operator (the licensed REALTOR® who has a professional relationship with that lead). The operator is the data controller for their leads' information; we act as the data processor.

3. How we use personal information

For operators, we use information to:

• Provide and improve the Realty Stack service
• Authenticate access and prevent abuse
• Communicate service updates and security notices
• Bill and account for usage

For leads, we use information on the operator's behalf to:

• Send personalized outbound communications (SMS, email, voicemail) drafted by AI and reviewed by the operator
• Coordinate appointments, follow-ups, and other professional touchpoints
• Provide the operator with summaries, context, and recommendations about the lead
• Maintain records required under Alberta real estate regulations

4. Consent and lawful basis

Under Canadian privacy law (PIPEDA), we process personal information with consent. Operators provide explicit consent when signing up. Leads consent through their relationship with the operator (typically by contacting the operator or registering interest in a property), which the operator confirms before any information enters Realty Stack.

We honor all consent flags set in the lead's record. If a lead is marked do-not-text, do-not-email, or do-not-call in the operator's CRM or in Realty Stack, no outbound communication is sent over that channel.

Outbound communications include unsubscribe instructions (STOP for SMS, UNSUBSCRIBE for email) as required by Canada's Anti-Spam Legislation (CASL).

5. Quiet hours

Outbound SMS and voice are not sent between 21:00 and 09:00 in the lead's local timezone, regardless of where the operator is located.

6. Sub-processors

We engage the following sub-processors to provide the Realty Stack service. We engage each under a Data Processing Addendum (or equivalent contractual data-protection terms), and they process personal information only on our documented instructions.

7. Data retention

We retain personal information as follows:

• Lead profiles and facts: 7 years from last touch (Alberta real estate records retention)
• Outbound message logs: 7 years
• Voice call recordings: 90 days unless flagged for quality review
• AI-generated content (drafts, video): 30 days post-send
• Webhook payload logs: 30 days then purged

On deletion request (see Section 9), we hard-delete within 30 days, excluding records required by regulatory hold.

8. Security

We protect personal information with the following controls:

• TLS 1.3 in transit for all external traffic
• Encryption at rest on Hetzner (LUKS full-disk) and Convex (AWS KMS)
• Per-tenant secret storage (OAuth tokens, API keys) in AWS Secrets Manager with key rotation
• Quiet-hours enforcement, consent-aware channel selection, a pre-send review queue, and an organization-wide kill switch
• Audit log of every outbound communication, viewable in the operator dashboard

Despite these controls, no system is perfectly secure. If we discover a security incident affecting your personal information, we will notify you within 72 hours per our incident response playbook.

9. Your rights

Under PIPEDA, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Withdraw consent (note this may affect our ability to provide service)
• Request deletion of your personal information
• File a complaint with the Office of the Privacy Commissioner of Canada

To exercise these rights, contact Brent Deptuck at brent.deptuck@gmail.com. We respond within 30 days.

10. International transfers

Several sub-processors above are based outside Canada. Your information may be transferred to and processed in those jurisdictions, including the United States and Germany. Where applicable, we rely on standard contractual clauses and equivalent safeguards.

11. Changes to this policy

We may update this policy from time to time. Material changes will be communicated to operators by email; the “Last updated” date at the top of this page reflects the current version.

12. Contact

1814629 Alberta Ltd (Brent Deptuck, REALTOR® at Real Broker)
13731 56 ST NW, Edmonton, AB T5A 4Z5
Email: brent.deptuck@gmail.com