Privacy Policy
Last updated: September 2026. This policy covers realtyreach.in and the Realty Reach Growth Engine application.
1. Overview
Realty Reach ("we", "us") operates realtyreach.in, the Free Leads tool, the property listing portal and the Realty Reach Growth Engine ("Growth Engine"). This policy explains what personal data we collect, how we use it, who we share it with, how long we keep it, and how you can access, correct or delete it. We keep the data we collect to the minimum needed to deliver each service and we never sell personal data.
2. Information we collect
Website and forms. When you use our contact or enquiry forms, we collect the details you voluntarily provide, such as your name, company, phone number, email address and message. We may also receive basic technical data (such as device type and browser) through standard analytics tools.
Free Leads tool. When you request sample buyer-demand data, we receive your name, email address, mobile number, selected city and a Google account identifier. This lets us deliver the sample and contact you about the full list.
Property listing portal. When you list a property, we collect your name, email, mobile number and the property details you provide. Your contact details are never displayed publicly.
Growth Engine account. When you create an account we collect your name, email address, a securely hashed password and, where applicable, billing plan and invoice details.
Connected social accounts. When you connect a Facebook page, Instagram account or LinkedIn company/community page, we store the connection and (as described in Section 5) the access tokens needed to act on your behalf.
Content you create. Posts, drafts, scheduling calendars, uploaded images and videos, and any AI-generated drafts you create or save in the Growth Engine.
Page analytics. Periodic snapshots of follower, reach and engagement metrics for the pages you connect (Section 7).
3. How we use the information
- To respond to your enquiry, discuss potential services and, where you have agreed, contact you about our services.
- To deliver Free Leads samples, property-listing features and Growth Engine functionality you request.
- To operate, secure and improve the products, and to provide support.
- To meet legal and accounting requirements (for example, invoicing).
4. Analytics and cookies
This website uses a web analytics service to understand how visitors use the site. You can disable cookies in your browser at any time.
5. Growth Engine — connected social accounts (Meta, LinkedIn & Google)
Growth Engine runs entirely on your instruction. When you connect an account we act as a processor on your behalf. Before connecting anything, the exact permission screen shown to you (by Meta, LinkedIn or Google) describes what is being requested — we never request more than the features you use.
Note: Google has its own restricted-scope user data policy. Where we access Google user data (Google Business Profile or YouTube), we use it only for the feature that requested it, we never share it except where needed to provide the service, and we handle deletion when you disconnect or delete your account as described in Sections 5.4 and 10.
5.1 Facebook & Instagram (Meta)
With your permission we may access and use the following, through the official Meta Graph API:
- Pages you manage: list your pages, read page profile information and manage posts.
- Page content publishing: create, schedule and publish posts to pages you manage, exactly on the schedule you set.
- Page insights (analytics): read reach, follower and engagement metrics to show you growth analytics.
- Comments & engagement: fetch comments on your published content so you can respond.
- Instagram accounts linked to your pages: schedule and publish to a linked professional Instagram account you have authorised.
We never read your private messages or access data about people who are not you, and we never act on your pages unless you set up a post or schedule that tells us to.
5.2 LinkedIn
If you connect a LinkedIn account, with your permission we request LinkedIn scopes and use them only for the indicated purpose. We never request more than the features you use:
- openid + profile (Member Data) — to verify your identity and link your LinkedIn profile to your Growth Engine account. Through LinkedIn's OpenID Connect sign-in we receive your name, profile picture and a unique identifier. Deprecated legacy scopes (
r_liteprofile,r_emailaddress) are no longer used. - w_member_social — to publish content to your own LinkedIn profile on your behalf. We only post content you create or approve inside the Growth Engine.
- w_organization_social + r_organization_social — to post to and read analytics for company pages or community pages where you are a page admin, when managed-page publishing is enabled for your account via LinkedIn's Community Management API. We can only act on pages where you hold admin rights.
- Asset upload — when a post includes an image or video, the media file is uploaded to LinkedIn through LinkedIn's Asset Upload API so it can be attached to your post. That media is then stored by LinkedIn under LinkedIn's own terms and policies.
We do not access your connections, messages, or activity outside the permissions above.
5.3 Google (Google Business Profile & YouTube)
If you connect a Google account, with your permission we request Google scopes and use them only for the indicated purpose. We never request more than the features you use:
- Google Sign-In (openid, email, profile) — to verify your identity and link your Google account to your Growth Engine account. Through Google's OpenID Connect sign-in we receive your name, email address, profile picture and a unique identifier.
- Google Business Profile — with your authorization we can read the business profiles you manage and create, schedule and publish posts (updates, offers, events) to your Google Business Profile, exactly on the schedule you set. We only publish content you create or approve inside the Growth Engine and we can only act on business profiles where you hold an owner or manager role.
- YouTube — when a post includes a video, the media file is uploaded to your YouTube channel through the official YouTube Data API so it can be attached to your content. With your permission we may also read channel analytics (views, reach and engagement) for your growth dashboards. Uploaded videos are then stored by YouTube under YouTube's own terms and policies.
- Asset upload — when a post includes an image or video, the media file is uploaded to Google through the relevant Google API so it can be attached to your Business Profile post or YouTube content.
We do not access your Gmail, Google Drive, personal photos, or activity outside the permissions above.
5.4 Token storage, refresh and removal
- Access tokens we need are stored encrypted at rest on our servers, separate from your profile data.
- Tokens are refreshed automatically only while you keep the connection active.
- You can disconnect a page or account at any time from your Growth Engine settings. Disconnecting revokes access and we delete the associated stored token.
- If you delete your Growth Engine account, all stored tokens for your connected accounts are deleted as part of account deletion (Section 9).
- LinkedIn data retrieved through these scopes is retained only while your connection is active and is deleted when you disconnect your account or remove the connection, in line with LinkedIn's API guidelines.
6. Growth Engine — content and AI drafts
Posts, drafts, calendars, images, videos and the content you supply are stored on our servers to provide the product. When you use the AI content engine, the text or instructions you provide may be processed by one of our AI providers — selected from a set of leading providers that may include OpenAI, Google (Gemini), Anthropic (Claude), DeepSeek and others — solely to generate the draft. The provider used for a given generation is determined by our engine and may change; each provider processes the input under its own terms. Any AI-generated draft remains yours — stored in your account until you delete it or your account is deleted. Uploaded media is kept while your content requires it and removed when you delete it.
7. Growth Engine — analytics snapshots
To show your growth analytics, we periodically store snapshots of public page metrics (followers, reach, engagement) for the pages you connect. Snapshots are linked to your pages, used only for your dashboards, and are removed when the connection is revoked or your account is deleted.
8. WhatsApp API and messaging
We use the official WhatsApp Business API for certain services — for example, delivering the full Free Leads list, answering enquiries and running follow-up workflows (including through our WhatsApp tools). This section explains how that works.
- Number we use: WhatsApp features contact you from the Realty Reach WhatsApp business number, +91 98996 30515.
- What we receive: your WhatsApp profile name and mobile number, the message content you send us, and metadata such as timestamps. We only collect what you choose to send or what is required to start the service you requested.
- What we send: replies, requested leads or follow-up messages related to your enquiry. We only message you where you have opted in (for example by requesting leads on WhatsApp through our forms).
- Opting out: you can stop marketing follow-ups at any time by replying "STOP" to a WhatsApp message from us or by contacting us (Section 12). After opt-out we stop sending and remove your number from that marketing list.
- Processing: WhatsApp services are provided through WhatsApp (Meta). Messages are transmitted and stored via WhatsApp's infrastructure and are governed by WhatsApp's own privacy policy.
- Retention: chat history needed to serve your request or comply with record-keeping is kept only as long as reasonably required; you can request deletion of your conversation data at any time (Section 12).
9. Data sharing and processors
We do not sell personal data. Where a feature requires it, we share the minimum data needed with the providers that make the feature work, acting strictly as processors under our instructions:
- Meta (Facebook/Instagram) — for page authentication, publishing and insights, under Meta's platform terms and this policy.
- WhatsApp (Meta) — WhatsApp Business API messaging, under WhatsApp's own terms and privacy policy.
- LinkedIn — for profile authentication and publishing, under LinkedIn's API terms.
- Google — for the optional Google sign-in, Google Business Profile and YouTube publishing, and to deliver Free Leads samples.
- AI content providers — OpenAI, Google (Gemini), Anthropic (Claude), DeepSeek and similar providers, used to generate AI content drafts from the text you provide; inputs are sent to whichever provider our engine selects for that generation.
- Infrastructure & analytics providers — hosting, email and analytics services used to operate the site.
Because some of these providers operate servers outside India, data may be processed outside India. Any such transfer is made only where it is necessary to provide the service you asked for, in line with the Digital Personal Data Protection Act, 2023 (India).
10. Data retention and deletion
- Enquiry and support details are kept only as long as reasonably needed to serve you.
- Growth Engine account data (name, email, hashed password, plans, billing) is kept while your account is active.
- Deleting your account: you can delete your Growth Engine account at any time from your account settings, or by emailing a deletion request (Section 12). Deleting your account removes your profile, your content, saved drafts, uploaded media, analytics snapshots and all stored connection tokens. We complete deletion of account data within 30 days of your request.
- Revoking a connection: disconnecting a page or social account from Growth Engine settings immediately stops publishing and deletes the stored token for that connection.
- Google data: Google Sign-In, Google Business Profile posts, YouTube uploads/channel data and Free Leads samples are stored only while the connection is active and are deleted when you disconnect or delete your account.
- Meta data deletion: if you used a "Login with Facebook" flow, you can also delete your account and data at any time via the deletion request described in Section 12 — we action it and remove data obtained from Meta through the application. Once you disconnect or delete, we do not retain Meta data.
- Backups and logs are retained only for as long as legally or operationally required and any data in them is purged on the same schedule.
11. Security
We apply reasonable technical and organisational safeguards: HTTPS/encryption in transit everywhere on the site, encryption at rest for stored access tokens, hashed passwords, restricted administrative access to production systems, and regular review of access. No method of transmission or storage is completely secure, but we work to protect the data in our care.
12. Your rights (India — DPDP Act)
Under the Digital Personal Data Protection Act, 2023, you have the right to:
- Access a summary of personal data we hold about you.
- Correct inaccurate or incomplete personal data.
- Erase your personal data or withdraw consent where processing relied on it.
- Grievance redressal through our Grievance Officer (Section 12).
You may also request a copy, correction or deletion of information shared through this website at any time. To raise any data request, contact us or write to the Grievance Officer below.
13. Grievance Officer & deletion requests
For any privacy or DPDP-related grievance, including account or data deletion requests, contact our designated Grievance Officer:
- Contact: Realty Reach
- Email: realtyreachr@gmail.com
- Subject: please write "Grievance" or "Data Deletion Request" depending on the request.
We acknowledge every request within 7 days and resolve it within 30 days. For data deletion, once we verify the request, we delete the data as described in Section 9 and confirm completion to you.
14. Third-party links
Some pages may link to external websites (such as WhatsApp, Meta, LinkedIn or Google). These sites have their own privacy policies, which we encourage you to review.
15. Contact us
Questions about this policy, or any request about your data, can be sent to realtyreachr@gmail.com or through our contact page.