Privacy Policy

Reeltora Ads Engine ("Reeltora", "we", "us", or "our") provides software that helps real estate agents and brokerages create, manage, and publish digital advertising campaigns — including Facebook and Instagram lead ads through Meta Platforms, Inc. ("Meta"). This Privacy Policy explains what information we collect, how we use it, and your choices.

By using Reeltora Ads Engine (the "Service"), you agree to this Privacy Policy. If you do not agree, do not use the Service.

2.1 Account information

When you create an account we collect your name, email address, password (stored hashed), and optional brokerage details such as license number, agent name, brand assets, and contact information.

2.2 Campaign and listing data

We collect information you provide about your real estate listings and campaigns: property addresses, listing prices, descriptions, photos, target cities, audiences, budgets, ad copy, and lead-form questions.

2.3 Meta (Facebook & Instagram) integration data

If you connect a Meta account to Reeltora we receive and store:

• Your Meta user ID and a long-lived access token (encrypted at rest using AES-GCM).
• The list of Meta ad accounts and Facebook Pages you authorize.
• Page access tokens for Pages you select (encrypted at rest).
• Linked Instagram business account IDs.
• Campaign, ad set, ad, creative, and lead-form IDs we create on your behalf.
• Reporting metrics (spend, impressions, clicks, leads, cost per lead).
• Lead form submissions delivered to us through Meta's Lead Ads webhook, including any contact details (e.g., name, email, phone) and answers a prospect provides through your lead form.

We only request the Meta permissions necessary to operate the Service (for example: ads_management, pages_show_list,pages_manage_ads, pages_read_engagement,leads_retrieval, and business_management).

2.4 Payment information

Subscription and add-on payments are processed by Stripe. We do not store full card numbers. We retain Stripe customer IDs, subscription status, and basic billing history to operate the Service.

2.5 Usage and device data

We collect logs (IP address, user agent, timestamps, request paths, error traces) and product analytics (feature usage, AI generation counts) to operate, secure, and improve the Service.

2.6 AI-generated content

When you use AI features we send the prompts, listing details, and selected photos you provide to third-party AI providers (e.g., Google Gemini, OpenAI) through the Lovable AI Gateway. We store the resulting text, images, and metadata in our database to display them to you.

• To operate, maintain, and improve the Service.
• To create, publish, pause, and report on advertising campaigns on Meta on your behalf.
• To deliver leads captured through Meta Lead Ads to your account.
• To generate ad copy, creatives, and launch packets using AI providers.
• To process payments and manage subscriptions.
• To detect, prevent, and address fraud, abuse, and security incidents.
• To comply with legal obligations, including fair-housing advertising rules.
• To communicate with you about your account, billing, updates, and support.

When a prospect submits a Meta Lead Ad created through Reeltora, the prospect's information is sent by Meta to your account. You are the controller of that lead data and are responsible for handling it in accordance with applicable laws, the disclosures in your lead form, and your own privacy policy. We process the lead data on your behalf to display it inside Reeltora and, where applicable, to forward it to systems you connect.

All real-estate ads published through Reeltora are submitted to Meta with the HOUSING special ad category applied, which restricts targeting options in compliance with the U.S. Fair Housing Act and Meta's policies.

We share information only as described below:

• Meta Platforms, Inc. — to create and manage the campaigns, ad sets, ads, creatives, and lead forms you ask us to publish.
• AI providers (e.g., Google, OpenAI) through the Lovable AI Gateway — to generate ad copy, images, and recommendations.
• Stripe — to process payments and manage subscriptions.
• Infrastructure providers (e.g., Lovable Cloud / Supabase, Cloudflare) — to host the Service, store data, and run server functions.
• Legal and safety — to comply with law, enforce our Terms, investigate fraud or abuse, or protect rights, property, or safety.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets.

We do not sell your personal information, and we do not share your lead data with other Reeltora customers.

We retain account, campaign, lead, and billing data for as long as your account is active and as needed to provide the Service. You may request deletion at any time (see Section 9). Some records may be retained for legal, tax, fraud prevention, or backup purposes.

Meta access tokens and page access tokens are stored encrypted at rest and are deleted when you disconnect your Meta account or delete your account.

We use administrative, technical, and physical safeguards to protect your information, including TLS in transit, encryption at rest for sensitive tokens (AES-GCM), Row-Level Security on our database, scoped access roles, and webhook signature verification. No system is 100% secure; you use the Service at your own risk.

Reeltora is operated from the United States. By using the Service you consent to the transfer and processing of your information in the United States and other countries where our service providers operate.

• Access, correction, deletion. You can update most of your information in the app, or contact us to request access, correction, or deletion of your personal data.
• Disconnect Meta. You can disconnect your Meta account from Settings at any time, which deletes the stored tokens.
• Cancel subscription. You can cancel your subscription from the Billing page or your Stripe customer portal.
• Marketing emails. You can opt out of non-essential emails using the unsubscribe link.

Residents of California, the EU/EEA, the UK, and other jurisdictions may have additional rights (e.g., to know, delete, correct, restrict, or port their data, and to object to processing). Contact us to exercise these rights.

The Service is not directed to children under 16, and we do not knowingly collect personal information from children.

The Service links to and integrates with third-party services (Meta, Stripe, AI providers, hosting providers). Their use of your information is governed by their own privacy policies.

We may update this Privacy Policy from time to time. If we make material changes we will notify you by email or through the Service. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

Questions or requests? Contact us at support@reeltoraai.com.