1. Introduction
This Privacy Policy describes how Joseph Sardella, licensed real estate agent (DRE# 02106916), operating as JPS & Company LLC through eXp Realty of Southern California ("we," "us," or "our"), collects, uses, shares, and protects your personal information when you access or use our websites at chatrealty.io and josephsardella.com (collectively, the "Platform"), including our progressive web application (PWA), AI-powered chat features, real estate search tools, customer relationship management (CRM) tools, marketing campaign services, and all related services.
By accessing or using the Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please discontinue use of the Platform immediately.
2. Information We Collect
We collect information in several ways depending on how you interact with our Platform.
2.1 Information You Provide Directly
- Account Registration: Name, email address, phone number, password, and profile photo when you create an account.
- Authentication via Third Parties: If you sign in using Google or Facebook OAuth, we receive your name, email address, and profile picture from those services.
- Real Estate Preferences: Property types, price ranges, preferred locations, buying or selling timeline, and neighborhood interests you provide through search filters, saved searches, or conversations with our AI assistant.
- Contact Information: Names, phone numbers, email addresses, and mailing addresses you provide when requesting information, scheduling appointments, or submitting inquiry forms.
- Communication Content: Messages, emails, SMS texts, and chat conversations you send or receive through the Platform, including conversations with our AI-powered real estate assistant.
- Representation Agreements: Electronic signatures, agreement terms, IP address, and user-agent information captured at the time of signing buyer or seller representation agreements.
- Agent Applications: For real estate professionals applying to join our platform: license number, MLS ID, brokerage affiliation, years of experience, resume, cover letter, and identity verification documents.
- Payment Information: Credit card numbers, billing addresses, and payment details processed through our third-party payment processor Stripe. We do not store your full credit card number on our servers.
- Voice Data: Voice recordings and audio samples if you use our voice training features for AI-powered voicemail campaigns.
- User-Generated Content: Photos, videos, reviews, testimonials, and other content you upload or submit to the Platform.
2.2 Information Collected Automatically
- Device and Browser Information: IP address, browser type and version, operating system, device type (mobile, desktop, tablet), screen resolution, and unique device identifiers.
- Usage Data: Pages viewed, links clicked, search queries, listing views, time spent on pages, referring URLs, and navigation paths through the Platform.
- Location Data: Approximate geographic location derived from your IP address. If you grant permission, precise geolocation data from your device for map-based property searches and radius-based features.
- Cookies and Tracking Technologies: We use cookies, pixels, and similar technologies to maintain your session, remember your preferences (such as theme settings), and collect analytics data. See Section 7 for details.
- Push Notification Data: If you subscribe to push notifications through our PWA, we store your device endpoint, encryption keys, and device type to deliver notifications.
- Property Interaction Data: Listings you favorite, save, compare, dismiss, or view, including the frequency and recency of these interactions.
2.3 Information from Third-Party Sources
- MLS Data: Property listing information including addresses, prices, property characteristics, photos, and sales history from the California Regional Multiple Listing Service (CRMLS) and affiliated MLS associations.
- Public Records: Property ownership records, tax assessments, and transaction history from publicly available sources.
- Contact Enrichment: We may supplement contact information you provide with additional data from third-party data providers to improve accuracy and completeness.
- Market Data: Mortgage rates, economic indicators, and market statistics from the Federal Reserve Economic Data (FRED) service and other financial data providers.
- Business Listings: Neighborhood information, business reviews, and points of interest from services such as Yelp and Google Maps.
3. How We Use Your Information
We use the information we collect for the following purposes:
3.1 Providing Real Estate Services
- Displaying property listings, neighborhood information, and market data relevant to your search criteria.
- Generating Comparative Market Analysis (CMA) reports using current and historical sales data.
- Facilitating communication between you and real estate agents.
- Processing property inquiries, appointment requests, and showing schedules.
- Managing buyer and seller representation agreements.
3.2 AI-Powered Features
- Providing real-time conversational assistance through our AI chat feature, which uses your questions and preferences to deliver relevant property recommendations, market insights, and neighborhood information.
- Generating and personalizing content including property descriptions, market reports, blog articles, and marketing materials.
- Producing AI-generated voicemail scripts and audio for marketing campaigns.
- Your chat conversations may be stored to improve the quality of responses and maintain conversation context across sessions. You may have up to five concurrent conversation threads.
3.3 Marketing and Communications
- Sending transactional emails including account verification, password resets, and appointment confirmations.
- Delivering marketing communications including property alerts, market updates, newsletters, and promotional offers, subject to your communication preferences.
- Executing multi-channel marketing campaigns that may include email, SMS, ringless voicemail, and direct mail on behalf of real estate agents using our platform.
- Running targeted digital advertising campaigns through Google Ads and Meta (Facebook/Instagram) to promote property listings and real estate services.
3.4 Analytics and Improvement
- Analyzing usage patterns to improve Platform functionality, performance, and user experience.
- Monitoring search engine performance and optimizing our content for discoverability.
- Measuring the effectiveness of marketing campaigns and advertising spend.
- Conducting market research and generating aggregate real estate market statistics.
3.5 Security and Compliance
- Verifying your identity for account security and two-factor authentication via SMS.
- Detecting, preventing, and responding to fraud, abuse, or security incidents.
- Complying with legal obligations, including real estate licensing requirements and consumer protection laws.
- Enforcing our Terms of Service and other agreements.
4. How We Share Your Information
We do not sell your personal information to third parties for their own marketing purposes.
We may share your information in the following circumstances:
4.1 Service Providers
We share information with third-party service providers who perform services on our behalf, including:
- Payment Processing: Stripe processes payment transactions and identity verification. Stripe's use of your data is governed by the Stripe Privacy Policy.
- Communications: Twilio (SMS and voice), Resend and SendFox (email delivery) process messages on our behalf.
- Cloud Infrastructure: MongoDB (database hosting on DigitalOcean), Cloudinary (image and video storage and delivery), and Vercel (web application hosting).
- AI Services: Anthropic (Claude AI) and Groq process your chat messages and content generation requests. Conversations may be processed by these providers to generate responses.
- Video Generation: HeyGen, Runway ML, and Kling AI may process media content for marketing video creation.
- Direct Mail: Thanks.io receives recipient names and mailing addresses to print and deliver physical mail pieces on behalf of agents using our platform.
- Voicemail Delivery: Drop Cowboy receives phone numbers and pre-recorded audio to deliver ringless voicemail messages for marketing campaigns.
- Mapping and Geocoding: Google Maps, Mapbox, MapTiler, and OpenCage process location data to provide interactive maps and address lookup services.
- Contact Enrichment: Third-party data providers may receive contact information to supplement and verify accuracy.
These service providers are contractually bound to use your information only for the purposes of providing their services to us and are required to maintain the confidentiality and security of your data.
4.2 Advertising Partners
We share data with advertising platforms to deliver targeted advertising and measure campaign effectiveness:
- Google Analytics and Google Ads: We use Google Analytics (Measurement ID: G-613BBEB2FS) to analyze website traffic and Google Ads to run search and display advertising campaigns. Google may use cookies and tracking technologies subject to Google's Privacy Policy.
- Meta (Facebook/Instagram): We use the Meta Pixel and Conversions API (CAPI) to track website events, build retargeting audiences, and measure advertising performance. Meta's use of this data is governed by Meta's Privacy Policy.
4.3 Real Estate Professionals
If you submit an inquiry, request a showing, or otherwise express interest in a property or real estate services, your contact information and inquiry details may be shared with the listing agent or the real estate professional best suited to assist you.
4.4 Legal Requirements
We may disclose your information when required by law, subpoena, court order, or governmental regulation, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, the safety of others, investigate fraud, or respond to a government request.
4.5 Business Transfers
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email or prominent notice on the Platform of any change in ownership or uses of your personal information.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with our services. Specific retention periods include:
- Account Data: Retained for the duration of your account and for up to 3 years after account closure for legal and compliance purposes.
- Chat Conversations: AI chat conversation history is retained to maintain context and improve service quality. You may request deletion at any time.
- Transaction Records: Real estate transaction records and representation agreements are retained for a minimum of 5 years as required by California real estate regulations.
- Marketing Campaign Data: Campaign execution records, including delivery receipts and engagement metrics, are retained for up to 3 years.
- MLS Listing Data: Property listing data is updated daily and historical sales data is retained for up to 5 years for market analysis purposes.
- Analytics Data: Aggregated and anonymized analytics data may be retained indefinitely.
6. Data Security
We implement industry-standard security measures to protect your personal information, including:
- Encryption of data in transit using TLS/SSL protocols.
- Encryption of sensitive data at rest in our database, including TLS-enabled MongoDB connections.
- Secure password hashing using bcrypt algorithms.
- Two-factor authentication (2FA) via SMS for account security.
- HttpOnly, Secure, and SameSite cookie flags for session management.
- PCI-DSS compliant payment processing through Stripe (we never store full credit card numbers).
- Regular security audits and vulnerability assessments.
- Access controls limiting employee and contractor access to personal data on a need-to-know basis.
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to promptly notifying affected users in the event of a data breach as required by applicable law.
7. Cookies and Tracking Technologies
We use the following cookies and tracking technologies:
7.1 Essential Cookies
Session cookies required for authentication, security, and basic Platform functionality. These cannot be disabled without affecting your ability to use the Platform.
7.2 Preference Cookies
Cookies that remember your settings such as theme preference (light/dark mode), language, and display options.
7.3 Analytics Cookies
Google Analytics cookies that help us understand how visitors interact with the Platform, including page views, session duration, bounce rates, and traffic sources. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
7.4 Advertising Cookies and Pixels
The Meta Pixel and Google Ads conversion tracking tags collect information about your browsing behavior to deliver relevant advertisements and measure campaign performance. You can manage your ad preferences through Facebook Ad Settings and Google Ad Settings.
Most web browsers allow you to control cookies through their settings. However, disabling certain cookies may limit your ability to use some features of the Platform.
8. Your Privacy Rights
8.1 California Residents (CCPA/CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- Right to Know: You may request information about the categories and specific pieces of personal information we have collected, used, disclosed, or sold about you in the past 12 months.
- Right to Delete: You may request deletion of personal information we have collected from you, subject to certain exceptions.
- Right to Correct: You may request correction of inaccurate personal information we maintain about you.
- Right to Opt-Out of Sale/Sharing: We do not sell your personal information. We share certain data with advertising partners (Google, Meta) for targeted advertising purposes. You may opt out of this sharing.
- Right to Limit Use of Sensitive Information: You may limit our use of sensitive personal information to purposes necessary for providing our services.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.
8.2 Other Jurisdictions
Depending on your location, you may have additional rights under applicable data protection laws, including the right to access, rectification, erasure, restriction of processing, data portability, and the right to object to processing.
8.3 Exercising Your Rights
To exercise any of these rights, contact us at help@josephsardella.com or call (760) 333-3676. We will respond to verifiable requests within 45 days. You may also manage certain preferences directly through your account settings.
8.4 Communication Opt-Out
You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email, replying STOP to any marketing SMS, or adjusting your communication preferences in your account settings. Opting out of marketing communications does not affect transactional messages related to your account or active real estate transactions.
9. Children's Privacy
The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at help@josephsardella.com.
10. Third-Party Links and Services
The Platform may contain links to third-party websites, including MLS listing sources, mapping services, social media platforms, and advertising networks. We are not responsible for the privacy practices of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.
11. International Data Transfers
Our Platform is hosted in the United States and our services are primarily directed to users in the United States. If you access the Platform from outside the United States, your information may be transferred to, stored, and processed in the United States where data protection laws may differ from those in your jurisdiction. By using the Platform, you consent to the transfer of your information to the United States.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable laws. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or through a notice on the Platform. Your continued use of the Platform after any changes constitutes your acceptance of the updated Privacy Policy.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: