Effective Date: February 5, 2026 · Last Updated: August 24, 2026
This platform is operated by Real Estate AI, LLC("we," "us," or "our"), a California limited liability company doing business as AutoTC™ (and also as TurboBroker and TinyTC), available at autotc.ai, turbobroker.ai, and tinytc.ai. Real Estate AI, LLC is the entity responsible for your personal information (the data controller). This Privacy Policy describes how we collect, use, store, disclose, and protect your personal information when you use our AI-powered transaction coordination platform designed for licensed real estate professionals and self-represented principals.
This policy applies to all users of our services, including account holders, transaction parties whose information appears in uploaded documents, and any other individuals whose personal information we process in connection with our services.
By accessing or using AutoTC™, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not use our services.
We collect the following categories of information to provide and improve our services:
Your name, email address, phone number, real estate license number and issuing jurisdiction, and brokerage information provided during registration and account setup.
A tokenized payment-method reference and billing details, along with your wallet balance, top-ups, metered usage charges, and other billing records. Your card is tokenized and stored by our payment processor to enable wallet top-ups and automatic replenishment; we do not store full card numbers.
Property addresses, purchase prices, contract dates, contingency periods, escrow details, and party information associated with your real estate transactions.
PDFs of purchase agreements, listing agreements, counter offers, disclosures, and other documents you upload to the platform.
Information about how you interact with the platform, including feature usage patterns, pages visited, and actions taken within the application.
Messages sent through our platform via SMS and voice services, and emails sent on your behalf or to you, including message content, timestamps, and delivery status.
Live calls are processed by approved voice and AI providers in real time. We collect call metadata such as duration, timestamps, and caller identification. Voicemail and other recording-enabled flows may also collect audio, a recording URL, a transcript, and a summary. See Section 5 for details.
Queries and instructions you provide to our AI assistant, along with AI-generated responses, summaries, and extracted data produced by our system.
When you create or save custom form field configurations in the Form Builder, we collect structural layout data such as field positions, dimensions, types, signer-role assignments, and the account or template identifiers needed to manage the configuration. Before layout patterns are reused across accounts, we seek to exclude document content, transaction details, client information, and other personal information. Metadata that remains linkable to an account, person, transaction, or document is handled under this Privacy Policy.
When a listing agent shares a public disclosure link, third-party viewers (such as buyer agents and prospective buyers) may voluntarily register to view disclosure documents. Registration data includes name, email address, phone number, brokerage name, and viewer type. We also collect IP addresses and track which documents each viewer opens. This data is shared with the listing agent who created the disclosure package and is retained with the transaction.
If you configure a custom email signature, we store the structured signature data (name, title, brokerage, phone, links) associated with your profile. If you generate a custom bot avatar (Team plan), we store the AI-generated avatar image in your account's storage. Avatar generation is subject to a 14-day cooldown period.
We collect property addresses associated with your transactions. We do not collect precise geolocation data from your device.
We use the information we collect for the following purposes:
AutoTC™ uses AI language models and automated processing technology to provide its services. We believe in transparency about how these systems work and your rights regarding automated decisions.
Routine status updates and reminders may be sent automatically when allowed by the applicable state scope, recipient consent, account configuration, and platform safeguards. Sensitive content, licensed activity, negotiations, contract changes, and other protected subjects are held for licensed-user review or blocked. The licensed user and responsible broker remain responsible for supervising the workflow and correcting errors.
You may request human review of an automated outcome or ask support to help restrict automated communications. To request review of a specific outcome, contact us at support@autotc.ai.
AutoTC™ provides AI-powered voice call capabilities as part of its transaction coordination services. This section discloses our practices regarding voice call processing.
Live Calls and Recorded Messages
AutoTC™ does not intentionally create a recording of an ordinary live AI conversation. Live audio is streamed to approved providers for real-time processing. Voicemail and other recording-enabled features may store audio, a provider recording URL, a transcript, and a summary so the message can be delivered and handled. Approved providers may retain limited security or abuse-monitoring records under their enterprise data practices unless a zero-retention control applies.
We take data storage and retention seriously, particularly given the regulatory requirements of the real estate industry.
| Data Type | Retention Period |
|---|---|
| Transaction documents | While your account is open, unless you delete them; limited legal, security, billing, dispute, and legal-hold exceptions may apply |
| Archived transactions | Same as transaction documents |
| Communication logs (SMS/email) | Retained with the related transaction while the account is open, subject to deletion rights and applicable exceptions |
| Voice call metadata (duration, timestamps) | Retained with the related transaction (same as communication logs) |
| AI response logs | Retained with the related transaction |
| Disclosure package viewer data | Same as transaction documents (retained with the transaction) |
| Transaction compliance records | Retained per applicable regulatory requirements; may persist after transaction deletion |
| Financial & billing records (wallet ledger, payments, charges) | For periods reasonably necessary or required for accounting, tax, payment disputes, fraud prevention, and applicable law |
| Webhook and system logs | For periods reasonably necessary for security, fraud prevention, troubleshooting, service operation, and applicable legal obligations |
| Error logs | For periods reasonably necessary to diagnose errors, protect the Service, and meet applicable legal obligations, including provider-configured retention periods |
Real estate, tax, brokerage, and professional record-retention duties vary by jurisdiction, transaction, and user role. AutoTC is a software provider and does not assume a broker's or licensee's record-keeping duty. You are responsible for identifying the period that applies to you and for maintaining independent copies. Our decision to preserve files while an account is open does not represent a legal opinion about the period you must retain them.
We use cloud infrastructure that supports encryption in transit and at rest for application, database, and document storage, together with account and role-based access controls. No security measure eliminates all risk.
We do not delete your transaction files merely because an account goes inactive or is suspended. They remain associated with the open account unless you delete them or request account closure, subject to the limited exceptions above. When an account stays inactive, an idle dedicated phone number may be released to stop ongoing charges.
Dedicated phone number release: after advance notice, an idle dedicated number may be deactivated or reassigned to stop ongoing carrier charges. Timing may depend on account status, funding, inactivity, and provider requirements. Releasing a number does not delete stored transaction files, and a returning account may receive a different number.
Your responsibility:AutoTC™ is a software tool, not a licensed broker, and does not assume your statutory record-keeping obligations. Download and independently store the records your regulator, brokerage, contract, tax obligations, and applicable law require you to keep.
You may request deletion of an entire transaction, subject to applicable exceptions and legal holds. When permitted, deletion removes the active workspace and document PDFs from AutoTC systems; file removal may finish asynchronously through a durable deletion queue. Removing one document may preserve related signed copies or communication evidence until the transaction itself is deleted. After deletion, we retain only limited records reasonably necessary and permitted by law for security, billing, fraud prevention, disputes, legal holds, and compliance, for applicable periods. Copies already stored outside AutoTC, including in a connected Google Drive, remain under your control and are not changed by AutoTC deletion. Privacy-rights requests are honored subject to applicable exceptions. You remain responsible for your own professional record-keeping obligations.
We use the following categories of third-party service providers to operate our platform. We limit disclosures to what is reasonably necessary for the provider's function and use contractual, account-level, or provider terms intended to protect the data, as applicable:
We do not sell, rent, or trade your personal information. Service providers process data only to perform operational functions and may not use mobile information, opt-in data, or SMS consent for their own marketing. When a disclosure-package viewer registers, the viewer information is shared with the listing agent who created the package and may be synced to that agent's connected CRM as a user-directed integration. Form Builder layout metadata is processed and stored internally and is not shared with AI providers for model training.
We do not sell your personal information as defined under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). We do not share your personal information for cross-context behavioral advertising purposes.
Because we do not sell personal information or share it for cross-context behavioral advertising, we do not currently offer a separate sale-or-sharing opt-out toggle. You may contact us to confirm your preferences or exercise any privacy right.
The CCPA/CPRA recognizes browser-based Global Privacy Control (GPC) signals as a valid opt-out of the sale or sharing of personal information. Because we do not sell or share personal information for any user, the outcome a GPC signal requests is already our universal default: your data is not sold or shared whether or not your browser transmits the signal.
AutoTC™ sends communications through multiple channels on behalf of our users. We are committed to respecting the communication preferences of all recipients.
The first supported outbound communication to a new party is designed to identify that it was generated or assisted by an AI system acting for the licensed agent or self-represented principal managing the transaction. Voice workflows are designed to identify the AI assistant at the beginning of the call and identify the responsible account holder. Users must follow any additional bot-disclosure, recording-consent, advertising, or communication rule that applies to the jurisdiction and workflow.
Depending on where you live and whether an applicable privacy law covers our processing, you may have some or all of the following rights under the CCPA/CPRA or another state privacy law:
You have the right to request information about the categories and specific pieces of personal information we have collected about you, the purposes for collection, the sources of collection, and the categories of third parties with whom we share it.
You may request deletion of personal information we maintain about you. We honor requests subject to exceptions permitted or required by applicable privacy law, including limited retention for security, billing, fraud prevention, disputes, legal holds, and compliance. Your professional record-keeping duty does not automatically become AutoTC's duty.
You have the right to request that we correct inaccurate personal information that we maintain about you. You may also correct certain information directly through your account settings.
Where applicable law provides this right, you may request a copy of eligible personal information in a portable, machine-readable format. Contact support for an account-level export; individual transaction documents can be downloaded where available in the Service.
You have the right to limit our use and disclosure of your sensitive personal information to only what is necessary to provide the services you have requested. To exercise this right, contact us at the address below.
You have the right to opt out of the sale of your personal information and the sharing of your personal information for cross-context behavioral advertising. We do not engage in either practice.
We will not discriminate against you for exercising any of your privacy rights. You will not receive different pricing, service quality, or access levels for exercising your rights.
You have the right to opt out of automated decision-making, including profiling, that produces legal or similarly significant effects. You may request human review of automated decisions by contacting us. See Section 4 for details.
To exercise any of these rights, please contact us at support@autotc.ai. We respond within the period required by applicable law and will notify you if the law permits and we need an extension.
We will verify your identity before processing a request by confirming account credentials or, for non-account holders, matching information you provide against information we already maintain. We limit request frequency only where applicable law expressly permits it, such as certain access requests, and do not apply that limit to rights for which the law does not allow one.
Applicable state law may also provide a right to appeal our response, use an authorized agent, obtain information about certain profiling, or delete eligible derived data. We will explain any applicable appeal process when responding to your request.
Under the CCPA/CPRA, "sensitive personal information" includes Social Security numbers, financial account numbers, precise geolocation, racial or ethnic origin, religious beliefs, biometric data, health information, and contents of private communications. AutoTC™ does not ask users to provide Social Security numbers, health information, or biometric identifiers for ordinary account setup, but such information may appear in documents or communications users choose to upload. Do not upload unnecessary sensitive data and redact it when appropriate. We use sensitive information only as needed to provide, secure, and support the requested service or comply with law, and not for behavioral advertising.
Third-party viewers who registered to view disclosure packages (buyer agents, prospective buyers) may request deletion of their viewer data (name, email, phone, brokerage, IP address, and viewing history) by contacting us at support@autotc.ai. We respond within the period required by applicable law and may use any legally permitted extension. We may retain information where needed for an active transaction, security, fraud prevention, legal compliance, or the establishment, exercise, or defense of legal claims.
If you are a sub-user (agent or assistant) on a Team (T2) account, you retain the same privacy rights described in this section with respect to your personal data. Your account administrator may view roster information such as your name, email address, role, office, license status, and account activity, and may access team transaction data and communication logs for business oversight. Administrators do not receive your password, and individual privacy or notification preferences remain subject to the controls shown in your profile unless law or an authorized support process requires otherwise. Upon departure from a shared account, you may request a data export of your personal information.
The following table describes the categories of personal information we collect, the sources from which we collect it, the business purposes for collection, and the categories of third parties with whom we may share it:
| Category | Sources | Business Purpose | Third Parties |
|---|---|---|---|
| Identifiers (name, email, phone, real estate license) | Directly from you; from uploaded documents | Account creation, communication, transaction coordination | Communication service providers, electronic signature providers |
| Professional information (license, brokerage) | Directly from you | Account verification, compliance | License authorities, public-search and approved verification providers |
| Financial information (in documents) | Uploaded documents | Transaction coordination, document extraction | AI service providers (for extraction), cloud infrastructure providers |
| Payment & billing information (tokenized payment method, wallet ledger, charges) | You; your billing activity | Payments, wallet top-ups, auto-replenishment, metered billing | Payment processing service providers |
| Communications data (SMS, email, voice) | Platform communications | Transaction coordination, compliance, record-keeping | Communication service providers, AI service providers |
| Voice call metadata (duration, timestamps, caller ID) | Voice calls through platform | Transaction coordination, compliance record-keeping | Communication service providers |
| Usage / interaction data | Automatically collected | Service improvement, security | Cloud infrastructure providers |
| Form layout metadata (field coordinates, types, roles) | User-created form configurations in Form Builder | Improve document processing accuracy for all users | Cloud infrastructure providers; no external model-training use |
| Disclosure-package viewer data (name, contact details, brokerage, IP, viewing activity) | Directly from the viewer; automatically from portal use | Provide document access, security, audit history, and user-directed lead follow-up | Listing agent and the agent's connected CRM provider |
| Geolocation (property addresses only) | Uploaded documents; directly from you | Transaction coordination, NHD report ordering | Natural hazard disclosure providers |
We have not sold personal information in the preceding 12 months. We do not share personal information for cross-context behavioral advertising.
In accordance with the Connecticut Data Privacy Act (CTDPA) and other applicable state laws:
We do not use your personal data to train large language models or other generative AI systems.Documents, communications, transaction data, and other personal information may be processed by approved AI providers to deliver requested features such as extraction, drafting, voice, and task generation. We use business/API offerings and controls under which customer data is not used to train the provider's models by default. Limited security, abuse-monitoring, or service logs may still be retained under the provider's terms unless a zero-retention control applies.
Separately, when you save form field configurations in the Form Builder, de-identified structural metadata (field coordinates, types, and role assignments) may be used to improve our document processing accuracy. This metadata does not contain personal information, document content, or transaction details, and its use is distinct from AI model training.
We implement industry-standard security measures to protect your information:
In the event of a data breach involving your personal information, we will notify affected individuals without unreasonable delay and within the timing required by applicable state or federal law. Where required, we will also notify the applicable attorney general or other regulatory authority.
Our breach notification will include:
Notifications will be provided in the most expedient time possible and without unreasonable delay, consistent with any legitimate needs of law enforcement and any measures necessary to determine the scope of the breach and restore the integrity of our systems.
AutoTC™ is operated from the United States, and our primary application and database infrastructure is hosted in the United States. Approved service providers may process data in other locations where they operate, subject to their contractual safeguards and applicable law.
If you access the Service from outside the United States, your information may be transferred to and processed in the United States and other provider locations, where privacy laws may differ from those in your residence. We use appropriate contractual or legal transfer safeguards where required.
AutoTC™ accounts are designed for licensed real estate professionals and self-represented principals who are at least 18. We do not knowingly permit a child to create an account. If we learn that a child created an account or directly submitted personal information without appropriate authorization, we will take appropriate action, including restricting the account or deleting eligible information when legally permitted.
In some cases, information about minors may appear in uploaded real estate documents (for example, as trust beneficiaries or dependents named in transaction paperwork). Such information is processed only for the purpose of transaction coordination and is subject to the same security protections and retention policies as all other data on the platform. We do not use information about minors for any marketing or profiling purpose.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by posting the updated policy on our website, updating the "Last Updated" date at the top of this page, and, where required by applicable law, sending you a notification via email or in-app alert. We encourage you to review this policy periodically.
Last updated: August 24, 2026.
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or need to submit a complaint, please contact us:
AutoTC™ Privacy Team
Email: support@autotc.ai
Real Estate AI, LLC, 2108 N St STE N, Sacramento, CA 95816
We respond to verifiable consumer requests within the period required by applicable law and will notify you if the law permits and we need an extension. For urgent privacy concerns, please include "URGENT" in your email subject line.