Privacy Policy
This Privacy Policy explains how AgenciaSoft / Michalka Summit s.r.o. ("Realtopus", "we", "us") collects, uses and protects personal data in connection with the Realtopus real-estate CRM platform and website (the "Service"). It applies to visitors of our website and to customers who use the Service.
1. Controller and processor roles
For personal data of visitors and account owners (e.g. sign-up and billing data), we act as the data controller. For personal data that our customers store inside their CRM about their own contacts, clients and leads ("Customer Data"), the customer is the controller and we act as a processor, processing such data only on the customer's documented instructions to provide the Service.
2. Data we collect
- Account & billing data: name, work email, company/brokerage name, number of seats, and billing details processed by our payment provider (Stripe). We do not store full card numbers.
- Customer Data: the records you enter into your CRM instance (contacts, listings, deals, documents, messages, calendar items). This is controlled by you.
- Usage & technical data: log data, IP address, device/browser information and basic analytics needed to operate and secure the Service.
- Communications: messages you send us via forms or email.
3. How we use data
- to provide, provision, operate and support the Service (including spinning up your dedicated instance);
- to process payments, manage subscriptions and send service-related communications;
- to secure the Service, prevent abuse and comply with legal obligations;
- to improve the Service. We do not sell personal data.
4. Legal bases (GDPR)
Where the GDPR applies, we process personal data on the bases of: performance of a contract (providing the Service); our legitimate interests (security, improvement, communications); compliance with legal obligations; and consent where required. As a processor of Customer Data, we process it under a data-processing arrangement consistent with Article 28 GDPR.
5. Data isolation and security
Each customer's CRM data is stored in a dedicated, isolated database on its own instance. We apply appropriate technical and organizational measures, including access controls, encryption in transit (HTTPS) and restricted administrative access, to protect personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
6. Sharing and sub-processors
We share personal data only with service providers acting on our behalf, such as our hosting/infrastructure provider and our payment processor (Stripe), and where required by law. These sub-processors are bound to protect the data and use it only to provide their services to us.
7. International transfers
Data may be processed in the European Union and, depending on our sub-processors, in other jurisdictions. Where data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
8. Retention
We retain account and Customer Data for as long as your account is active and for a reasonable period afterward to allow data export, unless a longer period is required by law. You may request export or deletion as described below.
9. Your rights
Subject to applicable law (including the GDPR), you have the right to access, rectify, erase, restrict and port your personal data, to object to certain processing, and to lodge a complaint with a supervisory authority. For Customer Data, please direct requests to the relevant customer (controller); we will assist them as their processor. To exercise rights regarding data for which we are the controller, contact us at the address below.
10. Cookies
Our website and the Service use cookies and similar technologies that are necessary for operation (e.g. authentication and security) and may use limited analytics. You can control cookies through your browser settings.
11. Children
The Service is intended for businesses and is not directed to children. We do not knowingly collect personal data from children.
12. Changes
We may update this Policy from time to time. Material changes will be posted here with an updated date.
13. Contact
Privacy questions and data requests: [email protected] — AgenciaSoft / Michalka Summit s.r.o.