Skip to main content

Legal

Privacy Policy

This policy explains what personal data Retly collects, how it is used to power the product, which third parties are involved, and what controls you have over your information.

Last updated: March 25, 2026Questions? Contact us →

Privacy policies are often written like punishment. This one is still legal, but it should at least be readable. Here's how Retly handles account data, listing data, connected platforms, and the operational data needed to keep the service running.

Plain-English version: We collect the information needed to run your account, generate content, support connected services like Facebook and Stripe, and diagnose problems. We do not sell your personal information.

1. Information We Collect

Information You Provide

  • Account data: Name, email address, and password when you create an account, or profile information from Google or Facebook if you sign in via OAuth
  • Agent profile: Professional details (phone, office name, license number, headshot, logo) you choose to add
  • Social account connections: When you connect a Facebook Page, we store your Facebook Page ID, Page name, and a long-lived Page access token for publishing on your behalf
  • Watched areas: Locations you configure for automated listing monitoring
  • Contact form submissions: Name, email, phone (optional), and message content
  • Payment information: Processed securely by Stripe — we never store your card details

Information Collected Automatically

  • Usage data: Pages viewed, features used, videos or graphics created, and social posts published
  • Device information: Browser type, operating system, and screen resolution
  • Cookies: Session cookies for authentication, guest usage tracking cookie (HttpOnly, signed), and cookie consent preference
  • Error reports: When errors occur, we may collect technical details (stack traces, request metadata) via Sentry or similar error-monitoring services to diagnose and fix issues

Third-Party Data

  • Listing data: Property information from Redfin via RapidAPI, including addresses, prices, photos, and descriptions
  • AI analysis: Photo analysis and marketing description generation via OpenAI Vision
  • Social platform data: Facebook Page metadata and publishing permissions obtained through Meta OAuth

2. How We Use Your Information

  • To generate marketing content (videos, graphics, social posts) based on your inputs
  • To publish content to your connected social media accounts on your behalf when you enable automation
  • To monitor listing activity in your watched areas and generate event-driven content
  • To maintain, diagnose issues with, and improve the Service
  • To process payments and manage subscriptions
  • To send service-related communications (account changes, billing, video completion, render failures)
  • To respond to your support inquiries
  • To enforce our Terms of Service

3. Information Sharing

We do not sell your personal information. We share data only in these circumstances:

  • Service providers: Stripe (payments), OpenAI (AI features), RapidAPI or Redfin (listing data), Meta or Facebook (social publishing), Resend (transactional email), Sentry (error monitoring), Cloudflare R2 (media storage), and infrastructure hosting (Vercel, Railway)
  • Social platforms: When you connect a Facebook Page and enable publishing, we post content to that Page using your authorized access token
  • Legal requirements: When required by law, subpoena, or legal process
  • Business transfers: In connection with a merger, acquisition, or sale of assets

4. Data Storage & Security

Your data is stored on secure servers in the United States. We use industry-standard security measures including encrypted passwords (scrypt hashing with unique salts), signed cookies, and HTTPS encryption. However, no system is 100% secure, and we cannot guarantee absolute security.

5. Your Rights

You have the right to:

  • Access your personal data through your account settings
  • Correct inaccurate information in your profile
  • Deleteyour account and all associated data directly from Settings → Data & Privacy (GDPR Art. 17 — Right to Erasure)
  • Exporta complete copy of your personal data as JSON from Settings → Data & Privacy (GDPR Art. 20 — Right to Portability)
  • Disconnect connected social accounts at any time from your Settings page
  • Opt out of non-essential communications via notification preferences in Settings

6. Cookies

We use the following cookies:

  • Session cookie: Required for authentication (NextAuth.js JWT)
  • CSRF token cookie: Required for security (prevents cross-site request forgery)
  • Guest usage cookie: Tracks free video creation count (HttpOnly, signed, 30-day expiry)
  • Cookie consent: Remembers your cookie preferences (localStorage)

You can accept or decline non-essential cookies via the cookie banner shown on your first visit. We do not currently use third-party advertising cookies. If we add analytics tracking (for example, Google Analytics), we will update this policy accordingly.

7. Children's Privacy

Retly is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

8. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users of material changes via email or in-app notification. The “Last updated” date at the top indicates the most recent revision.

9. Contact Us

For privacy-related questions or data requests, contact us at privacy@retly.ai or through our contact page.