Privacy at RealPilot

Updated October 9, 2026. This describes the current implementation; service configuration must be reviewed before public launch.

Your account

We store your name, email address, salted password hash, favorite tools and tool access records on the server. Sign-in uses an HTTP-only authentication cookie. A separate account identifier helps organize tool data in your browser.

Tool records and backups

Working records are stored in this browser under your account and tool. They do not automatically sync. When you select Save cloud backup, a snapshot of that tool’s local storage is saved with your account. Photos in IndexedDB, uploaded files and downloaded PDFs are not included. Restoring replaces the current tool’s browser snapshot after confirmation.

Property photos and paid results

Virtual Staging uploads photos only through its existing consent and verification flow. Generation uses the configured image provider. Generated result retrieval and checkout follow the studio’s disclosed windows; keep purchased files in your own storage. Provider and retention settings must be confirmed by the operator before the service is enabled.

Payments

When configured, paid tools use their payment providers. RealPilot does not collect card numbers. Individual subscription access is granted by verified provider updates, rather than a browser success message.

Client testimonials

When a client submits a testimonial through your link, RealPilot stores their name, role, rating and text. It is shown publicly only after you approve it and the client has agreed to be quoted. You can hide or delete any testimonial at any time.

Transactions

Client names, property addresses, closing dates, milestone dates and notes you enter in the transaction tracker are stored in your account. You can edit or delete them at any time.

AI assistant

Messages you send to the RealPilot assistant are sent to OpenAI to create a reply. RealPilot keeps the conversation only in your open page and does not save it on the server. Each request is sent with storage turned off. Do not enter passwords, card numbers, or government ID numbers in the assistant.

Mortgage broker referrals

The mortgage calculators can show a form for asking a licensed mortgage brokerage to contact you. It appears only where referrals are offered, and the calculators work without it. If you send it, RealPilot stores your name, email, phone and province, and a record of your consent: the wording you were shown, which boxes you ticked, the time and your IP address. We send only your name, email and phone to the brokerage named on the form, which pays RealPilot a referral fee shown on the form. Nothing you enter in a calculator is sent, and RealPilot does not give mortgage advice. We keep referral records to show the consent you gave; use the contact page to ask us to delete yours. The brokerage keeps its own copy under its privacy policy, and you can withdraw consent to its emails at any time by telling the brokerage. If you send the form again within 30 days, we do not pass your details on a second time. We also count how often the form is shown on each page, without recording anything about you.

Shared computers

Sign out after use. Browser storage is not an encrypted vault. Other people with access to the same browser profile can inspect locally stored information; use a private profile for sensitive records.

Questions and deletion

Use the contact page to request account and server-backup deletion. Individual tools also provide their own local record controls. Automated account deletion and email password recovery are not yet available.