1Introduction
HireReia ("we", "us", "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered lead generation platform and related services (collectively, the "Service").
We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. This policy describes your privacy rights under PIPEDA and how you can exercise them.
2Information We Collect
2.1 Information You Provide Directly
- Account Information: Name, email address, phone number, billing address, and payment information when you register for an account or subscribe to our Service.
- Profile Information: Company name, real estate licence number, service area, agency affiliation, and professional preferences.
- Property Preferences: Property search criteria, preferred locations, price ranges, property types, and other real estate preferences you configure in your account.
- Client Data: Information about your leads and clients that you input into the platform, including their names, contact information, and property preferences.
- Communications: Any information you provide when contacting our support team via email (hello@hirereia.com) or through the platform.
2.2 Information Collected Automatically
- Usage Data: How you interact with the Service, including pages visited, features used, session duration, and navigation patterns.
- Device Information: IP address, browser type and version, operating system, and device type.
- Chatbot Conversations: Transcripts of conversations between your AI chatbot and your website visitors, which may include personal information of prospective leads.
- Cookies and Similar Technologies: We use only essential/functional cookies (session and security tokens) required to operate the Service. We do not use advertising or cross-site tracking cookies. For more details, see Section 11.
3How We Collect Information
- Account Registration: When you create an account and subscribe to the Service.
- Website Forms: When you fill out forms on our website or through the platform.
- Chatbot Widget: Through the AI chatbot embedded on your website, which interacts with your visitors and captures their information with their consent.
- Voice Agent: Through our AI voice agent during phone conversations, with consent obtained at the beginning of each call.
- Communication: When you contact us via email, phone, or other channels.
- Automated Technologies: Through log files as you navigate our website and platform.
4Why We Collect Information
- Providing the Service: To operate, maintain, and deliver the features of our AI-powered lead generation platform.
- Lead Generation and Management: To capture, store, and manage real estate leads on your behalf.
- Communication: To send you service-related announcements, billing notifications, and technical updates. To facilitate automated email follow-up communications with your leads (in compliance with CASL).
- Customer Support: To respond to your inquiries and provide technical support.
- Service Improvement: To analyse usage patterns, troubleshoot issues, and improve the functionality and user experience of the Service.
- Billing: To process payments, manage subscriptions, and send invoices.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes.
We do not use your personal information for purposes other than those identified above without obtaining your additional consent.
5Consent
By using the Service, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. We obtain consent in the following ways:
- Express Consent: By checking consent checkboxes on registration forms and account setup pages.
- Implied Consent: By providing information through the normal use of the Service for purposes consistent with this policy.
- Chat Widget Consent Banner: Our AI chatbot widget displays a consent banner before any conversation begins. Visitors are told they are chatting with an AI assistant and that anything they share may be used to respond to them and follow up about our services. The conversation remains locked until the visitor explicitly accepts the disclosure.
- Voice Agent Consent: Our AI voice agent states at the beginning of each call that conversations may be recorded and information will be used for lead generation purposes.
You may withdraw your consent at any time by contacting us at hello@hirereia.com, subject to legal or contractual restrictions. Withdrawal of consent may affect our ability to provide certain features of the Service.
6EU Residents — GDPR (General Data Protection Regulation)
If you are located in the European Economic Area (EEA), the UK, or Switzerland, the General Data Protection Regulation (GDPR) and related national laws also apply to our processing of your personal data. We process personal data for the lawful bases described in this policy:
- Performance of a contract: where processing is necessary to provide the Service you subscribed to.
- Legitimate interests: for fraud prevention, security, and improving our Service, where those interests are not overridden by your rights.
- Consent: where you have given clear, informed consent (for example, the AI-disclosure consent banner on our chat widget and the AI disclosure at the start of every voice call — a transparency obligation that is also a legal requirement under the EU AI Act's transparency rules in force since 2 August 2026).
- Legal obligation: where we must process data to comply with law.
6.1 Your GDPR Rights
You have the right to:
- Access the personal data we hold about you;
- Rectification of inaccurate data;
- Erasure (the "right to be forgotten") subject to legal retention requirements;
- Restriction of processing in specific circumstances;
- Data portability — receive your data in a machine-readable format;
- Object to processing based on legitimate interests;
- Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
6.2 International Transfers
Your personal data is stored on servers located within Canada. Canada is recognised by the European Commission as providing an adequate level of protection for personal data transferred from the EU/EEA (adequacy decision under Article 45 GDPR). Where any onward transfer occurs, we rely on appropriate safeguards (including Standard Contractual Clauses where applicable).
6.3 Exercising Your Rights
Submit any GDPR request to our Privacy Officer at hello@hirereia.com. We respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority (data protection authority) in the EU/EEA, UK, or Switzerland.
6.4 EU AI Act Transparency
REIA is committed to the EU AI Act's transparency obligations for AI systems that interact with people. Every AI voice call and every chat session discloses that the visitor is speaking with an AI assistant, and human escalation is always available on request. This disclosure is a feature of the Service, not an afterthought.
7Data Storage and Security
7.1 Canadian Data Storage
All personal information collected through the Service is stored on servers located within Canada. We use Canadian-based data centres to ensure your data remains subject to Canadian privacy laws and is protected under PIPEDA. Data is not transferred or stored outside of Canada unless required for a specific service feature, in which case we ensure equivalent protection through contractual agreements.
7.2 Security Measures
We implement reasonable physical, technical, and administrative safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These include:
- Encryption in transit (TLS/SSL) and at rest (AES-256);
- Access controls and role-based permissions;
- Regular security audits and vulnerability assessments;
- Secure data centre infrastructure with 24/7 monitoring;
- Employee training on privacy and security practices.
8Third-Party Disclosure
We may share your personal information with trusted third-party service providers who assist us in operating the Service. These providers are contractually bound to protect your information and use it only for the purposes we specify:
- Stripe: Payment processing (subscription billing). Stripe's privacy practices are governed by their own privacy policy.
- Cal.com: Scheduling and calendar integration for booking appointments with leads.
- Email Delivery Services: Sending automated follow-up emails to leads and service-related communications to users.
- SMS Providers: Sending automated text message follow-ups in compliance with CASL.
We do not use third-party analytics or advertising trackers on our website. We do not sell, trade, or rent your personal information to third parties for their marketing purposes. We will not disclose your information to third parties except as described in this policy or with your explicit consent.
9Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with the Service. Specifically:
- Account Data: Retained for the duration of your subscription plus 30 days after cancellation.
- Client/Lead Data: Retained as long as your account is active. You may delete individual lead records at any time from your dashboard.
- Chatbot Transcripts: Retained for the duration of your subscription unless deleted earlier by you. Widget conversations are only stored after the visitor accepts the consent banner.
- Analytics Data: We do not collect analytics data; no tracking cookies or analytics services are used.
After your account is cancelled, your data will be permanently deleted within 30 days, subject to legal requirements for longer retention (e.g., tax records for billing information).
10Your Access and Correction Rights
Under PIPEDA, you have the right to:
10.1 Access Your Information
You may request access to the personal information we hold about you. We will respond to your request within 30 days. To request access, contact us at hello@hirereia.com or access your account dashboard where much of your information is available directly.
10.2 Correct Your Information
You may correct or update your personal information at any time through your account dashboard settings. For corrections that cannot be made through the dashboard, please contact us and we will make the corrections promptly.
10.3 Export Your Data
You may export your data from the platform at any time through your account settings. We will provide your information in a commonly used, machine-readable format.
10.4 Erasure
You may request deletion of your personal information, subject to legal requirements for retention. We will process your request within 30 days.
11Analytics and Cookies
We do not use advertising cookies, cross-site tracking cookies, or behavioural advertising of any kind. The only cookies we set are strictly necessary for the Service to function:
- Essential Cookies: Session management and security tokens (e.g., CSRF protection, authentication). These are required for the operation of the Service and cannot be disabled without affecting functionality.
Because we set no tracking or analytics cookies, no cookie-consent banner is required when visiting our site. You may configure your browser to refuse cookies, but this may affect the functionality of the Service.
12Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Material changes will be communicated via email at least 30 days before they take effect. We encourage you to review this policy periodically.