Template — review with legal counsel before launch. This document is placeholder scaffolding for a SaaS that handles real-estate transaction documents and personal information. It is not legal advice and must be finalized by a qualified attorney before it is relied upon.

Privacy Policy

[Last updated: __________, 2026]

This Privacy Policy explains how Orcastrator (“we,” “us,” or “our”) collects, uses, and protects information when you use our service (the “Service”). We handle real-estate transaction documents and personal information, and we take that responsibility seriously.

1. Information We Collect

Account information. Name, email address, role (e.g., agent), brokerage or organization details, and authentication data used to create and secure your account.
Uploaded documents and transaction data. Files, contracts, disclosures, important dates, and related records you or authorized parties upload. These may contain personal information (PII) about you and third parties such as clients or counterparties.
Usage information. Log data, device and browser information, and activity within the Service used to operate, secure, and improve it.

2. How We Use Information

To provide, maintain, and secure the Service;
to route documents and updates between the authorized parties in a transaction, according to the permissions you configure;
to communicate with you about your account and the Service;
to process subscriptions and billing;
to detect, prevent, and respond to fraud, abuse, and security incidents; and
to comply with legal obligations.

3. Storage and Processing

Your data, including uploaded documents, is stored and processed using Supabase, our hosting and database provider, and other infrastructure subprocessors necessary to operate the Service. We rely on access controls and row-level security to limit access to authorized parties. [Confirm data region, encryption, and subprocessor list with counsel.]

4. How Information Is Shared

We do not sell your personal information. Documents and transaction data are shared only with the parties you authorize and only as required to route a transaction through the Service. We may share information with service providers who process data on our behalf under appropriate confidentiality and data-protection terms, or where required by law or to protect rights and safety.

5. Data Retention

We retain account and transaction information for as long as your account is active or as needed to provide the Service, and thereafter as required to comply with legal, accounting, or record-keeping obligations applicable to real-estate transactions. [Specify retention periods with counsel.] You may request deletion subject to those obligations.

6. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the details below. We will respond as required by applicable law. Because the Service holds documents on behalf of multiple parties, some requests may require coordination with other parties to a transaction.

7. Security

We use administrative, technical, and organizational measures designed to protect your information. No system is perfectly secure, however, and we cannot guarantee absolute security. Please notify us promptly if you believe your account or data has been compromised.

8. Children’s Privacy

The Service is not directed to children and is intended for use by adults in a professional real-estate context.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

10. Contact

For privacy questions or requests, contact us at [privacy@orcastrator.example — replace with real contact].