Privacy Notice

1. Who we are

Northkom ("we", "us") is the controller of personal data processed in connection with the RealtyAI service (the "Service"). Contact: hello@northkom.com.

2. Personal data we collect

• Account data: name, email, hashed password, organization.
• Customer content: properties, leads, chat transcripts, configuration you create.
• Usage and telemetry: logs, device identifiers, IP address, browser data.
• Support data: messages and attachments you send us.
• Billing data: handled by Paddle as Merchant of Record (we receive limited billing metadata such as plan, status and customer id).

3. Why we use it

• To create and operate your account and provide the Service (contract).
• To send transactional and service messages (contract / legitimate interest).
• To prevent fraud, abuse and to secure the Service (legitimate interest, legal obligation).
• To improve and develop the Service (legitimate interest).
• To comply with legal obligations (legal obligation).
• For marketing, only where you have consented or where permitted by law.

4. Who we share data with

• Paddle — our Merchant of Record, for checkout, subscription management, payments, tax and invoicing.
• Infrastructure and service providers — hosting, database, email delivery, analytics, AI model providers, customer support tooling.
• Professional advisers — legal, accounting, when necessary.
• Authorities — where required by law.

5. International transfers

Some of our providers are located outside your country. Where data leaves the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Retention

We keep personal data only as long as needed for the purposes above, then delete or anonymize it. Account and content data are retained for the life of your account and for a reasonable period afterwards to handle disputes and legal obligations.

7. Your rights

Depending on your jurisdiction you may have the right to access, correct, delete, restrict, port or object to processing of your personal data, and to withdraw consent. UK/EEA users may complain to a supervisory authority. To exercise rights, email hello@northkom.com; we respond within 1 month.

8. Security

We apply appropriate technical and organizational measures including encryption in transit, access controls and audit logging. No system is perfectly secure; please use a strong, unique password.

9. Cookies

We use strictly necessary cookies to operate the Service (e.g. authentication). If we add analytics or marketing cookies, we will request consent and provide controls.

10. Changes

We may update this notice. Material changes will be communicated through the Service or by email.