Privacy Policy

Last updated: June 10, 2026

This Privacy Policy explains how EstateAITools (“we,” “us,” or “our”), operated by an independent developer based in India, collects, uses, and protects information when you use our tools and services at estateaitools.com. We are committed to minimal data collection, transparency, and your rights under applicable privacy laws including the EU General Data Protection Regulation (GDPR), the India Digital Personal Data Protection Act 2023 (DPDP Act), and the California Consumer Privacy Act (CCPA).

1. Who We Are

EstateAITools is operated by an independent developer based in India who also runs AutoStream AI (an AI automation agency for paid custom work, available at autostreamai.in). EstateAITools provides free AI-powered tools for real estate professionals worldwide and is a separate service from AutoStream AI's paid agency work.

For the purposes of GDPR (Article 13) and the India DPDP Act 2023, the data controller is the operator of EstateAITools, an independent developer based in India. Full data controller identity is available upon request via hello@estateaitools.com for legal compliance purposes.

2. Information We Collect

We collect only what is necessary to operate and improve our service.

2.1 Automatically Collected

When you visit our site, our infrastructure automatically receives:

  • IP address — used for rate limiting and abuse prevention only
  • Browser type and operating system (basic device information)
  • Pages viewed, time of visit, and referrer URL
  • Country of origin (derived from IP for aggregate analytics)

2.2 Information You Provide

When you use our AI tools, you may enter:

  • Property details (location, size, price, features)
  • Buyer or client context (requirements, budget ranges)
  • Free-form text inputs to generate marketing copy or analysis

This input data is processed transiently to generate your output and cached for up to 7 days to serve faster repeat responses. We do not use your inputs to train AI models. We do not store personal information about your clients.

2.3 Cookies and Local Storage

We use three categories of cookies and browser storage:

Essential cookies — always active

Cloudflare sets a short-lived cookie (__cf_bm) to protect our site from bots and malicious traffic. This cookie does not track you across websites and expires within 30 minutes of your session. It cannot be disabled as it is required for basic site protection.

Analytics cookies — consent required

With your explicit consent, Google Analytics 4 sets cookies (_ga, _gid) to understand aggregate usage patterns — which tools are popular, how visitors navigate the site. This data is anonymised and never used to identify individuals. These cookies are only set after you click “Accept all” or enable analytics in “Customize” preferences.

Advertising cookies — consent required, not yet active

We plan to add Google AdSense to support the free service. Advertising cookies will only be set with your explicit consent. Until then, this category is reserved but not used. You can manage this preference via “Privacy Settings” in the footer at any time.

localStorage — consent preferences only

We use your browser's localStorage (not a cookie) to remember your consent preferences. This prevents the cookie banner from showing on every visit. This data stays in your browser and is never sent to our servers or shared with third parties. You can clear it at any time via your browser settings or by clicking “Privacy Settings” in the footer.

3. How We Implement Consent

We use Google Consent Mode v2 to manage analytics and advertising data collection. Here is how it works in plain language:

  • GA4 always loads. Google Analytics 4 initialises on every page visit regardless of your consent choice. This is required for Consent Mode to function.
  • Consent denied. When you decline or have not yet made a choice, GA4 sends only anonymous, cookieless signals. No cookies are set, no personal identifiers are collected, and no individual user tracking occurs. Google uses these signals for aggregate modelling only.
  • Consent granted. When you accept analytics or advertising cookies, GA4 begins full tracking with cookies as described in section 2.3.
  • You can change your mind at any time. Click “Privacy Settings” in the site footer to open the preferences panel and update your choices. Changes take effect immediately on the current page.

This implementation is designed to comply with GDPR (EU/EEA/UK), the India Digital Personal Data Protection Act 2023, and the California Consumer Privacy Act (CCPA). If you are in a region with strict consent requirements, no personal data is collected until you explicitly grant consent.

4. How We Use Information

We use collected information to:

  • Deliver the AI tool outputs you request
  • Cache identical inputs for 7 days to serve faster repeat responses
  • Enforce fair-use rate limits and prevent service abuse
  • Monitor for security incidents and malicious activity
  • Understand aggregate usage patterns to improve our tools (analytics, with consent only)
  • Communicate with you when you contact us by email

We do not sell, rent, or trade your personal information to any third party. We do not use your data for advertising profiling or behavioural targeting.

5. Third-Party Services

We rely on the following third-party services to operate EstateAITools:

  • Cloudflare — Provides our content delivery network (CDN), DDoS protection, and bot mitigation. Your requests pass through Cloudflare's infrastructure. See cloudflare.com/privacypolicy.
  • Google Analytics 4 (consent-conditional) — If you accept analytics cookies, usage data is sent to Google Analytics with Consent Mode v2. Anonymous signals are sent regardless of consent for aggregate modelling. See policies.google.com/privacy.
  • Google AdSense (planned, consent required) — We plan to use Google AdSense to display advertisements that support the free service. AdSense will only activate and set cookies when you grant advertising consent. Until AdSense is live, no advertising data is collected.
  • AI processing services — Tool inputs are sent to third-party AI processing infrastructure to generate outputs. These services process your input transiently and are restricted from using it for any purpose other than generating the requested output. We do not disclose the specific providers to avoid creating a dependency on particular vendors.
  • Zoho Mail — Used to receive and respond to emails sent to hello@estateaitools.com. Email content is processed by Zoho under their privacy policy at zoho.com/privacy.html.

6. Data Retention

  • Cached tool outputs: up to 7 days from generation
  • Server and access logs: up to 30 days
  • Consent preferences (localStorage): stored in your browser until you clear them or update via Privacy Settings
  • Email correspondence: retained for as long as reasonably necessary to resolve your query

IP addresses in logs are stored in aggregate or truncated form after 7 days and are not used for individual user profiling.

7. Your Privacy Rights

Depending on your location, you have the following rights regarding your personal data. To exercise any right, contact hello@estateaitools.com. We will respond within 30 days.

All users

  • Right to withdraw consent — Click “Privacy Settings” in the footer at any time. Withdrawal takes effect immediately.
  • Right to access — Request a description of any personal data we hold about you.
  • Right to deletion — Request deletion of any personal data we hold about you. Email hello@estateaitools.com with your request.
  • Right to object — Object to processing of your data based on legitimate interests.

GDPR (EU/EEA/UK)

  • Right to rectification — request correction of inaccurate data
  • Right to restriction — request limited processing in certain circumstances
  • Right to data portability — receive your data in a portable format
  • Right to lodge a complaint with your local supervisory authority

India DPDP Act 2023

  • Right to correction and erasure of personal data
  • Right to grievance redressal — raise complaints via hello@estateaitools.com
  • Right to nominate another person to exercise rights on your behalf

CCPA (California)

  • Right to know what personal information is collected and how it is used
  • Right to delete personal information
  • Right to opt out of the sale of personal information (we do not sell data)
  • Right to non-discrimination for exercising your privacy rights

Note that as most of our service is anonymous and we collect minimal personal data, some rights may have limited applicability. We will always explain what we can and cannot do in response to a request.

8. Cookie Management

You can manage your cookie and consent preferences at any time:

  • Cookie banner — shown on your first visit. Choose “Accept all,” “Decline,” or “Customize” to set preferences per category.
  • Privacy Settings — link in the site footer, available on every page. Opens the preference panel to update your choices at any time.
  • Browser settings — you can block or delete cookies through your browser's settings. Note that blocking essential cookies may affect site protection, but will not break core functionality.

9. Future Advertising

We plan to add Google AdSense to display advertisements that help support the free service. When AdSense is activated:

  • Advertising cookies will only be set if you have granted advertising consent
  • You can opt out or adjust preferences at any time via Privacy Settings
  • Google AdSense will follow Google's advertising privacy practices
  • We will update this policy when AdSense goes live

Until AdSense is active, no advertising data is collected regardless of your advertising consent preference.

10. Children's Privacy

EstateAITools is not directed at children under the age of 16 (or 13 in the United States). We do not knowingly collect personal information from minors. If you believe a child has provided us with personal information, please contact us at hello@estateaitools.com and we will promptly delete it.

11. International Data Transfers

EstateAITools is operated from India. When you use our service, your data may be processed on infrastructure located in other countries (including the United States and the European Union) through our third-party service providers. These transfers are subject to appropriate contractual safeguards under GDPR Standard Contractual Clauses and equivalent mechanisms.

12. Security

We implement industry-standard technical and organisational measures to protect your data, including TLS encryption in transit, access controls on processing infrastructure, and rate limiting to prevent abuse. No internet transmission is 100% secure; we cannot guarantee absolute security but we take reasonable precautions.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page indicates when changes were last made. Continued use of EstateAITools after changes are posted constitutes acceptance of the updated policy. For material changes, we will make the update prominent on the site.

14. Contact and Grievance Redressal

For any privacy-related questions, requests, or grievances under the India DPDP Act 2023:

This policy is governed by the laws of India, including the Information Technology Act 2000 and the Digital Personal Data Protection Act 2023. Disputes shall be subject to the exclusive jurisdiction of the courts of India.