Privacy Policy

1. Information the App Collects

When you use the Dealor AI app, we collect:

• Your name and mobile phone number, which you provide when you create an account.
• An account identifier we generate internally to link your activity to your account.
• Your phone number is also used to sign you in: we send a one-time SMS code (via Twilio Verify) and never store a password.
• The text of your chat messages and property searches — this is the core of how the app works, since you interact with Dealor by typing or speaking what you're looking for.
• Property and listing details you enter if you list a property for sale (project name, location, price, configuration, description, amenities, and similar fields).
• Properties you save for later.
• Signals about which searches, saves and connections you make, used only to improve the recommendations we show you.
• A push-notification device token, if you allow notifications, so we can send you updates about leads and calls.
• Metadata about "Connect" calls you request or receive — who requested it, its status, and timestamps — but not a recording of the call itself, for ordinary buyer-seller connect calls (see Section 5).
• Basic operational logs (timestamps, request identifiers, error details) needed to run and debug the service.

2. How We Use This Information

• To operate the core app: authenticate you, run your searches, show you and other users' listings, remember what you've saved, and let you connect with a seller or buyer.
• To generate AI responses to your property questions using OpenAI (see Section 4).
• To place and manage phone calls and SMS through Twilio, and to generate spoken call scripts through ElevenLabs (see Sections 4 and 5).
• To send you push notifications about leads, calls and property activity, if enabled, through Firebase Cloud Messaging (see Section 4).
• To personalise the suggestions you see, based only on your own search, save and connection activity — never shared with or influenced by other users' data, and something you can reset at any time in Settings.
• To keep the platform safe: moderating listing text before it becomes visible to others, and reviewing reports of abusive or fraudulent listings.
• To debug and improve the service.

3. Contacts

The current Dealor AI app does not access, read or upload your device contacts. It does not request the contacts permission, and no contact names or phone numbers from your address book are sent to our servers.

A future version of the app may introduce optional contact-related features. If that happens, they will be off by default, will only run if you explicitly enable them and grant the device permission, and this policy will be updated to describe exactly what is collected before any such feature collects contact data. Nothing in this section describes current collection.

4. AI Processing and Other Third-Party Services

Dealor AI is built on a small number of specialised outside services. We do not sell any of the data below, and we do not share it for anyone's advertising.

5. Voice Input and Calls

These are two separate, unrelated things, and we want to be precise about each:

• Voice search input: when you tap the microphone, your device's speech recognition service converts your speech into text. Raw microphone audio is not sent to Dealor's backend or to OpenAI. On iOS, Apple's Speech Recognition service may process microphone audio according to Apple's own privacy practices — that is Apple's processing, separate from and not shared with OpenAI. Dealor receives and stores only the recognized text, as part of your chat or property request.
• Connect calls: when you use "Connect" to reach a buyer or seller, that is a real phone call placed through Twilio, not something processed inside the app. Connect calls are not recorded by Dealor.

6. What We Do Not Collect

• Location: the app does not use GPS or any other form of device location. It has no location permission and no code path that reads your coordinates.
• Photos: the current app does not support uploading or attaching photos to a listing — listings are text and structured details only.
• Email: a consumer Dealor account does not require or store an email address; sign-in is phone-number only.

7. Data Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS/TLS) between the app and our servers and access controls on our infrastructure. No system is completely immune to risk, and we work to reduce it on an ongoing basis.

8. Data Retention

We keep your account data for as long as your account exists, so the app can function (for example, so your chat history and saved properties are there when you come back). If you delete your account (Section 9), your personal data is removed as described there. Some records that are shared with another person (for example, a lead created from your connect request) may be anonymised rather than deleted outright, so the other person's own records stay intact.

9. Account Deletion

You can permanently delete your account and its associated personal data yourself, at any time, directly in the app: Settings → Delete Account, then confirm with a fresh SMS verification code sent to your registered number. This is a self-serve, in-app flow — you do not need to email anyone to delete your account. Deletion removes your account, chats, saved properties, listings and notification settings as described above, and cannot be undone. If you have trouble accessing the app to delete your account, you can reach us at dealor.in/support, and see the dedicated dealor.in/delete-account page for a full walkthrough.

10. Your Rights

Depending on where you live, you may have rights to access, correct, or request a copy of your personal data, in addition to the self-serve deletion in Section 9. You can exercise these rights by reaching us through dealor.in/support, using the "Privacy/Data request" category.

11. Website (dealor.in) Data

Separately from the app, the dealor.in marketing website collects what you submit through its early-access, demo-request and support forms (name, contact details, and your message), plus standard website analytics (pages viewed, campaign attribution) through Google Analytics and/or Meta Pixel, where enabled, and basic request logs. This data is handled by our website backend, hosted on Railway, and is used only to respond to your request and understand site usage.

12. Contact

For any privacy question or request, use our support form and choose the "Privacy/Data request" category. We do not yet publish a direct email address for this.

13. Updates to This Policy

We may update this policy as the app changes. We will update the Effective Date above when we do.