Privacy Policy

PostPilot.Expert ("we," "us," "our") is operated by Nanotek Consulting Corp., 201-9300 Goreway Dr, Brampton, ON L6P 4N1. This policy explains what information we collect from brokers who use the platform, how we use it, and what choices you have.

PostPilot.Expert is an invite-only network for Ontario real estate brokers to post and match off-market Have/Want listings, and to manage their brokerage's social media presence.

1. Information we collect

Account & profile information. When you're invited to join, we collect your name, email address, phone number, brokerage name, and RECO registration details, via our authentication provider (Clerk).

Have/Want posts and messages. Property details you post, matches the platform generates, and messages you exchange with other brokers through the platform's threads. When two brokers agree to connect on a match, we log the contact-info reveal (who revealed what, to whom, and when) for audit purposes.

Media you upload. Photos and video attached to your posts or used in your social composer, stored via Cloudflare R2.

Social media account data. If you connect a Facebook Page, Instagram Business account, or Meta ad account, we access and store the account/Page identifiers and access tokens needed to publish posts, run ad campaigns, and retrieve performance metrics (impressions, clicks, spend, leads) on your behalf, via Meta's Graph and Marketing APIs. We only request the Meta permissions necessary for these features.

Payment information. Subscription billing is handled by Stripe. We do not store your card number — Stripe processes and stores payment details directly.

Communications data. If you use SMS notifications, messages are sent via Twilio. If you use auto-post-by-email, we receive and parse inbound emails sent to your assigned {slug}@myposts.postpilot.expert address via Resend to create draft posts.

AI-assisted content. When you use the AI composer or other AI tools, the text/content you submit is sent to Anthropic's Claude API to generate suggested captions or content. If you supply your own AI provider key (BYOAI), that key is encrypted at rest and used only to route your requests to your chosen provider instead of ours.

Location data. Property addresses and map interactions use Mapbox to render maps and geocode locations.

Microsite data. If you use a public broker microsite (a subdomain like yourslug.postpilot.expert), the business/listing information you choose to display there is publicly accessible by design.

Usage and device data. Standard technical data (IP address, browser type, pages visited) collected automatically to operate and secure the platform.

2. How we use your information

We use the information above to:

• Operate the Have/Want matching network and facilitate connections between brokers
• Publish content and ads to your connected social accounts at your direction
• Generate AI-assisted content when you request it
• Process subscription payments and manage billing
• Send transactional notifications (SMS, email)
• Maintain audit logs for contact-info reveals and platform integrity
• Secure the platform and prevent fraud or abuse
• Communicate with you about your account or the service

We do not sell your personal information, and we do not use your Have/Want listing content or messages to train AI models.

3. Who we share information with

We share information with the service providers who help us run the platform (our "sub-processors"), each acting under contractual obligations to protect your data.

We also share information with other brokers on the network as intended by the platform's design — e.g., your Have/Want posts are visible to other brokers, and contact details are revealed to a matched broker only after both parties agree.

We may disclose information if required by law, to comply with a valid legal request, or to protect the rights, property, or safety of PostPilot.Expert, our brokers, or the public.

4. International data transfers

Some of our service providers (including Anthropic, Stripe, Twilio, Resend, Cloudflare, and Meta) process data outside Canada, including in the United States. Where this occurs, we rely on those providers' own compliance safeguards for cross-border data transfer.

5. Data retention

We retain your information for as long as your account is active, plus a reasonable period afterward to comply with legal, accounting, or regulatory obligations (including RECO record-keeping requirements where applicable).

6. Your rights and account deletion

You can review and correct your profile information directly in the dashboard. Account deletion is handled by our support team, not self-serve — email support@postpilot.expert to request deletion of your account and associated data, and we'll confirm once it's complete.

You may also contact us to request access to, correction of, or a copy of the personal information we hold about you.

7. Cookies

We use essential cookies (via Clerk) to keep you signed in and to secure your session. We do not currently use third-party advertising or tracking cookies on the platform itself.

8. Children's privacy

PostPilot.Expert is a professional tool for licensed real estate brokers and is not directed at, or knowingly used by, children under 18.

9. Security

We use industry-standard safeguards to protect your information, including encryption of sensitive credentials (such as broker-supplied AI provider keys) at rest. No system is perfectly secure, and we cannot guarantee absolute security.

10. Changes to this policy

We'll update the "Last updated" date above whenever we make material changes to this policy, and show an in-app notice to active brokers whenever this policy is updated.

11. Contact us

Questions about this policy or your data: support@postpilot.expert
General inquiries: info@postpilot.expert