Trust & data
Privacy policy
This policy explains what SeemsR handles, why it is needed, who sees it, and the specific data flows behind groups and matching, agency teams and the agency control of member accounts, public links, files, chat, WhatsApp, AI features, plans and the Google and Zoom integrations.
Last updated: November 7, 2026
Who we are
SeemsR is operated by Open Gate Intelligence for Real Estate Marketing (LLC), 8 Ibn Hani Al Andalusi St., off El Tayaran St., 1st floor, Apt 2, Nasr City, Cairo, Egypt. Open Gate Intelligence for Real Estate Marketing (LLC) is the data controller for the personal information described in this policy. Contact: contact@opengate-intelligence.com.
For the people you record in your CRM (your clients, owners and leads), you decide what you keep and why, and SeemsR processes that information on your behalf to run the service.
Broker directory and connections
SeemsR includes a directory in which signed-in brokers can find each other by name or company and ask to connect. A connection is mutual: one broker sends a request, the other accepts or declines it, and either can remove it later.
- What other brokers see on your card: your name, professional title, company, profile photo, the areas you serve, your specialties, how long you have been in the trade, since when you use SeemsR, the number of connections you have in common, and your activity as ranges only (no active property or request, 1–9, 10–49, 50+).
- What is never shown: the number of your contacts, the exact number of your properties or requests, and your contacts, requests and properties themselves.
- Your phone number and email address are not on this card, even for your connections: they are shown only on your business card (see below). Your description is shown to a broker who opens your profile.
- You appear in the broker search by default. The “Appear in broker search” switch in Settings turns this off at any time. It removes you from search results only: your connections can still find you, people who share a group or a conversation with you can still be suggested your profile, and matching is not affected.
- Private messages can be started only between connected brokers, or from a match. You can block a broker: you then no longer find, suggest or contact each other. You can also report a profile; reports are read only by the SeemsR team.
Your business card and contact details
Your account has two email addresses. Your sign-in email is used only to sign in and for messages about your account. Your contact email is the one shown on your business card; until you set another, it is your sign-in email.
- Your phone number and contact email reach other people only through your business card, at its own link. Anyone who has the link can open it. You can turn the link off or replace it in your profile; it then stops working for everyone who has it.
- The broker directory, your connections, your groups and matches never receive your phone number or email address directly.
- In a private conversation you can share your contact: the other broker then gets a link to your card that works for that conversation only, and stops as soon as either of you withdraws it or blocks the other. Your card link must be on to share it.
- Public property pages show only a button to your business card, never your phone number or email address themselves.
Matching between brokers
SeemsR compares your open requests and available properties with those of other brokers to surface possible deals: with your connections and the records shared as cards in your groups (“My network”), and with every SeemsR broker (“Market”). Your personal requests and properties take part in this matching by default; you can limit it to a selection or turn it off in the matching settings.
On the Market a match is anonymous: it tells which criteria are compatible, not who you are, and never your client's name, phone number, exact budget or address. Names are revealed only when the other broker accepts a conversation.
With your network (your connections, and the members of your groups for a record shared as a card) a match shows your name, professional title, company and profile photo by default, and how each criterion compares, gaps included: for example a price 6% above the budget, or one bedroom more than asked. It never shows the record itself: no title, price, address, description, file or client information. A broker of your network can message you about the match.
In both cases a record's details, files or client contact are shared only when its owner grants them in the conversation, one by one, and a grant can be withdrawn. The two brokers of a match share its status (contacted, visit, offer, deal or dismissed) with the name of who changed it when they are named to each other; nobody else sees it.
Agency teams
A group's owner can turn it into an agency team. Nothing of a member is visible to the managers until that member agrees, in the group, to the terms shown there. A member can withdraw at any time, except a member whose seat is paid by the agency and who accepted account control (see “Agency control of member accounts”): for that member, asking to leave the agency replaces withdrawing. Leaving the group, being removed, the group being archived or turned back into a broker network ends it at once.
- What a member agrees to: the group's managers (its owner and admins) read the member's contacts, requests, properties, tasks and activity, read-only and without the clients' phone numbers or email addresses; they can assign clients and tasks to the member and move a client to a teammate, and every move is recorded.
- Teammates who agreed see each other's listings and requests by name in Matching (the criteria only, never the client).
- Managers see, for members who agreed, when they were last active as a range only (today, this week, earlier), never the exact time, and the team's weekly figures.
- On an Agency plan, the manager who pays handles the plan, payments and promo codes for the whole agency; the agency's Market contacts, AI credits and storage are shared pools.
Agency control of member accounts
When a member's seat is paid by an agency's Agency plan, the agency can manage that member's account. Nothing changes until the member explicitly accepts it, once, in the app. The managers are the group's owner and admins; an admin never acts on another admin or on the owner, and the owner alone sets the password policy and exports the whole agency.
What a manager can do on a managed member's account:
- Change the sign-in email: a link is sent to the new address, and the change happens only when that link is opened. The former address receives a notice with a “Not me: stop this change” link and an “It's me” link, both valid 48 hours.
- Choose the agency's password policy: members manage their own password (the default), or managers reset them. Under the second policy, a manager resets a member's password by emailing the member a reset link, or by giving a temporary password shown once to the manager, valid 24 hours and for one sign-in, which the member must replace at once; a temporary password signs the member out of every device. “Forgot password” then sends no link to that member: the request goes to the managers. Nobody, the manager included, ever sees the member's password.
- Reset two-step sign-in when a member has lost their device, with a reason the member sees; the member then sets it up again. Adding or removing two-step sign-in stays with the member.
- Unlink Google sign-in (never when it is the account's last way to sign in), or offer to link it: the offer is valid 24 hours and the member completes it from their own session with their own Google account.
- Sign the member out of their devices, export the agency's records (below) and remove the member from the agency.
Safeguards:
- These actions require the manager to use two-step sign-in and to have signed in recently, and they are limited in number.
- After a manager changes a member's sign-in email, nobody can reset that member's password, or reset their two-step sign-in, while the change is pending and for 24 hours after it, unless the member allows it from a device signed in before the change or with the “It's me” link. A sequence of sensitive changes on the same account is reported to SeemsR support.
- The member is told of every manager action in their Inbox and by a security email; these notices are always sent and cannot be turned off.
- Every action is written to an append-only agency log, which nobody can edit or delete, kept 2 years. The member reads their own lines in Security & privacy › Changes by your agency; the managers read the agency's log.
- The member's private messages are never visible to the agency, and are never in its exports.
Agency records and personal records:
- The contacts, requests and properties a member creates on the agency seat (since they agreed to share their CRM), and the cases the agency hands them, are the agency's records, with their tasks, comments and files. They stay with the agency when the member leaves. What the member had before joining stays theirs, and a copy imported from a card that does not allow forwarding is never the agency's.
- The owner can export all the agency's records, and a manager the agency records a member holds. Each export is logged and the members concerned are told. Exports include the clients' phone numbers and email addresses only once the member has accepted the agency's updated terms; until then they are left out. A member's private messages and records from before joining are never in them.
- A managed member's own “Copy of my personal data” holds their profile, settings, activity, sign-ins and their records from before joining, without the agency's records.
Leaving the agency:
- A managed member cannot delete their account or stop the CRM sharing: they ask to leave the agency instead, with an optional message, and can cancel the request. A manager accepts it or declines it with a message, and can also remove a member.
- On leaving, the manager chooses who receives the agency's records: a colleague, or the agency itself. A record that cannot move yet (a private negotiation, a deal file, a copy of a card that does not allow forwarding) stays with the former member until the agency takes it back. The member's sessions are ended.
- The member keeps their records from before joining, their profile, their network and their private messages. An account that existed before joining stays theirs, on their own plan (Free unless they pay). An account created through the agency's invitation is closed 30 days after leaving, unless the member cancels the deletion and keeps it on the Free plan. Before that, the member can download a copy of their personal data.
A managed member can always download a copy of their personal data. A request to erase it is sent to the agency's managers, who must answer within 30 days; SeemsR support follows it up.
When the agency's subscription ends, control of the account returns to the member automatically.
Public property links (WhatsApp)
You can send one or several of your own available or reserved properties to anyone, for example on WhatsApp, as a public link. Anyone who has the link can open the page without an account; it is not listed in search engines and loads no third-party service. Contacts and requests are never published, and nothing is public until you create a link.
- What the page shows: the title, type, offer, delivery, specs, area, compound and developer, the description and amenities, your name, title and company, and a button to your business card.
- Chosen by you for each link: the price (with the price per m², rent and payment plan amounts), the exact address and landmarks, the payment breakdown (paid so far, over price), and the photos. No photo is selected until you tick it, and the photos you tick become public for that link only.
- Never shown: your private notes, the owner or any client contact, the status, the history, your documents and internal identifiers, and your phone number or email address (they are on your business card).
- You choose how long each link works: 7, 30 or 90 days, or no expiry. You can stop a link at any time from the property or from your shared links in your profile. A sold, rented, withdrawn or on-hold property shows only that it is no longer available.
- Each link counts its views and shows you the first and last view. To count a visitor once a day, SeemsR keeps a shortened one-way code made from the visitor's IP address, browser and the day, never the IP address itself.
- So that a page opens again without a network, the visitor's browser keeps a copy of it and of its photos on their device. The copy expires with the link, after 30 days at most, and is erased when the device next finds the link stopped or expired.
- A page may invite other brokers to join SeemsR, naming your first name unless you turn this off in your shared links settings. The join form asks for a name, an email address, an optional phone number, a city and a message, is protected by Cloudflare Turnstile, records the link it came from, and is read only by the SeemsR team.
Client accounts
A broker's client can open a free SeemsR client account to find, in one place, the private spaces their brokers prepared. Two controllers: each broker for the record they keep in their CRM, and SeemsR for the client account itself (e-mail address, names, language, numbers typed, links to spaces, devices, settings).
- The account opens only the spaces a broker created and can close. A space is linked only by proof: your confirmed e-mail (after you answer “Is this you?”, which names the broker who saved that e-mail), the space's code, or the broker's yes. A number you type proves nothing by itself and is never verified by SMS.
- In a private space, the broker who prepared it can leave you short messages (500 characters at most), under a home or for the whole space. Only you and that broker read them; the broker sees when your page has shown them. They are erased when you erase your answers and 30 days after the space is closed or expires.
- Each broker sees only their own space, your name and the e-mail of the account linked to it, never your other brokers, your settings or your numbers. You see what the space shows, never the broker's record.
- Changing your e-mail needs a code sent to the current address and one sent to the new address; the former address receives an alert. Spaces already in the account stay.
- In My account you can leave a broker (the space leaves your account, the broker is told, their record stays with them), sign out of every device, download your data as one file, and delete the account.
- Deleting the account is immediate: the account, numbers, links, devices and requests are deleted. The answers you gave in a space stay in that broker's record as their notes, unless you also choose to erase them (reactions, comments, indicative prices, visit reviews).
- Retention: an account never confirmed is deleted after 7 days; a link request nobody answers expires after 14 days; numbers removed and requests to a broker are kept 30 days for the limits, decided link requests 180 days; the space journal holds no IP address.
- E-mails (codes, security alerts, “a broker prepared a space for you”) are sent by Resend; a client account never receives a price or an address by notification.
- A broker can send an invitation e-mail to the address he saved for you, with a link that works once for 7 days. It opens only the space he prepared. If it is not you, “Not me” in the e-mail declines the invitation and stops any future invitation to your address (we keep only a hash of the address for that); a broker can send at most 3 invitations per space and 20 a day.
To exercise your rights over a broker's record (access, correction, deletion), ask that broker; for the client account, use My account or write to us.
Files, photos and the vault
- Files, photos, videos and documents you upload (to a property, a contact, a chat or My files) are stored in private storage that only you can open, unless you share them. The location saved by the camera (GPS) is removed from photos when they are uploaded.
- A file link you share works for 7, 30 or 90 days or without expiry, as you choose, and you can stop it at any time. A shared photo can carry a watermark with your name and phone number; it is drawn on a copy, and the original stays as it is.
- The vault keeps sensitive client documents (images and PDF) in a separate closed storage. A client can send them to you through a drop-off link after ticking a consent box. Opening a vault document asks you to confirm your identity again, and every opening is logged on the document. SeemsR suggests deleting a vault document 12 months after the deal it belongs to has ended; you can delete it, or forget a client, at any time.
- “Read this document” sends the file you choose to the AI provider described below to extract its text.
- Files you put in the trash of My files are deleted for good after 30 days.
Chat, presence and location
- Messages, voice notes, photos and files you send in a conversation are kept for its participants. A voice note is transcribed only on request (see AI-assisted processing).
- The other participants see your presence as a range only (online, recently, today), never the exact minute. Read receipts follow your chat settings.
- Your device location is read only when you tap to share it in a conversation or to locate yourself on a map; SeemsR does not track your location in the background.
SeemsR on WhatsApp
On the plans that include it, you can link your own WhatsApp number once (with a one-time code you send from that number) and then send listings and requests to the SeemsR WhatsApp number. Your messages go through Meta's WhatsApp Business Platform under Meta's terms. SeemsR only answers messages from your linked number and never writes first.
- The content of a message received is kept 7 days, the record of messages received 90 days and the record of replies sent 400 days. A number that is not linked is stored only as a one-way code. You can unlink your number from your profile.
Plans, AI credits and payments
SeemsR keeps your plan and its period, the choices you make on the plans page, the promo codes you redeem, your AI credit balance and the record of what each AI task cost, your top-up and storage orders, and the Market contacts you start each month (kept 13 months to count your monthly quota).
Online payments are not open yet: SeemsR does not collect or store card or wallet details. When they open, payments will be handled by a payment provider, and this policy will name it.
While a yearly plan is paused, your data is kept; your Market presence is turned off and then restored when you unfreeze, and export and security settings stay open.
@handle, invitations and verification
- Your @handle gives you a public address ending in /@your-handle that shows your public broker card and the listings you chose to share. An invitation link carries your handle so that the people who join through it are counted as your invitations; the Ambassador badge you earn is shown on your profile.
- Verification is optional. A verification badge is shown to other brokers in Matching. When the phone check is offered, your number is checked with a one-time code. Reports and blocks by other brokers can lower how widely your listings are shown on the Market; reports are anonymous to the broker reported.
Sign-in security
You can turn on two-step sign-in with an authenticator app. Connected devices lists your sessions as a device and a browser (for example “iPhone · Safari”); you can sign out of any of them. An email tells you when a sign-in method is added or removed. If your account is managed by your agency, some of these settings are handled by its managers (see “Agency control of member accounts”). Sign-in, account creation and password pages may be protected by Cloudflare Turnstile (see below).
Information we handle
SeemsR handles the information you provide when you create and use an account, including:
- Account and profile information, such as your sign-in email address and contact email address, first and last name, phone number, professional title, description, profile photo and banner.
- CRM content you enter or import, including contact names, phone numbers, email addresses, countries, notes, photos, cases, budgets, tasks, comments and feedback, as well as the cards you share in your groups and the copies you import from them.
- Quote requests sent from the Plans page by brokerage companies and developers: organisation type and name, your name, role, work email, phone, city or area, team size, number of projects, current tools, your message and how you prefer to be contacted. They are used only to answer the request, kept for the SeemsR team and sent by email to the team.
- Files, images, spreadsheet details and voice recordings you intentionally submit to an import or AI-assisted feature.
- Questions the assistant could not answer, kept 90 days for the SeemsR team to improve the assistant; names, phone numbers, e-mail addresses, links and long numbers are masked as far as possible before they are kept. You can turn this off in Preferences › Assistant › Help improve the assistant; it applies from then on.
- Technical and usage information needed to operate and improve the service, such as session data, pages opened, controls used, form submissions, record changes, display preferences, push-notification subscriptions and diagnostic logs. The activity journal records action labels and changed field names, but not passwords, phone numbers, comments or the values typed into forms. Page views and interactions are kept 90 days and session and record events 400 days, then only daily counts remain; the daily figures of your Overview are kept 30 days.
- What you send through Help & feedback (your message, the page and device, and the last actions before it): the text is erased 18 months after the report is closed, and the last actions after 90 days. Error reports sent automatically by the app are kept 30 days.
How we use information
We use this information only to provide, secure and improve SeemsR: to authenticate you, maintain your CRM workspace, import contacts, create meetings, deliver reminders, power the features you request, understand pilot usage, prepare restricted daily activity reports for the operator, prevent abuse and troubleshoot the service.
SeemsR does not sell personal information and does not use it to serve advertising.
Sign in with Google
You can create your account or sign in with Google instead of a password. Google is a separate controller of your Google account under its own privacy policy; before you leave for Google, SeemsR shows what it will take.
- What SeemsR receives from Google (the openid, email and profile permissions only): your first and last name, your email address as confirmed by Google, your profile photo address and your Google account identifier. Never your contacts, your files, your posts or your friends, and SeemsR never posts for you.
- Why: to sign you in, and to fill in your broker profile, which you check and can change on the next step. Your photo is copied into SeemsR only if “Use this photo on my profile” stays on: our server fetches it once from Google, stores it with your other profile photos and never shows it from Google's site. It is never updated from Google afterwards.
- SeemsR does not keep the access token Google issues: it is used only to read your profile once. During the test phase, a Google account whose address is neither on the tester list nor invited is signed out and deleted at once.
- How long: while your account exists. You can remove Google from Profile › Security & privacy › Connected accounts (keep at least one way to sign in, for example a password; on an account managed by your agency, its managers link or unlink it); an email tells you each time a sign-in method is added or removed. Removing Google does not delete the photo already copied: remove it from your profile. You can also revoke SeemsR's access from your Google Account permissions.
- Information received from Google is never sold and never used for advertising, and its use follows the Google API Services User Data Policy, including its Limited Use requirements.
Google Sheets import
When you choose a file with Google Picker, SeemsR requests access only to the specific Google Sheet you select. We use that temporary access for the import you initiated, to read the selected spreadsheet and prepare a contact preview. SeemsR cannot browse or read your other Drive files.
- The Google Sheets access token is used during the one-time import and is not persisted in SeemsR's database.
- The prepared preview is private to your account and access to it expires after 30 minutes. Contact records are created only from the rows you confirm.
- To identify columns, SeemsR may send column headings and non-content structural descriptions to its AI provider (Anthropic, or OpenAI as the fallback, with store: false); spreadsheet row values are not sent for this column-mapping step.
- When you confirm a column mapping, SeemsR remembers it for your account — only the column headings and the field each one goes to, never the row values — so your next import with the same headings is matched without AI.
Google Calendar, Google Meet and Zoom
When you choose Google Meet for a contact action, SeemsR requests permission to create and manage events. It reads the connected Google account email, creates a 30-minute event in the primary calendar and asks Google Calendar to attach a Meet link. SeemsR does not list or browse your other calendar events.
To keep the connection available, SeemsR stores the connected account email, granted scope, expiry information and OAuth access or refresh tokens in Supabase. Tokens are encrypted before database storage and are used only to perform meeting actions you request. You can revoke access at any time from your Google Account permissions.
Zoom works the same way when you choose it: you connect your Zoom account, SeemsR stores the encrypted tokens and uses them only to create the meeting you ask for. You can disconnect it at any time, from SeemsR or from your Zoom account.
SeemsR's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Read Google's policy.
AI-assisted processing
Some optional features use AI providers to interpret information you submit, such as mapping import columns, extracting contacts from an image, transcribing a voice recording, translating a chat message or structuring a case request. Anthropic (Claude) processes the text and the images; Deepgram transcribes the voice recordings; OpenAI is the fallback when one of them is unavailable. Each request is answered by one provider. If the main provider fails or times out before answering, the request is retried once with the fallback provider (OpenAI); nothing is sent to a second provider after an answer has been received.
Dictating into a field first uses your browser's own speech service: Chrome sends the audio to Google and Safari may send it to Apple, under their terms, and SeemsR receives only the words. Only when the browser has no speech service, or it fails, is the recording sent once to our transcription provider above; dictation audio is never stored by SeemsR. A chat voice note is transcribed only when a participant taps Read, once per note, and the text is kept with the message for the participants of that conversation.
These providers process the requests under their API terms and do not use them to train their models. Requests to OpenAI are sent with store: false, and Deepgram is asked to keep the audio only for the duration of the request. A provider may still keep request records for a limited time for abuse and safety monitoring; SeemsR has requested zero data retention where available. Only use these features with information you are authorized to process.
The in-app assistant sends the AI provider your question and a minimal extract of your workspace: at most 10 contacts, only those the conversation names (or the one open on screen), as a name and a status, without phone numbers, e-mail addresses or notes, with the requests, properties, tasks and comments linked to them. The chat assistant sends the messages of the conversation you ask it about. Nothing is posted or changed without your confirmation. The same providers process the messages you send to SeemsR on WhatsApp and the documents you ask SeemsR to read. Each AI task uses AI credits; SeemsR records the task type, the credits used and its cost, not the content.
Service providers and data locations
SeemsR relies on these providers:
- Supabase: authentication, database, file storage and live updates.
- Vercel: hosting, scheduled jobs and operational logs; the app runs in Vercel's Paris region (France).
- Resend: the emails SeemsR sends (codes, invitations, security alerts, account messages and the operator's reports).
- Anthropic (text, images and documents), Deepgram (voice transcription) and OpenAI (fallback): the AI-assisted processing described above.
- Meta (WhatsApp Business Platform): only if you link your WhatsApp number.
- Google and Zoom: only when you sign in with Google or start a Google or Zoom integration.
- Your browser's push service (for example Google, Apple or Mozilla): the notifications you turn on.
- OpenFreeMap (served through Cloudflare): the map tiles, without any information from your account (see Sources & licences).
These providers process information under their own security and privacy commitments, including outside Egypt. SeemsR uses no advertising or third-party analytics service, and its fonts are served by SeemsR itself.
When the security check is enabled on the sign-in, account creation, password reset and “Join SeemsR” pages, Cloudflare Turnstile receives technical signals from your browser (such as your IP address and browser characteristics) to tell people from automated abuse; it never receives your password or the contents of your account.
We may also disclose information when required by law, or when reasonably necessary to protect users, the service or the public.
Cookies and storage on your device
SeemsR uses only the cookies it needs to work: your signed-in session, the security check of two-step sign-in, your language and number style, and, when you open an invitation or an @handle page, a marker of the inviting broker's handle for 30 days. Your browser also keeps, on your device, display preferences, drafts and offline copies so the app opens faster and without a network. There are no advertising or tracking cookies.
Retention and security
CRM and profile information is retained while your account uses the service, or until it is deleted or no longer needed for the purposes described here. Google Sheets authorization tokens are not retained. Google meeting credentials remain encrypted while the connection is active. Contacts, requests and properties you delete stay in Recently deleted for 30 days, where you can restore them, and are then erased. A withdrawn card's content is erased at once; imported copies belong to their importers. Public links follow the expiry you chose, and offline copies on a visitor's device last 30 days at most. When you delete your account, it is erased with its records and files after a 7-day grace period. The other periods are given in the sections above. Operational records may be kept for a limited period for security, reliability and legal obligations.
We use access controls, account-scoped database rules, a separate closed storage for the vault and encryption for stored integration tokens. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.
Your choices and rights
You can review and update profile and CRM information in SeemsR, choose whether to enable notifications, decline an optional integration, and revoke Google access from your Google Account. You can turn off or replace your business card link, stop your public links, and withdraw the cards you shared. “Export my data” downloads your contacts, requests, properties, tasks and settings, the messages you wrote and your activity, the cards you shared and the records you imported, without other users' records, phone numbers or email addresses, and can include your own files. You can delete your account from your profile; it is erased after a 7-day grace period. You can also unlink WhatsApp, disconnect Google or Zoom, and withdraw your agency consent at any time. If your account is managed by your agency (see “Agency control of member accounts”), its managers handle your sign-in email, your Google link, your password when the agency manages passwords, and the agency's records; instead of deleting your account or withdrawing your agency consent, you ask to leave the agency, and a request to erase your personal data goes to the agency's managers. To request access, correction or deletion of information associated with your SeemsR account, contact us from the email address linked to that account.
Updates and contact
We may update this policy as SeemsR changes. The date shown above identifies the latest version. Material changes will be communicated through the service when appropriate.
Questions or privacy requests: contact@opengate-intelligence.com
