Privacy Policy

This policy explains how OMG Systems handles personal information in Site Engine. It covers you, the real estate agent who subscribes.

It does not cover the visitors to your website. Your own site carries a separate privacy policy for the buyers and sellers who contact you, for their information you are the organisation responsible, and we handle it on your behalf.

What we collect from you

• Account: name, email address, password (stored only as a cryptographic hash).
• Professional: brokerage name and address, phone, registration number, coverage areas.
• Content: everything you put on your site, including text, photographs, logo and colours.
• Billing: plan, subscription status, billing address. Payment card details go directly to Stripe; we never receive or store your card number.
• Feed credentials: MLS access keys you provide, held encrypted.
• Technical: sign-in times, IP address, and application logs used to keep the service running and secure.

Why we use it

• To create, host and serve your website.
• To fetch and display the listing data you are entitled to show.
• To send you service email: new enquiries, saved-search alerts, billing notices, security notices.
• To take payment and meet tax and accounting obligations.
• To support you, and to detect and prevent abuse.

We do not sell your personal information, and we do not use your content to train AI models.

Who we share it with

We use these service providers, and only for the purposes above:

• Supabase: database, authentication and file storage. Your data is held in the Canadian region (ca-central-1).
• Stripe: payment processing and invoices.
• Resend: delivery of service email.
• Anthropic, OpenAI and xAI: the models behind the AI assistant and content generation, reached through our own gateway.
• AMPRE / TREB: the MLS data source.
• GoHighLevel: only if you choose to connect your CRM, and only to send you your own leads.

Some of these providers operate outside Canada, which means your information may be processed in another country and be subject to that country’s laws. We may also disclose information where the law requires it, or to protect our rights or someone’s safety.

How long we keep it

• While your account is active: for as long as you use the service.
• After it ends: 90 days, so your site can be restored or exported, then permanently deleted.
• Billing records: kept as long as tax and accounting law requires, which may be longer than 90 days.

How we protect it

Traffic is encrypted with TLS. Passwords are hashed, never stored in readable form. MLS credentials are encrypted. Database access is restricted per-account at the database itself, so one agent cannot read another’s data even if the application is at fault.

No system is perfectly secure. If a breach affects your personal information and creates a real risk of significant harm, we will notify you and the Privacy Commissioner of Canada as PIPEDA requires.

Your rights

Under Canadian privacy law (PIPEDA) you may:

• ask what personal information we hold about you and get a copy;
• ask us to correct anything inaccurate;
• ask us to delete your account and its data, subject to records we must keep by law;
• withdraw consent for non-essential communications at any time;
• complain to the Office of the Privacy Commissioner of Canada.

Email accounts@ownitpro.com and we will respond within 30 days.

Cookies

We use cookies that are necessary for the service to work, keeping you signed in and securing forms. We do not use advertising cookies, and we do not track you across other websites.

Changes

We will post any update here and change the date above. For material changes we will tell you by email before they take effect.

Contact

OMG Systems, Ontario, Canada. accounts@ownitpro.com