Cette page existe aussi en français. Lire en français

Privacy.

What REALTIS does with personal data: which data, why, which providers handle it, how long we keep it, and how to exercise your rights.

Last updated: 12 October 2026. This policy covers the REALTIS software (app.realtis.ai), the REALTIS mobile app (iPhone, iPad, Android), the agency websites hosted by REALTIS and the realtis.ai website. The French version is the reference.

Contents

1. Who is responsible
2. Data we process
3. Why we process it
4. Artificial intelligence
5. The mobile app
6. Our service providers
7. Transfers outside Switzerland
8. Retention periods
9. Security
10. Cookies and local storage
11. Your rights
12. Deleting your account
13. Audience, changes, contact

1. Who is responsible

Your agency, for its clients' data

For all data an agency enters, imports or receives in REALTIS (its clients, prospects, owners, tenants, guests, contractors, the messages it receives, the visitors of its website), the agency is the controller under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR). Pozzoni SNC is its processor: we host this data and process it only to provide the service to the agency, never for our own purposes.

The accounts of an agency's staff (agents, managers, administrators) are created and managed by the agency: for these accounts too, the agency is the controller and we are its processor.

Are you a client, owner, tenant or website visitor of an agency? Please contact the agency first to exercise your rights. If you write to us, we forward your request to the agency concerned and help it respond.

Pozzoni SNC, for its own processing

Pozzoni SNC is the controller for the business relationship with agencies (contract, billing, support), for the realtis.ai website (contact form, trial requests), for the security and proper operation of the platform (technical logs, abuse prevention) and for account deletion and data-subject requests addressed to it.

Controller

Pozzoni SNC

Company ID (UID)

CHE-224.969.370

Address

Avenue de la Gare 4
3963 Crans-Montana, Switzerland

E-mail

support@realtis.ai

Phone

+41 78 727 97 67

2. Data we process

Your account

First and last name, business e-mail address, phone, job title, languages spoken, photo, signature (including a handwritten signature if you upload one), role in the agency, password (stored only as an irreversible hash), preferences, balance and use of AI credits.

The agency's data

• Properties: address, features, price, photos, floor plans, documents, mandate, history.
• People: clients, prospects, owners, tenants and guests (title, name, phone numbers, e-mails, address, occupation, date of birth, languages, budget, search criteria, interests, notes, documents).
• Rentals: leases, rents, charges, deposits, payments, reminders, repairs, expenses, short-term stays, rates.
• Communications: e-mails and portal enquiries received or sent, communications, notes (including dictated ones), appointments and viewings.
• Valuations of properties and their reports.
• Conversations with the POPI assistant, kept in your history.
• Matching: the software compares clients' criteria with the agency's properties to suggest matches. It assists the agent; it never decides.

Connected mailboxes, calendars and channels

If a user connects their mailbox, their calendar address or the agency's social media accounts, REALTIS retrieves and sends messages on their behalf, with their authorisation. Access credentials stored on our side are encrypted.

Tracking of brochures sent

When an agency sends a sales brochure as a link, REALTIS records the opening of the e-mail and of the link: date, reading time per page, device, operating system, browser, language, screen size, time zone, referring page, IP address and the approximate location derived from it (country, region, city). This lets the agency know whether its brochure was read.

Agency websites

Agency websites are served by REALTIS. They collect the messages sent through their forms (contact, viewing, valuation, stay), the conversations with the website assistant if the agency has enabled it, and a cookie-free audience measurement: pages viewed, time spent, scrolling, contact actions, traffic source, country, device, browser and language. The IP address is never stored; a visitor is only recognised by a fingerprint that changes every day. Each agency website publishes its own legal notice and privacy page; the agency is the controller there.

The realtis.ai website

What you enter in the contact form (name, agency, e-mail, phone, subject, message), with the date and the IP address of the submission, used to limit abuse. The message is stored on our server and forwarded to our team by e-mail. The trial request, made on app.realtis.ai, collects your name, agency, e-mail, phone, number of agents, current software and your message.

Technical data

Web server logs (date, IP address, page requested), software error logs, session tokens, deletion history (to allow restoring), log of AI credits used.

3. Why we process it

Providing the software and the app

Performance of the contract with the agency; for its clients' data, the agency's instructions.

Security, abuse, backups

Legitimate interest in protecting the service and the data.

Support, billing, AI credits

Performance of the contract; legal obligations (accounting).

Answering realtis.ai messages

Pre-contractual steps; legitimate interest.

Fixing and improving the product

Legitimate interest (fixing errors, measuring service load).

These are the legal bases under the GDPR, which applies to agencies established in the European Union. We do not use agencies' data to train artificial intelligence models, we do not sell it and we do no targeted advertising.

4. Artificial intelligence

What is sent to an AI service, and when

Data is sent to an AI service only to perform the feature that needs it.

• The POPI assistant. Each request is first read by a Z.ai model (Singapore) that picks the right tools: it receives the text of the request, the open page (for example the title of the property or the name of the client shown), the end of the conversation and the names of attachments. The answer is then prepared by Anthropic (United States), which receives your question, the screen context, the information it looks up to answer you (records, e-mails, calendar) and the photos or documents you give it. At the "Low" level, or if Anthropic does not respond, everything goes through Z.ai.
• The brochure and website assistants: Anthropic, or Z.ai at the "Low" level. The domain name assistant: Anthropic.
• Dictation sends the recording of your voice to OpenAI (United States) to turn it into text.
• Photo tools. Enhance, furnish, declutter, evening look, draw a floor plan, create an image: OpenAI. Sharpening and upscaling: Replicate. Eraser and property tour videos: fal, which runs models from Bria, MiniMax and ByteDance. Photo analysis in Quick Edit: Anthropic. Only the photos you choose are sent.
• Writing (descriptions, brochures, photo captions, e-mails, letters, translated shares, website translation and import) and document reading (filling in a record from a sales file, summarising a document): Z.ai receives the details of the property, client or message concerned, or the document.
• Translating a message or a record, and social media post texts: Anthropic (or Z.ai at the "Low" level for posts).
• Valuations and neighbourhood descriptions: Anthropic receives the address, the features and, where relevant, the photos of the property, then searches the internet.
• Importing data from previous software: Anthropic receives the column headers, a few sample values and two rows of the imported file, to recognise the fields. Never the whole file.
• An agency's website assistant, if enabled: Z.ai receives the messages written by the visitor (Anthropic if Z.ai is switched off).

Automatic processing of incoming enquiries

When the agency has connected a mailbox or the portals, and for its website forms, REALTIS automatically analyses each incoming enquiry: it categorises it, recognises the client and property concerned, extracts search criteria, prepares a draft reply and the next actions, prepares follow-ups for clients who have not replied and detects duplicates. To write in the agency's tone, it also reads e-mails the agency has sent. This runs on the server, whether or not the mobile app is used; the agency sets it up by connecting its channels. It is performed by Z.ai (Singapore); if that service is switched off, by Anthropic (United States).

AI suggests, you decide

No AI action saves data or sends a message without a person's approval. AI output may contain errors: review it before use. REALTIS makes no automated individual decision producing legal effects for a person. AI-generated content can be reported to us from the app ("Report").

Model training and retention at providers

According to their public terms for business customers:

• Anthropic does not train its models on the content it receives, and deletes it within 30 days, except content flagged as violating its usage policy (kept for up to two years);
• OpenAI does not use the data it receives to train its models; it does not keep dictation recordings, and keeps image requests for up to 30 days to detect abuse;
• Replicate deletes the photos and results of a request after one hour;
• Z.ai states that it processes content in real time, in Singapore, without storing it;
• fal keeps request data for 30 days; files uploaded to it (photos for a tour video, an image to erase) can be read by anyone who knows their address, which cannot be guessed.

To Z.ai, fal and Replicate we send only what the requested feature requires. You may ask us for the terms that apply to a given provider: support@realtis.ai.

5. The mobile app

The REALTIS app ("REALTIS – Real Estate CRM" on the App Store and Google Play) is a way into your agency's software: it reads and writes in the CRM. Accounts are created by the agency; the app sells nothing.

• Sign-in. Before you sign in, the app reads the list of REALTIS servers from realtis.ai; your e-mail address and password are presented to them to find your agency's server. With "Sign in with Google" or "with Microsoft", the provider confirms your e-mail address and your name to us; the address must already match a REALTIS account.
• Sign-in token. It is kept in the phone's secure storage (Keychain on iPhone and iPad, Keystore on Android). It expires after 30 days without opening the app, and is erased from the phone when you sign out.
• Face ID, Touch ID, fingerprint. If your phone has them, the app uses them to protect its opening; you can turn this lock off in its settings. Recognition happens on the phone: we never receive your face or fingerprint.
• Camera and photos. Used only when you take or choose a photo or document, through the system camera and picker. Only the chosen images are sent to the CRM. Saving an image to your photos only requires add-only access.
• Microphone. Used only during dictation, after your consent to AI. The recording is sent to the CRM, then to OpenAI to be transcribed (section 4).
• Contacts. When you import a contact to create a client, the app asks for access to your contacts, then opens the system picker. It reads only the chosen contact (name, phone numbers, e-mails, company, job title, address, date of birth) and sends it to the CRM only when you save the record.
• Calendar. The app adds an appointment to your calendar through the system window, when you ask it to. It does not read your events.
• Location. The app does not use your location.
• Notifications. To alert you (new enquiry, viewing to confirm, task done), we store your device's notification identifier, its platform and model (for example "iPhone 15"), your settings and the list of notifications sent. The title states the kind of event and the text its label, which may contain a client's name (for example "Create the record for …"). With the Discreet setting (Settings, My profile, Notifications), the text becomes "A new notification is waiting for you"; the kind is still shown. Notifications go through Apple (iPhone, iPad) or Google (Android); during tests with the Expo Go test app, through Expo. When you sign out, the identifier is deactivated. You can adjust notifications, or turn them off in the phone's settings: the app works without them.
• Offline viewing. The data you view is kept on the phone so it stays readable offline; this cache is cleared when you sign out. Documents and images you open remain in the app's cache, which the system clears on its own and which disappears when you uninstall the app. Also kept on the device, with no client data: the last e-mail address entered, your agency's server, your settings and your AI consent.
• AI consent. Right after sign-in, the app explains which features send which data to which AI services, and asks for your consent. Without it, these features stay disabled. You can change your mind in Settings, My profile, Privacy and help, Artificial intelligence. Your choice is stored on the device.
• Addresses and maps. Address suggestions come from swisstopo (geo.admin.ch), which receives the text typed and the phone's IP address. The map of a search profile loads its background from OpenStreetMap and its library from jsDelivr, which receive the IP address. Directions open in the phone's maps app, which receives the address.
• Original e-mails. Showing an e-mail in its original form loads the images it contains from the sender's servers, which may see the phone's IP address.
• Report a problem. A report contains your text, the last ten messages of the chat and the content reported; if the box stays ticked, technical information (screen, device, system, version, language, time zone, latest errors); and the screenshots you attach (three at most). It is stored on our server and sent to support@realtis.ai.
• Updates. At launch, the app asks Expo (650 Industries, United States) whether a fix is available. Expo receives the IP address, platform, app version and a random installation identifier.
• No tracking. No advertising, no advertising identifier, no analytics or crash-reporting tool from a third party. Apple and Google may share anonymous crash reports with us if you allowed it in your phone's settings.
• Deleting your account from the app: see section 12.

6. Our service providers

Hosting and operation

Artificial intelligence

Maps and public data

Market rates on the dashboard (Swiss National Bank, European Central Bank, Bank of England, Federal Statistical Office, Federal Office for Housing, Frankfurter) are downloaded without any personal data. The addresses of agency websites' public pages are reported to search engines (IndexNow), without personal data. Domain name availability is checked with the registries (RDAP) using only the name searched.

Services your agency chooses to connect

They are used only if the agency or the user connects them, with their own account and under their own authorisation:

• e-mail and calendar: Google (Gmail), Microsoft (Outlook, Microsoft 365), Apple (iCloud), Infomaniak or another provider; for calendars, REALTIS reads the private address the agent pastes and sends nothing;
• sign-in with a Google or Microsoft account;
• social media through Post for Me (Day Moon Development LLC, United States), which keeps the publishing authorisations and receives the text, photos and date of posts; or, for Facebook and Instagram, directly with Meta;
• in the full version of the software only: WhatsApp Business and read-only access to Meta and Google Ads advertising accounts;
• real estate portals where the agency publishes its listings (Homegate and ImmoScout24 via Swiss Marketplace Group, immobilier.ch, petitesannonces.ch, newhome, RealAdvisor, Comparis, Properstar): they receive the listing, the agency's contact details and the name, phone and, depending on the portal, e-mail of the agent in charge.

We do not share data with any other third party, except where required by law or by an authority's decision.

7. Transfers outside Switzerland

Our servers are in France, a country whose level of protection the Swiss Federal Council recognises as adequate. Some providers process data in the United States and Singapore and, only for finding nearby places (coordinates without names), in Russia. The Federal Council does not recognise an adequate level of protection for Singapore or Russia, and recognises it for the United States only for companies certified under the Swiss-U.S. Data Privacy Framework.

According to their public terms, the data processing agreements of Anthropic, OpenAI, fal, Stripe, Google and Hostinger include the European Commission's standard contractual clauses, and Stripe, Google, GitHub and Expo are certified under the Data Privacy Framework.

What we do: we send these providers only what the requested feature requires; in the mobile app, data is sent to AI services only with your consent; automatic sorting of enquiries is set up only when the agency connects its channels. You may ask us which safeguards cover a given provider, or for a copy of them: support@realtis.ai.

8. Retention periods

The periods for audience measurement, backups, web server logs and the password reset link are enforced by our systems; accounting records are kept for ten years, as the law requires. Elsewhere, data is kept while it is useful to the service and is deleted at the latest at the end of the contract, on request.

Agency data

Properties, clients, communications, documents, valuations: for the whole term of the contract, unless the agency deletes them. At the end of the contract, the agency may ask for a copy and then for deletion; we then erase the data from our servers.

Free trial not continued

Access is suspended at the end of the trial. The account and its content are deleted on request.

Deleted properties and clients

A copy remains in the deletion history, to allow restoring, until the end of the contract or on request.

Permanently deleted messages

Hidden everywhere and never imported again; their content remains in the database until the end of the contract or on request.

POPI conversations

Until their author deletes them, or their account is deleted.

Brochure tracking

For the term of the contract; the agency can deactivate a tracking link at any time.

Website audience measurement

25 months; older measurements are erased as later visits come in.

Database backups

Made every night, encrypted; the last 14 are kept. Deleted data leaves them as they are renewed, in about two weeks.

Web server logs

14 days.

realtis.ai form messages and trial requests

As long as needed to handle the request and follow up the resulting relationship; deleted on request.

Notification identifiers

Deactivated when you sign out; erased with your account.

Data kept on the phone

Data cache: until you sign out. Documents and images opened: until the system clears the cache or the app is uninstalled.

Password reset link

One hour, single use.

Accounting records

Ten years (legal requirement).

9. Security

• All connections to the service are encrypted (HTTPS).
• Passwords are stored as irreversible hashes; access credentials for mailboxes, calendars and connected accounts are encrypted in the database (AES-256). Authorisations for social media connected through Post for Me are not stored on our side.
• Sessions are signed: the browser session lasts 7 days, the app session 30 days without use.
• In the app, the sign-in token is kept in the phone's secure storage, and opening can be protected by Face ID, Touch ID or fingerprint.
• Access rights follow the role set by the agency.
• Repeated sign-in attempts are limited.
• The database is backed up every night, encrypted before it leaves the server.
• In the event of a data breach posing a high risk, we inform the agency without delay so it can meet its own obligations, and the Swiss Federal Data Protection and Information Commissioner (FDPIC) where the law requires.

No system is invulnerable: protect your password and lock your phone.

10. Cookies and local storage

realtis.ai

No cookies. The browser only keeps, in its local storage, the fact that you closed the country suggestion; to offer it, the server infers your country from your IP address, without storing it for that purpose.

REALTIS software

A session cookie (7 days) and a language cookie (1 year); during sign-in with Google or Microsoft, or from the app, security cookies lasting a few minutes. All are necessary for operation; none is used for advertising or audience measurement.

Agency websites

A language cookie (1 year), set when the visitor chooses a language; local storage remembers that the cookie notice was closed. Audience measurement works without cookies (section 2).

Mobile app

No advertising cookie, no advertising identifier.

11. Your rights

Under the FADP and, where applicable, the GDPR, you may request:

• access to your data and a copy;
• its rectification;
• its erasure;
• its delivery in a common electronic format (portability);
• the restriction of processing, and object to processing based on our legitimate interest;
• the withdrawal of your consent to AI in the app, at any time.

How: write to support@realtis.ai. We reply within 30 days, free of charge, and may ask you to prove your identity. If the request concerns an agency's data (you are its client, for example), we forward it to the agency, which decides.

An agency's data: the software lets you download reports (PDF, Excel) and, for short-term rentals, tables (CSV). There is no one-click full export: for a complete copy of the agency's data, write to us; we provide it in a structured, commonly used format.

Complaints: you may contact the Swiss Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or, if you live in the European Union, the data protection authority of your country.

12. Deleting your account

• In the app: Settings, My profile, "Request deletion of my account" (in French: Paramètres, Mon profil, « Demander la suppression de mon compte »).
• Without the app: the page realtis.ai/suppression-compte/en (form), or an e-mail to support@realtis.ai from your account's address.

Each request is handled manually by our team within 30 days; until then, the account remains usable. We delete your profile, your access, the devices registered for notifications, the mailboxes and calendars you connected and your conversations with POPI. The properties, clients and communications you entered belong to the agency and remain with it. Details are on the deletion page.

13. Audience, changes, contact

REALTIS is reserved for adult real estate professionals; the service is not directed at children.

We may update this policy; the date at the top shows the latest version. For significant changes (a new provider receiving personal data, for example), we notify agency administrators in advance.

Pozzoni SNC · REALTIS

Avenue de la Gare 4, 3963 Crans-Montana, Switzerland

Contact

support@realtis.ai · +41 78 727 97 67 · realtis.ai/contact