Privacy Policy

Last updated: 2026-05-05

This policy explains what data RE Tools ("we", "us", "our") collects, how we use it, and the choices you have. RE Tools is operated by Loans On Demand, LLC (a Duplico product).

1. What we collect

Account data

Name, email address, business name (loan officers and agents)
Phone number, NMLS ID (loan officers, optional)
Account password (stored hashed via Supabase Auth)

Branding data

Logo image, primary brand color, tagline, contact info
Headshots and brand photos you upload

Tool usage data

Inputs you submit to tools (e.g. listing URLs, property details, prompts)
Generated outputs (text, images, asset URLs)
Tool run timestamps, models used, credits consumed, duration

Billing data

Subscription plan, status, billing cycle
Payment method (handled by Stripe — we do not store card numbers)
Invoice and transaction history

Technical data

IP address (for rate limiting and security only; not stored long-term)
Browser user-agent (for debugging)
Server logs (errors, request paths, latency)

2. How we use your data

To run the tools and generate outputs
To bill you correctly and prevent fraud
To send transactional emails (welcome, billing, account)
To provide white-label portals to loan officers
To diagnose and fix bugs
To improve the tools (anonymized, aggregate usage patterns only)

We do not sell your data, share it with advertisers, or use the content of your inputs/outputs for unrelated marketing purposes.

3. Third parties we share data with

To provide the service we send specific data to the following processors. Each is contractually required to handle your data only to provide their service to us.

Supabase — database, auth, file storage
Stripe — payment processing, billing, subscriptions
Resend — transactional email delivery
Google Gemini — AI text and image generation (inputs you submit are sent to Google's API)
OpenAI — AI image generation (inputs you submit are sent to OpenAI's API)
fal.ai — AI image generation infrastructure
Railway — application hosting
Cloudflare — content delivery, DDoS protection

We do not sell your data to data brokers, advertisers, or any other third party.

4. AI provider data handling

When you run a tool, the inputs you provide (prompts, uploaded images, brand details) are transmitted to the AI provider whose model you selected. Provider data-handling terms vary; please review their policies if specific retention or processing concerns matter to you:

Generated outputs (returned text and images) are stored in our database for your reference and usage history. You can request deletion of specific generations or your entire history at any time.

5. Data retention

Account data: retained while your account is active, deleted within 30 days after account deletion
Generated outputs: retained while your account is active, deleted on request or account deletion
Billing records: retained for 7 years (required for tax and accounting purposes)
Server logs: rotated within 30 days

6. Your rights

Depending on where you live, you may have the right to:

Request a copy of your data
Correct inaccurate data
Delete your account and associated data
Object to or restrict certain processing
Port your data to another service

To exercise any of these rights, email [email protected].

7. Security

We use industry-standard practices to protect your data: passwords are hashed, data in transit is encrypted via TLS, payment details are tokenized by Stripe and never stored on our servers, and access to production systems is restricted to authorized personnel.

No system is completely secure. If you become aware of a security issue, please report it to [email protected].

8. Children

RE Tools is not intended for use by children under 18. We do not knowingly collect data from minors.

9. International users

RE Tools is operated from the United States. If you use the service from outside the US, you consent to the transfer and processing of your data in the US.

10. Changes to this policy

We may update this policy as the service evolves. Material changes will be communicated via email and reflected in the "Last updated" date above.

11. Contact

Questions about your data? Email [email protected].