Privacy

Last updated October 27, 2026.

Estalogue is an assistant for real estate agents: you tell it about your clients, and it keeps their details, your follow-up tasks, and your conversations with it. This page says what we store, who else handles it, how long it is kept, and how to have it removed. If something here is unclear, write to support@estalogue.com.

What we store

• Your account. Sign-in is handled by Clerk, with Sign in with Apple or a code sent to your email. Clerk keeps your email address and, if you give one, your name. If you chose Hide My Email with Apple, the address is Apple’s private relay address, not your own. We keep the identifier Clerk gives us, the same email address, your time zone and language (so tasks fall on the right day and the assistant replies in your language), and when you agreed to the “Before you start” screen. There is no password.
• What you record. Every message you type, every voice message and its transcript, the assistant’s replies, and what is made from them: your clients’ records (names, contact details, budget, timing, area, financing, preferences, family, notes, key dates), your tasks, and the history of each change, with the message it came from. A change adds to the record rather than overwriting it.
• A search index of your notes. So the assistant can find a note later by what it means, the text of some notes is turned into numbers (embeddings) and kept next to them in our database. The search library also keeps a copy of that text in the server’s memory, which is cleared whenever the server restarts.
• Usage. Which operations ran for your account, which company ran each one, how much (for example, words processed or seconds of audio), what it cost us, that company’s request number, and which message it was for. No text.
• Technical logs. For each request our server logs one short line: the time, what was asked for (for example, “open this client”, by address and record identifier), the result, how long it took, a request number, and your account identifier. Errors are logged the same way. We do not log the text of your notes, messages or transcripts, only the lines above; an error report can occasionally quote a few words of whatever caused the error. Amazon keeps these logs for 4 days.

Reminders are scheduled by your iPhone itself, from your tasks; no notification service is involved. A message that has not been sent yet stays on your iPhone until it is, and signing out deletes it.

There are no advertising identifiers, no tracking, and no analytics, in the app or on this website. We do not sell or rent anything about you or your clients, and we do not use it for advertising.

Where it is kept

On Amazon Web Services in the United States (Oregon): the database on Amazon RDS, and voice recordings in private Amazon S3 storage. Both are encrypted at rest. Between your iPhone and our server, and between our server and the companies below, everything travels encrypted.

Who processes it

Some of it goes to other companies, each only to do its part:

• OpenAI, United States. Runs the assistant: it reads what you type, the transcripts of your voice messages, and the parts of your client records it needs to answer or to save something, and writes the reply. It also turns voice messages into text, names your conversations, sums up long ones, and makes and searches the index of your notes. OpenAI is never given your email address or your name.
• Clerk, United States. Signs you in, sends sign-in codes by email, and keeps your sign-in email and name.
• Apple. Sign in with Apple, if you use it. When you delete your account, we ask Apple to remove Estalogue’s access to your Apple Account.
• Amazon Web Services, United States. Runs our server and stores everything above.
• Cloudflare. Serves this website, and forwards email sent to support@estalogue.com to our mailbox.
• Zoho Mail, United States. Holds that mailbox, where your messages to us arrive and our replies come from.

Each of these companies works under terms that protect your data at least as well as this page does.

The app asks you to agree to this once, right after you sign in, on the “Before you start” screen; the assistant cannot be used without it. To withdraw, delete your account, as described below.

Your clients’ information

Most of what you record is about other people: your clients. You decide what to record, and you are responsible for having the right to record it and for following the laws and rules that apply to you, such as privacy laws, fair housing rules and your brokerage’s policies. Record what your work needs. Do not record Social Security numbers, bank or card numbers, passwords, or health information.

We use what you record only to run Estalogue for you. Nobody else using Estalogue can see it.

Deleting a conversation, archiving a client or a task, or removing a detail, note or key date takes it out of view, but does not erase it: the record of what was said stays, with the history of each change, because each client detail points to the message it came from. Estalogue cannot erase one client’s information on its own. Only deleting your account erases it, so if a client asks you to have their information erased, that is the way to do it today.

How long we keep it

Everything above is kept until you delete your account, except the technical logs, which last 4 days, and the usage records described below. Our database backups roll over after 7 days, so what is deleted is gone from them within a week.

Deleting your account

In the app, go to Me › Data & privacy › Delete account. The same button is on the “Before you start” screen. It works right away and cannot be undone:

• every client, note, task, conversation, transcript and search index entry of yours is erased from our database, and your voice recordings are deleted from storage;
• if you signed in with Apple, we ask Apple to remove Estalogue’s access to your Apple Account;
• the app then deletes your sign-in from Clerk and signs you out.

Two things remain, with nothing that says who you were. The usage records stay as our cost ledger: for each call, the company, operation, amount, cost and time, that company’s request number, and the identifier of the deleted message it was for. And a one-way fingerprint of your Clerk sign-in identifier stays, which stops a sign-in from before the deletion from creating the account again. The search library’s copy of your note text in the server’s memory is cleared when the server next restarts, not at once, and the technical logs within 4 days.

If you no longer have the app, install it again, sign in the way you did before, and use Delete account there. If you cannot, write to support@estalogue.com from the address on your account, and we will help.

Children

Estalogue is a tool for working real estate professionals. It is not directed at children, and we do not knowingly keep an account for anyone under 13.

Changes

The date at the top is the date of the last change. If a change affects what is collected or who receives it, the app will ask you to agree again, on the “Before you start” screen, before it applies.

Contact

support@estalogue.com