Privacy Policy.

Last Updated: August 21, 2026

RealPact, powered by SignPact, Inc., is an AI-powered real estate contract automation platform operating in the United States. This Privacy Policy explains how we collect, use, protect, and share personal information when you use RealPact (the “Service”). SignPact, Inc. is a Delaware C Corporation (EIN: 39-2704088) incorporated on June 12, 2024, and we are committed to handling your data in compliance with applicable laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). We collect personal data only to operate and improve our services, and we do not sell your personal information.

By using RealPact, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

We collect several types of information to provide and improve our Service:

• Account Information: When you register or use RealPact, we collect information such as your name, email address, and your real estate brokerage or agency name. We also process authentication and session information needed to securely sign you in and operate your account.
• Legal Acceptance Records: When you accept our Terms or a required data notice, we retain the applicable version, the exact notice and acknowledgment presented, and the date and time of your acceptance in association with your account.
• Property and Contract Data: Our Service allows you to create and manage real estate contracts, which may include personal or business data about you, clients, and other parties (e.g., buyer/seller names, property addresses, MLS listing information, deed data, financial terms, signatures). We store the contracts and associated metadata (such as property details from MLS, county deed records, contract templates, version history, timestamps of creation or signing, and client details). Sensitive Personal Data: Real estate contracts may contain sensitive information (such as financial details, SSNs for certain forms, or other personal data). We treat this as part of your User Content and protect it as described in this Policy.
• Contacts You Select: In the RealPact iOS app, you may optionally choose a contact to fill client or transaction-party details. RealPact does not upload your address book. When you save the client or party, the particular name and contact details you selected are sent to RealPact and stored as part of that record.
• MLS and Public Records Integration: When you use RealPact to auto-populate contracts, we access and process information from Multiple Listing Services (MLS) databases and county deed registries. This includes property descriptions, legal descriptors, ownership history, tax information, and other publicly available or MLS-provided data that you have authorization to access.
• Electronic Signature Information: When you use RealPact for e-signatures, we collect information related to the signing process. This includes the identities (names, emails) of signers (buyers, sellers, agents), the date and time of signature events, audit trail information (such as IP addresses and device information for security), and any notes made during the signing process.
• Communication Data: If you communicate with us or through the Service, we collect information such as your contact details and the content of your messages. When the Service sends contracts or notifications on your behalf to clients or other agents, we may log those communications (email addresses of recipients, time sent, and delivery status).
• Usage Data: We automatically collect certain information about your device and how you interact with RealPact:
  • Technical Data: Depending on how you access the Service, this may include your IP address, browser type, device type, operating system, app or browser version, security-related identifiers, and an Apple notification token if you enable notifications.
  • Service Activity: Our systems record activity logs such as pages or screens viewed, features used (for example, creating a contract or using MLS integration), and the date and time of your activities. Website visits may also include referral information.
  • Website Cookies: When you use the RealPact website, we use cookies and similar technologies to maintain your session, remember preferences, and understand website usage. Browser cookie controls do not apply to the native iOS app.

2. Use of Cookies and Analytics

The cookies and third-party browser tools described in this section apply to the RealPact website. The RealPact iOS app does not use browser cookies and does not include the Google Analytics, Google Tag Manager, Google Ads tag, or Meta Pixel software development kits. Requests and activity from both the website and iOS app may still be recorded by our systems as described under Usage Data above.

• Google Analytics 4 (GA4): We use Google Analytics on the RealPact website to collect statistical information about website usage, analyze trends, and improve the website. GA4 is not included in the RealPact iOS app.
• Google Tag Manager: We use Google Tag Manager to manage analytics scripts on our website. Tag Manager helps ensure tracking scripts fire correctly without collecting personal information itself.
• Google Ads tag: We load the Google Ads tag on public website pages with advertising and analytics storage denied by default. Before you accept advertising cookies, Google may receive limited measurements without cookies for consent and conversion modeling. If you accept, we use the tag to measure visits and conversions from our advertising. We do not send transaction, document, client, signer, or property-workspace content to Google Ads.
• Meta Pixel: If you accept advertising cookies on the RealPact website, we use the Meta Pixel on public and sign-up pages to measure visits from our advertising, account creation, and completed onboarding. RealPact does not use the Meta Pixel in the iOS app or on dashboards, transaction workspaces, documents, signing pages, client records, or property workspaces, and does not send transaction or client content to Meta.
• Website Cookies for Functionality: Essential website cookies are used for authentication, preferences, and other website features.
• Your Website Choices: Meta tracking and Google cookie-based advertising measurement stay off unless you select “Accept” in our advertising cookie banner. You can decline without affecting essential RealPact functionality and can change your choice through the “Cookie settings” control on our public, demo, and sign-up pages. Declining or withdrawing consent denies Google advertising storage, disables Meta tracking, and removes the advertising cookies that RealPact can access.

3. How We Use Your Information

We use the collected information for various legitimate purposes related to operating our Service:

• Provide and Maintain the Service: We process your data to create your account, authenticate you, and enable you to create, auto-populate, and manage real estate contracts. We use MLS and deed data to automatically fill contract fields, saving you time and reducing errors.
• Facilitate Real Estate Transactions: Information is used to streamline the contract workflow between agents, clients, and other parties. We process property data, client information, and transaction details to prepare contract drafts for your review.
• Communicate with You: We use contact information to send important notices about contract status, signature requests, transaction updates, and other essential information.
• Improve and Develop our Services: We analyze usage data and feedback to understand how agents use RealPact and how we can make the contract process faster and easier to review. We also use the field mapping corrections you submit, which record form structure — a field's name, label, and surrounding form text — rather than the values you or your clients enter. We do not use the contents of your documents, contracts, or client records to train general-purpose AI models, and our AI providers are contractually prohibited from doing so.
• Automated Processing of Document Content: To power extraction, field mapping, and draft preparation, the contents of documents you upload or create — including any personal or client information they contain — are transmitted to and processed by the AI providers identified in Section 5. This is automated machine processing. It does not involve a person at SignPact reading your documents.
• Support, Security, and Legal Compliance: SignPact personnel do not routinely read, review, or monitor the contents of your documents, contracts, or client records. Our personnel access that content only when one of the following applies: (a) you ask us for support and access is needed to resolve your issue; (b) we are investigating a security incident, suspected fraud, or a violation of our Terms; (c) we are required to do so by law, legal process, or a binding regulatory request; or (d) we are diagnosing a specific technical defect affecting your account that you reported or that our systems detected. Access is limited to the personnel who need it for that purpose, is limited to the data needed for that purpose, and is logged.
• Ensure Security and Prevent Fraud: Information such as IP addresses, device information, and audit logs are used to protect the security of our platform and maintain the integrity of real estate transactions.

4. Legal Bases for Processing (GDPR-specific)

If you are located in the European Economic Area (EEA) or United Kingdom, our legal bases for processing your personal data under the GDPR are:

• Contractual Necessity: Most data we process is to provide you with the Service you requested under our Terms of Service.
• Legitimate Interests: We process data to pursue our legitimate interests in improving our Service and ensuring security.
• Consent: We rely on your consent for non-essential website cookies and advertising measurement where consent is required.
• Legal Obligation: Processing required to comply with real estate regulations and maintain transaction records.

5. How We Share and Disclose Information

We do not sell your personal data to third parties. We share information only in these circumstances:

• Service Providers and AI Subprocessors: We use trusted third-party companies to operate the platform, and we share only the data each one needs to perform its function. Providers that may receive or process the contents of your documents are: Reducto (for extracting structured data from deeds, property record cards, and purchase and sale agreements you upload or that we retrieve on your behalf), Anthropic (Claude API, for field mapping, document field detection, and in-product support assistance), Google Cloud (Document AI, for parsing form fields in uploaded PDFs; and Cloud Run and Cloud SQL, for application hosting and database storage), and Resend (for delivering transactional email such as signature requests and notifications). Each is engaged under terms that restrict its use of your content to providing the service to us and prohibit using it to train its own general-purpose models. We also use providers for MLS integration and other operational functions that do not receive document contents.
• Transaction Participants: When you send contracts for review or signature, we share them with the designated parties (buyers, sellers, other agents, attorneys) as you direct.
• MLS and Brokerage Requirements: We may share transaction data as required by MLS rules or your brokerage's compliance requirements.
• Business Transfers: If SignPact is involved in a merger, acquisition, or sale of assets, your information may be transferred.
• Legal Compliance: We may disclose information to comply with laws, legal processes, or regulatory requirements specific to real estate transactions.

6. Data Retention

We retain data as required by real estate regulations and business needs:

• Account Data: Kept while your account is active. When you delete your account, we remove authentication credentials, personal profile and preference data, and account access. We retain only information that must remain with transaction records, documents, and audit history for legal or regulatory compliance, including the associated professional identity, for the applicable retention period. Retained information is not used to keep the deleted account active or for marketing.
• Transaction Records: Real estate contracts and related documents are retained for the period required by applicable real estate laws. The required period varies by jurisdiction and record type and is commonly 3-7 years.
• Audit Trails: Electronic signature records are maintained as legally required for enforceability of contracts.

7. Data Security

We implement comprehensive security measures to protect sensitive real estate data:

• Encryption: All data transmission uses TLS encryption, and sensitive data is encrypted at rest.
• Access Controls: Role-based access ensures only authorized personnel can access contract data, and personnel access to document contents is limited to the narrow circumstances described in Section 3 and is logged.
• Compliance: We maintain security standards appropriate for handling real estate transaction data.
• Monitoring: Continuous monitoring for security threats and regular security assessments.

8. Your Rights and Choices

You have several rights regarding your personal information:

• Access and Portability: Request a copy of your personal information and transaction history.
• Rectification: Request correction of inaccurate information.
• Deletion: Delete your account from within the RealPact iOS app or request deletion of personal data (subject to legal retention requirements).
• Withdrawal of Consent: Withdraw consent for non-essential website cookies and advertising measurement where applicable.

9. International Data Transfers

RealPact is based in the United States. If you access the Service from outside the U.S., your information will be transferred to and stored on servers in the United States. We implement appropriate safeguards for international data transfers.

10. Children's Privacy

RealPact is not directed to children, and we do not knowingly collect personal information from individuals under the age of 18 without parental consent.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will revise the “Last Updated” date at the top of this Policy. For significant changes, we will provide more prominent notice.