Privacy Policy

Kyron Realty AI (the "Platform") is operated by Egnitech ("we", "us", "our"). The Platform is served at https://egnitech.com/projects/kyron-realty-ai.

For any question about this policy, or to exercise the rights described in section 12, contact us at [email protected].

The Platform handles personal data about two different groups of people:

• Property owners and agents who create an account, list a property, and use our dashboard.
• Prospective buyers, tenants and other visitors who browse a public listing, speak to our AI voice agent, submit an enquiry, or book a viewing. You do not need an account to be in this group, and we may still record personal data about you as described below.

If you are a visitor speaking to our voice agent, please read section 5 carefully: those calls are transcribed and analysed.

Account information (owners and agents). Your name, email address, profile image, account role, and — if you register with a password — a cryptographically hashed version of that password. We never store your password in readable form.

Google sign-in information. If you sign in with Google, we receive your Google account identifier, email address, name and profile picture, together with OAuth tokens. See section 4.

Property and listing information. Everything an owner submits about a property: address and location, price and deposit, lease terms, physical specifications, photographs and media, amenities, availability, and the pricing and concession limits that govern how our AI agent may negotiate.

Enquiry and lead information (visitors). Your name, email address, telephone number, preferred contact method, stated budget, target move-in date, whether you have pets, the number of occupants, and any terms discussed with the AI agent.

Appointment information. The date and time of a viewing you book, the type of viewing, your contact details, and any special requests.

Technical information. Standard server logs, session cookies required to keep you signed in, and basic device and browser information.

This section describes specifically how we handle data obtained through Google APIs, and applies in addition to the rest of this policy.

Sign-in. When you choose "Continue with Google", we receive your basic Google profile (identifier, name, email address, profile picture) solely to create and authenticate your Kyron Realty AI account.

Google Calendar. Where you grant it, we request the following Google Calendar permissions, and no others:

• .../auth/calendar.app.created — lets us create a single secondary calendar named "Kyron Real Estate AI" in your Google account, and create, update and delete viewing appointments on that calendar only. This permission gives us no access whatsoever to your primary calendar or to any other calendar in your account.
• .../auth/calendar.freebusy — lets us read only your busy or free time blocks, so that we do not offer a viewing slot when you are already occupied. This permission returns availability windows only. It does not disclose event titles, descriptions, locations, attendees or any other event content, and we never attempt to read them.

Why we need it. The sole purpose is scheduling property viewings: reading your availability so we can offer genuine free slots, and writing the confirmed appointment into the Kyron calendar we created.

How tokens are stored. Google authorisation tokens are stored in our database on servers we control, protected by network and administrative access controls, and are used only to perform the scheduling actions described above. They are never sold, never used for advertising or profiling, and never transferred to any third party.

Withdrawing access. You may revoke our access at any time from myaccount.google.com/permissions. Revoking access immediately stops all calendar reading and writing. To have the stored tokens deleted from our systems as well, email [email protected] and we will erase them. Calendars and events already created remain in your Google account, under your control, for you to keep or delete.

The Platform provides a real-time AI voice agent. When you speak to it — whether as an owner onboarding a property or as a visitor enquiring about one — the following happens:

• Your audio is carried over the Agora real-time network and processed by automatic speech recognition to convert it into text.
• A written transcript of the conversation is stored against the call record in our database, along with the call duration and the number of conversational turns.
• We generate and store an automated summary of the call, a sentiment assessment, and a numeric lead interest score reflecting how likely the enquiry is to proceed.
• Where you provide them during the call, contact and qualification details are saved as an enquiry and shared with the owner of the property you asked about.

Please do not disclose payment card details, government identity numbers, passwords or other sensitive information during a voice call. If you do not wish to be recorded and transcribed, do not use the voice agent — use the written enquiry form or contact the owner directly instead.

• To create and secure your account and keep you signed in.
• To publish property listings that owners ask us to publish.
• To operate the AI voice agent, answer questions about a property, and pass qualified enquiries to the relevant owner.
• To schedule, confirm, change and cancel property viewings.
• To enrich listings with neighbourhood and travel-time information using Google Maps and Routes services.
• To operate, monitor, debug and secure the Platform, and to prevent abuse.
• To comply with our legal obligations.

Under the Digital Personal Data Protection Act, 2023, we process personal data on the basis of the consent you give when you create an account, connect Google Calendar, speak to the voice agent, or submit an enquiry, and for the legitimate uses that Act permits. You may withdraw your consent at any time as described in section 12.

The Platform uses large language models and other automated systems to conduct conversations, summarise calls, score enquiries, assess sentiment, generate listing content, and negotiate within limits an owner has set in advance.

These outputs are assistive and can be wrong. They do not by themselves determine whether a property is offered or sold to you, and no legally binding agreement is formed by an AI conversation. A human owner or agent makes the final decision. You may ask us to review any automated output that affects you by writing to [email protected].

We do not sell your personal data, and we do not share it for advertising purposes. We share it only in the following circumstances:

With property owners. If you enquire about or book a viewing for a property, the owner of that listing receives your enquiry details, the call summary, and the appointment details, so that they can respond to you.

With service providers who process data on our behalf. Depending on how the Platform is configured at the time of your interaction, one or more of the following may process your data under contract with us:

• Agora — real-time audio transport, signalling, and the conversational AI gateway that connects the voice services below.
• Google — Gemini large language models, Maps and Routes services for location and travel-time data, and Google Sign-In and Calendar.
• Speech and language vendors — one or more of Deepgram, Cartesia, ElevenLabs, Microsoft Azure Speech, MiniMax or OpenAI, used for speech recognition, speech synthesis, or language understanding.
• Our hosting and database provider, which stores the Platform data described in this policy.

For legal reasons. We may disclose personal data where required by law, court order, or a lawful request from a public authority, or to establish, exercise or defend legal claims.

On a business transfer. If the Platform or Egnitech is acquired or merged, personal data may transfer to the acquirer, subject to this policy.

Some of the service providers listed in section 8 operate outside India. Where personal data is transferred outside India, we do so in accordance with the Digital Personal Data Protection Act, 2023 and any restrictions the Central Government notifies, and we require our providers to protect the data under contract.

• Account data — for as long as your account is active, and then for a reasonable period afterwards to meet legal and accounting obligations.
• Property listings — until the owner deletes the listing or the account.
• Call transcripts, summaries and enquiries — retained to give owners a record of the enquiry and to resolve disputes, and deleted on request unless we are required to keep them.
• Google authorisation tokens — until you disconnect the integration, revoke access in your Google account, or ask us to delete them.

We protect the Platform with encrypted connections (HTTPS/TLS), cryptographic hashing of account passwords, session-based access control, access controls on our database, and standard browser security headers. Credentials and API keys are held in server-side environment configuration and are never exposed to your browser.

No system is perfectly secure. We continue to strengthen these safeguards, and we will notify you and the Data Protection Board of India of a personal data breach where the law requires it.

Subject to the Digital Personal Data Protection Act, 2023, you have the right to:

• obtain a summary of the personal data we hold about you and how we process it;
• have inaccurate or incomplete data corrected, completed or updated;
• have your personal data erased, subject to our legal retention obligations;
• withdraw a consent you previously gave, at any time;
• nominate another person to exercise these rights on your behalf in the event of your death or incapacity;
• have a grievance addressed by us before approaching the Data Protection Board of India.

The Platform does not currently provide a self-service account-deletion button. To exercise any of these rights, including deleting your account or your call transcripts, email [email protected] from the address associated with your account or enquiry. We will respond within the period the law prescribes.

The Platform is intended for adults transacting in real estate and is not directed at children. We do not knowingly collect personal data from a child. If you believe a child has provided us with personal data, contact [email protected] and we will delete it.

We use cookies that are strictly necessary to operate the Platform — principally to keep you signed in and to protect sign-in forms against cross-site request forgery. We do not use advertising or cross-site tracking cookies. Blocking essential cookies will prevent you from signing in.

We may update this policy as the Platform develops. We will change the effective date at the top of this page, and where the change is significant we will give notice through the Platform. Continuing to use the Platform after a change means you accept the updated policy.

Egnitech, operator of Kyron Realty AI. Grievance contact: [email protected].

If you are not satisfied with our response, you may complain to the Data Protection Board of India.