Skip to content

Security & privacy

Your contacts are yours. Here’s how we keep them safe.

Your agency decides what is asked and why. Realmaker only processes that data on your behalf, connects to your channels through Meta’s official route and steps aside whenever you want.

7 days free · No card needed · Cancel anytime

Sample data

GDPR

Your agency decides. Realmaker processes the data on your behalf.

When a platform answers your WhatsApp, the first question is who is responsible for your contacts’ data. Here’s how the roles are split, under Article 28 of the GDPR.

As processor, Realmaker undertakes to:

  • Process the data only on your documented instructions.
  • Not disclose it to third parties without your express instruction, unless required by law.
  • Apply technical and organisational measures to protect it.
  • Help you respond to your contacts’ rights requests.
  • Delete it or return it to you when the service ends, unless the law requires it to be kept.

Your part

As controller, tell your contacts how you process their data and make sure you have a legal basis. You can do it in your welcome message, which you write yourself.

Data

Only what you tell it to ask

Realmaker collects the data needed to qualify each contact, based on the questions you set up. You can switch a question off without deleting it.

  • Identity and contact.

    Name, phone and email, if the contact gives them. On WhatsApp the phone number arrives with the message and Realmaker doesn’t ask for it again.
  • Qualification.

    Whether they’re buying, selling or renting, the property type, area, budget or price, and the answers to your own questions. Tenants are only asked for an approximate income: never payslips or documents.
  • Conversation.

    The messages, their date and the channel. Voice notes are transcribed so they can be answered.

Sample data

  • Retention.

    As long as your agency decides, within legal limits. When the service ends, the data is securely deleted or returned to you.
  • Deletion.

    A contact from their record, with confirmation; your profile and its data from the app.
  • Your contacts’ rights.

    They ask you, as controller, and Realmaker helps you deal with them.

Providers and transfers

Realmaker uses cloud, AI and messaging providers under data processing agreements in line with the GDPR. Messages from your Meta channels go through the US under standard contractual clauses, and any other transfer outside the European Economic Area is made with the safeguards of Article 46 of the GDPR.

Human control

You decide when Realmaker replies

Realmaker handles the first pass. The conversation is yours whenever you want it.

  • Meta’s official connection

    WhatsApp, Instagram and Messenger connect through Meta’s official route. You don’t give us your password: you grant permissions within Meta and can withdraw them whenever you like.

  • Write and it steps aside

    If you reply from your WhatsApp Business app or from Instagram, automatic replies switch off for that contact until you turn them back on.

  • Ask for a person and it alerts you

    First it explains it’s just a few quick questions. If the contact insists, it hands you the conversation and you get the “Human agent request” alert.

  • When it’s done, it steps aside

    With the final message, automatic replies switch off for that contact. If they write again, Realmaker alerts you instead of replying.

  • Pause per channel or per contact

    One switch on each channel and another in each conversation. The connection and the conversations are kept.

Sample data

AI with rules

It asks, organises and never makes things up

Realmaker follows a fixed flow and answers with your portfolio’s data. The personality you choose changes the tone, never the rules.

Sample data

Like any AI, it can make mistakes. That’s why it shows, on every message, what it searched for and what it noted down, and your team checks the lead record before calling.

What it does

  • Asks one question at a time and doesn’t repeat what the contact has already said.
  • Answers with the properties in your synced portfolio.
  • Replies in the contact’s language.
  • If asked whether it’s a person, it says it’s an automated system and offers to put them through to someone on your team.

What it doesn’t do

  • Invent property data.
  • Negotiate prices, discounts, deposits, commissions or conditions.
  • Promise availability when it can’t confirm it.
  • Book outside the agent’s availability windows.
  • Publish, delete or edit properties, or change prices or statuses.
  • Sign contracts, take reservation deposits or handle legal paperwork.

Security measures

Encryption, role-based access and audits

We apply the technical and organisational measures of our information security management system, aligned with the requirements of the UNE‑ISO/IEC 27001 standard.

  • Encrypted credentials

    Your login credentials are never stored in readable form.

  • Role-based access

    Each person only accesses what their role allows.

  • Regular audits

    Security is reviewed regularly, not just once.

  • Incident management

    If there’s a risk to individuals, the AEPD is notified within GDPR deadlines and, where appropriate, so are those affected.

  • Business continuity

    Plans to keep the service running if the unexpected happens.

  • Access log

    The IP of every login is recorded to detect unauthorised use.

And in your account

Your email is verified when you sign up, and card details are never stored in Realmaker: they’re handled by a payment gateway that meets the PCI‑DSS standard. And each user can delete their profile and its data from the app, with confirmation.

Sample data

Connected accounts

Google and your inbox, only if you connect them

  • Google Contacts

    Syncs contacts that have a phone number both ways, once a day and whenever you press “Sync now”. Realmaker only uses them for that sync, and you can disconnect it whenever you like.

  • Google Calendar

    Reads the busy times in your calendar to offer viewings only when you’re free, and creates the confirmed viewing as an event.

  • Portal email

    Gmail, Outlook or another mailbox via IMAP. Realmaker detects idealista, Fotocasa and pisos.com enquiries and reads them with fixed rules per portal, without AI. It replies only once per conversation and never to the portals’ addresses or your own.

Sample data

Data you bring in from Google is only used for the features you connect.

Legal documents

All of it, in writing too

Privacy and rights

Want to exercise your rights or ask about your data?

Email info@betterplaceapp.com stating the right you want to exercise and your account email. If you think we haven’t handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es).

Frequently asked questions

About data and privacy

Can’t find your answer? Write to us and we’ll get back to you.

Contact us
Is it GDPR-compliant? Who owns the data?
Yes. Your agency is the controller of its contacts’ data and Realmaker (Place Analytics, S.L.) acts as processor under Article 28 of the GDPR: it only processes the data to provide you with the service, never for its own purposes, and returns or deletes it when the service ends.
Do I have to tell my contacts that I process their data?
Yes. As controller, your agency must inform them before or at the start of the conversation with Realmaker, and have a valid legal basis. You can do it in the welcome message, which you set up yourself.
Do you use my contacts’ conversations for anything else?
No. Your contacts’ data is processed only on your agency’s behalf and to provide you with the service. It isn’t used for Realmaker’s own purposes or disclosed to third parties without your instruction, unless required by law.
Where is the data processed? Does it leave Europe?
Realmaker belongs to Place Analytics, S.L., a Spanish company subject to the GDPR and Spanish data protection law. WhatsApp, Instagram and Messenger messages go through Meta’s infrastructure, in the US, under standard contractual clauses. If another provider is outside the European Economic Area, the transfer is made with the safeguards of Article 46 of the GDPR.
Does Realmaker hold ISO 27001 certification?
Our information security management system is aligned with the requirements of the UNE‑ISO/IEC 27001 standard; we don’t present it as a certification. It includes encrypted credentials, role-based access control, regular audits, incident management and continuity plans. If your agency needs more detail to assess us as a supplier, just ask.
Does the contact know they’re talking to an AI?
If they ask whether they’re talking to a person, Realmaker replies that it’s an automated system and offers to put them through to someone on your team. If you want it to introduce itself that way from the first message, write it into your welcome message.
What happens to the data if I leave Realmaker?
When the service ends, your contacts’ data is securely deleted or returned to you, unless the law requires it to be kept. You can delete your profile and its connections from the app. If you connected Google Contacts, the contacts in your Google account stay in Google.

Your team, in charge of every conversation

Connect your channels and check every lead record before you call. Try it for 7 days with your own leads.

7 days free · No card needed · Cancel anytime