Privacy Policy

Last Updated: June 7, 2026

RLS Protection

Your listing and lead databases are isolated and encrypted via Row-Level Security policies.

No Public AI Re-training

Injected knowledge chunks are locked to your bot. We never train public models on your properties data.

Local Compliance

Built to conform with Middle East PDPL and US privacy regulations.

1. Overview

CodeNameZee ("we," "our," or "us") provides a specialized AI conversational chatbot builder designed exclusively for real estate agencies and brokers. This Privacy Policy details how we collect, store, share, and protect your information when you register for our services, install our embeddable chat widgets, or converse with our automated agents.

By utilizing CodeNameZee on your domains or subscribing to our billing tiers, you agree to the collection and processing of data described in this document.

2. Information Collected

A. Agency Account Data:

When creating an account, we collect credentials including full name, business email address, agency phone number, and password hashes. We also record billing preferences and subscription tokens managed securely by our payment processor, Stripe.

B. Ingested Real Estate Knowledge:

To train your custom chatbot, you upload PDF inventory documents, text summaries, and target website URLs. These resources are parsed, split, and converted into vectorized representation structures stored inside our database.

C. Visitor Lead Data:

When end-users interact with a CodeNameZee widget on an agency's website, our AI qualifiers prompt visitors for contact information (specifically names, emails, and phone numbers). We log these details, along with complete chat transcripts and timestamps, to deliver leads and instant WhatsApp alerts.

3. Storage, Encryption & Row-Level Security

All application data is hosted in secure, access-restricted databases. We implement Supabase Row Level Security (RLS) layers at the database row level. This ensures that:

Your bot's configurations and trained knowledge files can only be accessed by authenticated administrators from your agency.
Your captured leads and visitor chat transcripts are isolated and can never be retrieved or queried by other CodeNameZee accounts or unauthorized third parties.
Sensitive customer credentials and authorization tokens are encrypted at rest using industry-standard AES-256 protocols.

4. Processing via AI Models

To run the chatbot's cognitive brain, we transmit vectorized content snippets and user queries to OpenAI's endpoints.

Data Protection Guarantee: Data transmitted via our API to OpenAI is handled under custom agreements which strictly prohibit OpenAI from using your private listings, leads data, or visitor transcripts to train their base public models.

5. Data Sharing and Integrations

We do not sell, rent, or distribute your data. We share details only with integrated infrastructure providers required to operate the SaaS platform:

Stripe: For processing subscriptions and billing details securely.
Twilio: For executing automated real-time WhatsApp qualification alerts.
Resend: For dispatching automated onboarding and support emails.

6. Middle East & US Regulatory Compliance

CodeNameZee is built with localized data protection policies:

A. United States (CCPA/CPRA Standards):

We process personal data respecting user consent, adhering to CCPA/CPRA specifications. Visitors can request deletion of their lead details at any point by contacting the host agency.

B. UAE & Gulf Region (PDPL Standards):

We respect cross-border data protection principles. Leads collected on behalf of Middle East brokerages are managed in compliant computing environments with robust security controls.

7. Contact Information

If you have any questions, wish to exercise your rights of data access, or request a complete wipe of your agency account and visitor logs, please reach out to us:

Email: privacy@codenamezee.com

Return to Home