Privacy, without the fine-print fog.

“GREVA,” “we,” and “us” refer to the GREVA Real Estate Virtual Assistant service. This policy explains how information is handled when you browse this website, contact us, request a consultation or 15-day trial, or engage GREVA for services.

When GREVA works inside a client's CRM, MLS-related workflow, email, calendar, transaction file, or property management process, the client normally decides why that information is being used. GREVA handles it only for the agreed support purpose and the client remains responsible for the lawful source, accuracy, and instructions for that data.

Depending on how you interact with GREVA, information may include:

• contact details such as name, email, phone or WhatsApp number, company or brokerage, city, country, and preferred contact method;
• inquiry details such as services of interest, preferred consultation time, business type, workflow notes, and messages you choose to share;
• engagement details such as approved instructions, task records, status updates, access permissions, and communications needed to deliver and document the service;
• client-authorized working data, which may include listing, lead, transaction, tenant, vendor, or marketing information required for an assigned task; and
• limited technical data such as IP address, browser and device information, timestamps, referring pages, and security logs generated when the website or its hosting systems are used.

Information usually comes from you, from a person you authorize, from the client systems used for the engagement, or from standard website and security logs. Please do not send passwords, payment card details, government identifiers, or sensitive transaction documents through an ordinary website form.

GREVA uses information to:

• reply to inquiries and arrange a consultation;
• assess, plan, and administer a requested trial or service engagement;
• complete authorized tasks, communicate progress, and maintain an approval trail;
• protect accounts, investigate problems, and keep the website and service secure;
• improve service workflows using de-identified or aggregated observations where practical; and
• meet contractual, accounting, dispute-resolution, and legal obligations.

GREVA does not use client files, lead databases, transaction information, or private communications to build advertising profiles. Website inquiry details are not repurposed for unrelated marketing.

Real estate work can involve confidential and time-sensitive information. Before substantive work begins, the task scope, approved systems, communication method, approval boundaries, and any retention or return requirements should be documented. An NDA or data processing addendum can be discussed and put in place by agreement before sensitive work begins.

GREVA does not make licensed real estate decisions, give legal or tax advice, negotiate on a client's behalf, or give final approval to a listing, contract, advertisement, or transaction. Those decisions remain with the client and the appropriately licensed or authorized professional.

Information is shared only when needed to operate the website, arrange or deliver the service, comply with law, protect rights and security, or follow your direction. This may involve carefully selected hosting, email, scheduling, file storage, CRM, communications, or other service providers. Providers are expected to use information only for the service they supply and to protect it appropriately.

GREVA supports clients in Canada and the United States from India, and client-selected tools may store information in other countries. This means information can be accessed or processed outside your province, state, or country and may be subject to local law. Where Canada's PIPEDA applies, the transferring organization remains accountable and contractual or other safeguards are used to support a comparable level of protection.

GREVA does not sell personal information. GREVA also does not share personal information for cross-context behavioural advertising. If that practice ever changes, this policy and any legally required notice or choice will be updated before the change takes effect.

Safeguards are selected according to the information and the agreed workflow. Practical measures may include least-privilege or delegated access, separate work accounts, multi-factor authentication where the client platform supports it, secure credential sharing, access reviews, device safeguards, defined approval steps, and prompt access removal at the end of an engagement.

Confidentiality expectations are part of onboarding and can be reinforced through an NDA, service agreement, and data processing terms. Suspected loss, unauthorized access, or disclosure is assessed, contained, documented, and communicated to the affected client or authority when the agreement or applicable law requires it.

No online service can promise absolute security. GREVA asks clients to use appropriate platform roles instead of shared master credentials whenever possible and to report an access concern promptly.

Information is kept only as long as reasonably needed for the stated purpose, the active relationship, agreed return or deletion instructions, security and backup cycles, or legal and accounting duties. The service agreement may set a more specific retention schedule for client workflow data.

When information is no longer required, GREVA takes reasonable steps to delete, return, or de-identify it, subject to lawful backup, recordkeeping, dispute, and security needs. Clients should also remove GREVA's permissions from their systems when an engagement ends.

Depending on where you live and which law applies, you may ask to access, correct, or delete personal information; withdraw consent for an optional use; object to or restrict some processing; or ask how information has been used or shared. GREVA may need to verify identity and authority before acting on a request.

PIPEDA rights apply where Canadian privacy law governs the handling. California residents receive CCPA rights only when the law applies to GREVA and the relevant activity. India's Digital Personal Data Protection Act and Rules will be followed as their provisions take effect. GREVA will not discriminate against someone for making a valid privacy request.

If GREVA holds information only on behalf of a client, the request may need to be directed to that client because they control the underlying record. GREVA will reasonably support the client's response where required.

Sending an inquiry or requesting a consultation allows GREVA to respond about that request. It does not automatically subscribe you to ongoing promotional messages. Marketing emails or texts are sent with consent or another permission recognized by applicable law, including Canada's CASL and the U.S. CAN-SPAM Act where relevant.

Marketing messages will identify the sender, include required contact details, and provide a practical way to unsubscribe. Transactional messages about an inquiry, appointment, trial, or active service may still be sent when needed to complete that interaction.

The website may use strictly necessary technical mechanisms for security or form operation. GREVA does not currently use the website for behavioural advertising. Any future optional analytics or advertising technology will be introduced with an updated notice and consent choice where required.

GREVA's website and services are intended for business professionals, not children. GREVA does not knowingly collect personal information from children through this website.

This policy may change as services, providers, or legal requirements develop. A revised date will appear at the top, and material changes will be highlighted or communicated when appropriate.

For website service boundaries and client responsibilities, read the Terms of Use.