Last updated: October 14, 2026
Estato is a real estate CRM and business platform operated by Adrian Sutherland, based in Ontario, Canada. The service is available at myestato.com. For privacy-related questions, please contact: adrian@myestato.com.
This policy explains what personal information Estato collects, how it is used, who it is shared with, and your rights as a user. This is plain informational language and is not legal advice. Estato is intended to align with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy law.
When a real estate agent signs up for Estato, we collect their name, email address, and a securely hashed password. Agents may also provide optional profile information such as phone number, brokerage name, and license number.
Agents enter or import data about their own real estate clients into Estato. This may include client names, email addresses, phone numbers, property addresses, notes, deal details, and related transaction information. This data belongs to the agent, and agents are responsible for having a lawful basis to store their clients' information in Estato (see “Agents' Responsibilities” below).
If an agent chooses to connect their Google Calendar, Estato accesses calendar event data solely to provide two-way sync of showings and closings. See “Google User Data” below for full details on how this data is handled.
Subscription payments are processed by Stripe. Estato does not store credit card numbers or full payment card details. We receive only limited billing metadata (such as the last four digits of a card and subscription status) from Stripe to manage your subscription.
Agents may send documents for electronic signature through our DocuSign integration. These documents and any associated envelope data are processed by DocuSign and subject to DocuSign's own privacy policy.
Agents may connect an email account to send and receive messages through Estato. Emails sent and received are stored within Estato to provide the inbox and email history features. Transactional and campaign emails initiated by agents are delivered via Resend.
Agents may optionally connect their Gmail account using OAuth to send client emails directly from their own Gmail address. This uses the gmail.send scope and the Google Gmail API. Gmail data (including sent email content and the agent's Gmail address) is used only to send emails on behalf of the agent and to record outbound email history in Estato. It is not sold, not used for advertising, and not used to train AI or machine learning models. Agents may disconnect Gmail send at any time by reconnecting their Google account without the Gmail scope.
Agents may use voice input to dictate notes and messages. When voice input is used, audio is transmitted to Deepgram for transcription. Audio is not stored by Estato after transcription is complete. Estato opts out of Deepgram's model-improvement program for all transcriptions. Spoken responses are generated via ElevenLabs text-to-speech using the text of the response only.
Estato uses Vercel Web Analytics to collect anonymous, cookieless page-view statistics. No personal information is collected. IP addresses are not stored. This data is used solely to understand which features are used and to improve the platform.
We may collect standard server logs, error reports, and session data as part of normal platform operation. This information is used to maintain service reliability and diagnose issues.
We use the information we collect to:
We do not sell your personal information to third parties. We do not use personal data for advertising.
Estato's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically: calendar data obtained through the Google Calendar API is used only to provide the calendar synchronization feature. It is not sold, not used for advertising, not used to train AI or machine learning models, and is not shared with third parties except as necessary to provide the sync feature itself.
Gmail data obtained through the Gmail API (gmail.send scope) is used only to send emails on behalf of the agent from their own Gmail address. Gmail data is not sold, not used for advertising, not used to train AI or machine learning models, and is not shared with third parties except as necessary to deliver the email send feature. Estato's use of Gmail API data adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Estato relies on the following third-party services to operate. Data is shared with these providers only as necessary to deliver the service:
We do not sell data to any of these providers or any other party.
Agents who use Estato to store information about their own clients are acting as data controllers for that client data. Agents are responsible for ensuring they have a lawful basis under applicable law (including PIPEDA) to collect and store their clients' personal information in Estato.
We retain personal data for as long as an account is active. To request account deletion, email adrian@myestato.com.
Estato uses reasonable technical and organizational safeguards including encryption in transit (HTTPS), row-level security so each agent can only access their own data, and access controls on sensitive credentials. No method of electronic transmission or storage is 100% secure.
Estato is a professional business tool not directed at anyone under 18. We do not knowingly collect personal information from children.
You may have the right to access, correct, or request deletion of your personal data. To exercise these rights, email adrian@myestato.com.
We may update this policy from time to time. The “Last updated” date at the top reflects the latest revision. Continued use of Estato after changes are posted constitutes acceptance of the updated policy.
Questions? Email adrian@myestato.com.
© 2026 Estato. All rights reserved.
Back to home