GDPR and CCPA at ReBillion
ReBillion is the AI-native transaction coordinator with EU and California privacy posture aligned to GDPR and CCPA. The AI control plane for real estate that respects data subject rights.
Most ReBillion customers are U.S. brokerages, but data subjects often include EU residents (relocation buyers) and California residents. Below is our posture across both regimes.
Data subject rights — GDPR
Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), objection (Art. 21). Process the request via /contact; response within 30 days.
Data subject rights — CCPA/CPRA
Right to know, delete, correct, opt out of sale (we don't sell), limit use of sensitive personal information. Process the request via /contact; response within 45 days.
Lawful basis for processing
Contract performance (Art. 6(1)(b)) for transaction parties. Legitimate interest (Art. 6(1)(f)) for incidental contacts (counterparties named in contracts). Consent where required.
Records-retention conflict resolution
Where state real estate records-retention law (typically 5 to 7 years per state) conflicts with an individual erasure request, the records-retention obligation generally governs. We document the conflict resolution per request.
Sub-processors and EU SCCs
EU residents' data processed under Standard Contractual Clauses (2021). Sub-processor list published at /legal/sub-processors and updated within 30 days of change.
DPA on request
Standard Data Processing Addendum available. EU SCCs included. Reach out via /contact.
Frequently asked
Are you GDPR compliant?
Aligned to GDPR for EU data subjects. Standard DPA available.
Are you CCPA compliant?
Yes. We don't sell personal information.
Where is EU data stored?
U.S. by default with SCCs. EU residency available on Enterprise.
How long do you retain records?
Per state real estate records-retention law (typically 5 to 7 years) and contractual obligations.
Do you transfer data outside the EU?
Yes under SCCs (2021). EU residency option available.
Can I get a DPA?
Yes. Reach out via /contact.
See the AI control plane on your real files.
30-minute live demo with the founders. No sandbox; we run on your contracts.