Security

Your company’s data stays separated.

Your leads, calls, inventory and collections belong to your company. Here is how Realty Desk keeps them that way — only what we can show, nothing we can’t.

Layer 01CompanyEvery query is scoped to your company.
Layer 02RoleWhat each kind of member is allowed to do.
Layer 03PersonExtra grants for one member, when needed.
Layer 04Project & campaignWhich leads, calls and visits each person sees.
Layer 05DeviceEach device is its own session you can end.
Company-level isolation

One company, one set of data. Every query knows whose it is.

Realty Desk is one service built for many companies, and each company’s data is kept apart. Every query Realty Desk runs is scoped to your company, so your leads, recordings and ledgers are never mixed with anyone else’s.

Your companyLeadsCalls & recordingsInventoryDemand & collectionsTeam
Separated
Another companyLeadsCalls & recordingsInventoryDemand & collectionsTeam
Roles · people · projects · campaigns

Everyone sees what their work needs — and nothing more.

Access is decided in one place — Team. What’s ticked there decides every screen, on the web and on the phone.

Team · project accessSample data
MemberSkylineRiverviewGreen Acres
OwnerAdmin✓✓✓
Sales managerManager✓✓·
Pallavi DekaTelecaller✓··
Rupam KalitaTelecaller·✓·
A telecaller sees only the leads, calls and visits of the projects and campaigns ticked for them.
Role permissionsEach role — owner, manager, telecaller — comes with its own set of permissions.
Per-user accessOne person can be given extra permissions beyond their role — a senior caller, say.
Project permissionsA person sees the leads, calls, visits and units of the projects they’re given.
Campaign accessWithin a project, access can be narrowed to specific campaigns.
Pallavi Deka · devicesSample data
Chrome · WindowsOffice · signed in today
Realty Desk app · AndroidPhone · active now
Chrome · AndroidSigned in 3 days ago
Sign out everywhereSuspend member
Takes effect within seconds — not when a login token happens to expire.
Sessions & devices

When access should end, it ends within seconds.

  • Each device is its own session. Signing out on one phone doesn’t sign you out on the office computer.
  • Sign out everywhere. An admin can end every session a member has, on every device.
  • Suspend or deactivate. When someone leaves, their access stops within seconds — not whenever a login token expires.
Data storage & infrastructure

Hosted in India.

01Mumbai regionThe app and the database both run in Google Cloud’s Mumbai region, in India.
02Google Cloud RunRealty Desk’s servers run on Google Cloud Run.
03Managed PostgreSQLYour data lives in a managed PostgreSQL database.
04HTTPS everywhereEvery connection — web, phone app and integrations — goes over HTTPS.
Recordings & audit log

Private recordings, and a record of who changed what.

Recording · Rahul SharmaSample data
PrivateSigned linkExpires shortly
Recordings are not public files. People with access open them through a signed link that stops working soon after.
Audit logSample data
10:42Owner · Changed project access for Rupam Kalita
10:40Owner · Signed Pallavi Deka out of every device
09:15Sales manager · Exported leads to Excel
YesterdayOwner · Removed a member
YesterdayRupam Kalita · Changed password

Sensitive actions — signing in, changing a password, changing someone’s access, signing a member out, removing a member, exporting data — are written to an audit log.

FAQ

What owners ask about their data.

For how we handle personal data, read our privacy policy and terms.

Where is Realty Desk data stored?

In India. Realty Desk runs on Google Cloud Run with a managed PostgreSQL database, both in the Mumbai region.

Can another company see our leads?

No. Each company’s data is kept separate, and every query Realty Desk runs is scoped to one company.

Can a telecaller see leads from other projects?

No. Access is given by project and campaign. A telecaller sees only the leads, calls and visits of the projects and campaigns ticked for them in Team.

What happens when someone leaves the team?

An admin can suspend or deactivate the member, or sign them out of every device. It takes effect within seconds, not when a login token happens to expire.

Are call recordings public?

No. Recordings are kept private and open only through short-lived signed links.

Your real-estate operation has enough moving parts. They shouldn’t live in different systems.

See a lead enterget calledbecome a site visita bookingmove into collections