Privacy Policy

This Privacy Policy explains how Listing Stack LLC ("ListingStack," "we," "us") collects, uses, and shares information when you use our website, applications, and related services (together, the "Service").

1. Who we are

ListingStack is a product of Listing Stack LLC, a Washington limited liability company. Our registered agent is NW Registered Agent at 522 W Riverside Ave Suite N, Spokane, WA 99201. For privacy questions, contact us at privacy@listing-stack.com.

2. What we collect

Information you provide

• Account information — name, email address, password (via our identity provider), profile photo, headline, bio, public URL slug, and phone number if you choose to provide one.
• Content you upload — contacts you add or import (including names, emails, phone numbers, tags, notes), listings you create (addresses, prices, photos, descriptions), sales and transaction records, email content you compose, and documents you upload to listings or sales.
• Communications — messages you send through the Service (including email bodies), records of emails opened, and any support correspondence you send us.
• Billing information — when paid plans are active, your billing name, address, and payment details (processed by our payments provider; we do not store full card numbers).

Information collected automatically

• Usage data — pages visited, actions taken, approximate time spent, referrer, and similar analytics needed to operate and improve the Service.
• Device and log data — IP address, browser type, operating system, timestamps, and error diagnostics.
• Cookies and local storage — session cookies for authentication, preference cookies for UI state. See Cookies & tracking.

Information from third parties

• Identity provider — if you sign in with Google or a similar provider, we receive your name, email address, and profile photo from that provider.
• Inbound leads— when someone submits your public agent site's contact form, we receive the name, email, phone (if provided), and message on your behalf.

3. How we use it

We use the information we collect to:

• Provide, maintain, and improve the Service
• Authenticate you and protect your account
• Deliver the emails and notifications you request
• Process payments and manage subscriptions
• Debug problems, prevent abuse, and monitor system health
• Comply with legal obligations and enforce our Terms
• With your consent, send product updates and announcements

We do not sell your personal information, and we do not use your content (your contacts, listings, or emails) to train AI models outside of processing you explicitly request (for example, generating a drip email on your behalf).

4. Service providers

We use a small set of vendors to run the Service. These "subprocessors" receive only the data necessary for their role and are contractually obligated to protect it:

• Supabase (Delaware, US) — database and file storage
• Clerk (Delaware, US) — identity and authentication
• Vercel (Delaware, US) — application hosting and edge delivery
• Resend (Delaware, US) — transactional and marketing email delivery
• Anthropic (Delaware, US) — AI-assisted email drafting
• Stripe (Delaware, US) — payment processing, when paid plans are active

We may add or change subprocessors; we'll update this list and notify account holders of material changes.

5. Google Calendar data

ListingStack offers an optional Google Calendar integration. If you choose to connect your Google account, ListingStack requests the https://www.googleapis.com/auth/calendar.eventsscope ("View and edit events on all your calendars").

What we access.With your explicit consent, we access the events on your Google Calendar. We do not access your calendars' sharing settings, access-control lists, or any other Google data.

How we use it. We use this access solely to provide the calendar feature within ListingStack:

• to read your upcoming events and display your schedule alongside your contacts, listings, and deals; and
• to create, update, and delete the appointments you schedule or change inside ListingStack, writing those changes back to your Google Calendar so the two stay in sync.

How we store it.Event data needed to display and sync your schedule is stored in our database. Your Google access and refresh tokens are encrypted at rest. You can disconnect your Google account at any time from the Calendar page; doing so revokes ListingStack's access and removes the stored connection.

How we share it. We do not sell, rent, or transfer your Google Calendar data to third parties, and we do not use it for advertising. We do not allow humans to read this data except: (a) with your explicit consent; (b) where necessary for security purposes, such as investigating abuse; (c) to comply with applicable law; or (d) where the data has been aggregated and anonymized for internal operations.

Limited Use.Listing Stack's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Sharing & disclosure

We share information only in these circumstances:

• With subprocessors (listed above) to operate the Service.
• With people you direct us to share with — for example, when you send an email through the Service to a contact, the recipient sees that communication.
• For legal reasons — to comply with valid legal process, to enforce our Terms, or to protect the rights, safety, or property of ListingStack or others.
• In a business transfer— if we're involved in a merger, acquisition, or sale of assets, information may transfer to the successor entity. We'll provide notice before that happens.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information; to object to or restrict certain processing; and to withdraw consent. Residents of California, the EU/EEA, the UK, and similar jurisdictions have specific rights under CCPA, GDPR, or equivalent laws.

To exercise any right, email privacy@listing-stack.com. We'll respond within the timeframes required by applicable law. You can also delete most data yourself directly in the app — deleting a contact or cancelling your account removes the associated records.

8. Cookies & tracking

We use session cookies set by our identity provider to keep you signed in, and first-party cookies and local storage for preferences (sidebar state, selected filters). We don't use third-party advertising cookies.

Drip emails include a 1×1 tracking pixel so recipients' opens can be counted. Opens are associated with the recipient's email address for the agent's analytics; we don't share open data with third parties.

9. Security

We use industry-standard measures to protect your data: encryption in transit (TLS), encryption at rest for production databases, access controls and audit logging on internal systems, and regular dependency patching. No system is perfectly secure. If we learn of a breach that affects your data, we'll notify you as required by applicable law.

10. Data retention

We retain your information for as long as your account is active. When you close your account, we delete or anonymize your data within 90 days, except where we're required to keep it longer for legal, tax, or accounting reasons. Email delivery logs are retained for up to two years for deliverability analysis.

11. Children

ListingStack is a business tool for licensed real estate professionals and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, email privacy@listing-stack.com and we'll delete it.

12. Changes

We may update this Policy from time to time. Material changes will be posted here with a new "Last updated" date, and account holders will receive email notice. Continued use after changes take effect constitutes acceptance.

13. Contact

Listing Stack LLC
c/o NW Registered Agent
522 W Riverside Ave Suite N
Spokane, WA 99201
privacy@listing-stack.com