Privacy Policy

We collect the following categories of personal information:

• Account & identifiers: name, email, phone, brokerage, license number (if provided), password hash, profile photo.
• Listing & client content: property addresses, seller and client names and contact details, listing milestones, notes, documents, and files you upload.
• Commercial & billing: plan, subscription history, and partial card data (last four, brand, expiry) received from our payment processor. We do not store full card numbers.
• Communications: messages you send us, support tickets, and email engagement (opens, clicks) for transactional and opted-in messages.
• Device & usage data: IP address, browser, device type, pages viewed, referring URLs, timestamps, and diagnostic logs.
• Cookies & similar tech: strictly necessary cookies for auth and security; analytics cookies only with consent where required.

We do not knowingly collect Social Security numbers, government IDs, biometric data, precise geolocation, or information from children under 13.

We collect information directly from you, automatically from your device when you use the Services, and from service providers (e.g., payment processor, email delivery, analytics). We do not purchase personal information from data brokers.

• Provide, operate, secure, and improve the Services.
• Authenticate users, prevent fraud and abuse, and enforce our Terms.
• Process payments and manage subscriptions.
• Send transactional emails (receipts, security, account) and, with your consent, product updates.
• Provide customer support and respond to your requests.
• Comply with legal obligations and respond to lawful requests.
• Analyze aggregated, de-identified usage to improve features and performance.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.

Where GDPR or UK GDPR applies, we rely on the following legal bases:

• Contract — to provide the Services you request.
• Legitimate interests — to secure, improve, and market the Services in a proportionate way.
• Consent — for optional cookies and marketing emails (withdrawable at any time).
• Legal obligation — to comply with applicable law.

We share personal information only as described below:

• Service providers (subprocessors) bound by written contracts and confidentiality obligations, including:
  • Cloud hosting & database — [HOSTING PROVIDER, e.g., Lovable Cloud / Supabase]
  • Payments — [PAYMENT PROCESSOR, e.g., Stripe]
  • Transactional email — [EMAIL PROVIDER, e.g., Resend]
  • Analytics & error monitoring — [ANALYTICS PROVIDER]
  • Customer support tooling — [SUPPORT TOOL, if any]
• Your team — content you create in shared workspaces is visible to authorized teammates.
• Legal & safety — when required by law, subpoena, or to protect rights, property, or safety.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice where required.

We are based in the United States and our subprocessors may process data in the U.S. or other jurisdictions. Where required, we rely on Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms to protect personal information transferred from the EEA, UK, or Switzerland.

We retain personal information only as long as needed to provide the Services and for legitimate business or legal purposes. Typical retention periods:

• Account data — for the life of your account, plus up to 90 days after deletion.
• Listing & client content — until you delete it or close your account.
• Billing records — up to 7 years to meet tax and accounting requirements.
• Server & security logs — up to 12 months.

Backups containing your data are purged on a rolling basis, typically within 35 days of deletion.

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS), encryption at rest, least-privilege access controls, audit logging, and regular review of subprocessors. No system is perfectly secure; we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify you and regulators as required by applicable law.

Depending on where you live, you may have rights to access, correct, delete, port, restrict, or object to processing of your personal information, and to withdraw consent. You may exercise these rights from your account settings or by emailing privacy@joingetlisted.com. We will not discriminate against you for exercising your rights.

California residents (CCPA/CPRA): you have the right to know, delete, correct, and limit use of sensitive personal information, and to opt out of sale or sharing. We do not sell or share personal information as defined under the CCPA. You may designate an authorized agent to submit requests on your behalf.

EEA / UK residents: you have the right to lodge a complaint with your local supervisory authority.

We use strictly necessary cookies to keep you signed in and to secure the Services. With your consent (where required), we use analytics cookies to understand usage. You can control cookies through your browser settings; disabling strictly necessary cookies may break parts of the Services.

Property and client information you enter into Get Listed is your data and the data of the clients you represent. You are responsible for ensuring you have the right to upload it and for complying with applicable MLS rules, brokerage policies, and consumer-protection laws (including TCPA and CAN-SPAM where you send communications). We act as a processor of that information on your behalf.

The Services are not directed to children under 13 (or under 16 in the EEA/UK), and we do not knowingly collect their personal information. If you believe a child has provided us with information, contact us and we will delete it.

The Services may link to third-party sites we don't control. Their privacy practices are governed by their own policies.

We may update this Privacy Policy from time to time. Material changes will be announced in-app or by email at least 14 days before they take effect. The "Last updated" date at the top reflects the current version.

This Privacy Policy is governed by the laws of the State of Texas, United States, without regard to conflict-of-laws principles. Disputes will be resolved as set forth in our Terms of Service.

Get Listed, a D&M Production · Druse and Morgan Production LLC
Email: privacy@joingetlisted.com