Privacy Policy

1. Introduction

This Privacy Policy (the “Policy”) describes how The Listing Site LLC (“the Company,” “we,” “us,” or “our”), an Ohio limited liability company, collects, uses, shares, and protects personal information when you use our website at thelistingsite.com and our real estate listing website generator platform (collectively, the “Service”).

This Policy applies to licensed real estate professionals (“Agents”) who create accounts and use the Service. The Service generates single-property listing websites that display Agent contact information (name, email, phone number) so that prospective buyers or interested parties may contact the Agent directly. The Company does not collect, process, or store personal information from visitors to those Generated Websites.

The Service is directed to and intended for users in the United States. We do not intentionally make the Service available outside the United States. The Service is not intended for individuals under the age of 18. By using the Service, you represent that you are at least 18 years old.

By creating an account or using the Service, you consent to the practices described in this Policy. If you do not agree, do not use the Service. This Policy is incorporated into and subject to our Terms of Service.

2. Controller

The Listing Site LLC is the entity responsible for the processing of personal information described in this Policy. For questions about our data practices, contact us at legal@thelistingsite.com.

3. Information We Collect

3.1 Information You Provide Directly

When you create an account and use the Service, we collect the following information:

1. Name
2. Email address
3. Phone number
4. Phone number for account verification (see Section 3.5)
5. Real estate license information (license number, state of licensure)
6. Brokerage name and information
7. Payment and billing information (processed by Stripe; we do not store full payment card details)
8. Listing data and content you provide or import for website generation
9. Website configuration preferences and settings
10. Support communications and attachments you send to us

3.2 Information Collected Automatically

When you access the Service, we automatically collect certain technical information:

1. IP address (used to derive coarse location at the city or region level)
2. Browser type and version
3. Device type and operating system
4. Pages visited and features used within the Service
5. Date and time of access
6. Referring URL
7. Usage patterns and interactions with the Service
8. Diagnostic information including crash or error reports

We use Google Analytics to collect and analyze usage data on thelistingsite.com. Google Analytics uses cookies and similar technologies to track interactions with the Service. We configure analytics to a minimal, privacy-forward baseline and disable advertising features. You can learn more about Google’s data practices at https://policies.google.com/privacy and opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-on.

3.3 Information from Third-Party Sources

When you use the Service to generate a listing website, we may retrieve listing data (property details, photos, descriptions, and associated metadata) from third-party data sources on your behalf, based on information you provide such as property addresses or listing identifiers. As described in our Terms of Service, you represent and warrant that you are the owner or authorized licensee of all listing data retrieved through the Service. We do not obtain information from data brokers.

3.4 Information We Do Not Collect

We do not collect personal information from visitors to the Generated Websites created through the Service. Generated Websites display Agent contact information (name, email, phone) so that visitors may contact the Agent directly using their own email client or phone. No visitor data is transmitted to or through the Company’s systems. We do not collect or use mobile advertising identifiers. We do not intentionally collect sensitive personal information such as protected health information under HIPAA, Social Security numbers, financial account numbers, government-issued identification numbers, or biometric data. The Service is not designed to handle sensitive data, and you should not upload or input such information. If we discover sensitive data has been submitted, we may delete it without notice.

3.5 Phone Verification Data

When you verify your phone number as required by the Terms of Service (Section 3.8), we collect your phone number for the purpose of sending a one-time verification code via SMS. Your phone number is stored on your authentication record (hosted by Supabase) for the life of your account and is used solely for identity verification. We do not use your verification phone number for marketing, promotional messaging, or any purpose other than account verification. For details on how this data is shared and retained, see Sections 6.1 and 8.

4. How We Use Your Information

We use the personal information we collect for the following purposes:

1. To create and manage your account
2. To verify your identity via phone number as described in Section 3.5 and the Terms of Service
3. To generate and host listing websites on your behalf
4. To process payments and manage your subscription
5. To retrieve listing data from third-party sources at your direction
6. To provide AI-assisted features such as image processing and website generation
7. To communicate with you about your account, including transactional notifications and service announcements
8. To monitor, maintain, and improve the Service
9. To detect and prevent fraud, abuse, and security incidents
10. To comply with legal obligations
11. To enforce our Terms of Service

We do not use your personal information for marketing purposes without your consent. We do not use your photos, listing content, or third-party-sourced data to train machine learning models, whether our own or those of our service providers.

5. Sale of Personal Information

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We honor Global Privacy Control (“GPC”) signals received through your browser on our web surfaces. We do not collect or use mobile advertising identifiers such as IDFA or Google Advertising ID. We do not knowingly sell or share the personal information of consumers under 16.

6. How We Share Your Information

We share your personal information only in the following circumstances:

6.1 Service Providers and Sub-Processors

We use third-party service providers to operate, secure, and support the Service. Each provider receives only the data necessary to perform its function. Where applicable, each service provider is bound by a Data Processing Agreement (“DPA”) requiring them to process personal information only to provide contracted services, to implement appropriate security measures, and to refrain from using data for unrelated purposes. Our current service providers are:

We will update this table when we add or change service providers and will provide notice of material changes. We may add, remove, or replace providers at any time, and your continued use of the Service after updates constitutes acceptance. Certain infrastructure providers (such as Supabase, Vercel, and Google Analytics) may have the right under their own terms to use aggregated or anonymized usage data derived from your activity for their own business purposes. By using the Service, you acknowledge and agree to those providers’ rights as described in their respective terms of service and privacy policies.

6.2 AI Processing

The Service uses AI providers (OpenAI for image processing and Anthropic for website generation) to deliver certain features. These providers are each bound by a DPA. Data sent to these providers is used solely to process your request and return a result. We do not permit these providers to train their models on your data, and they are contractually prohibited from doing so. We do not use your content to train our own models.

6.3 Phone Verification Processing

The Service uses Supabase as its authentication provider and Twilio as its SMS delivery provider to perform phone verification. When you verify your phone number, your phone number is transmitted to Supabase, which stores it on your authentication record and sends it to Twilio solely for the purpose of delivering a one-time verification code via SMS. Neither Supabase nor Twilio is permitted to use your phone number for marketing, model training, or any purpose unrelated to providing their contracted services. Both providers are bound by Data Processing Agreements.

6.4 De-Identified and Aggregated Information

We may share information that cannot reasonably be used to identify you to help us understand product usage and improve the Service. We do not permit re-identification of de-identified data.

6.5 Legal and Safety Disclosures

We may disclose your information if we believe in good faith that disclosure is necessary to: (a) comply with applicable law, regulation, legal process, or governmental request; (b) enforce our Terms of Service; (c) detect, prevent, or address fraud, security, or technical issues; or (d) protect the rights, property, or safety of the Company, our users, or the public.

6.6 Business Transfers

If the Company is involved in a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred as part of that transaction. The successor entity will be subject to this Policy or a policy at least as protective. We will provide notice before your information becomes subject to a different privacy policy.

6.7 With Your Consent

We may share your information in other circumstances with your explicit consent.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on thelistingsite.com to operate the Service and analyze usage. The types of cookies we use include:

Essential cookies: Required for the Service to function, including authentication and session management. These cannot be disabled.

Analytics cookies: Used by Google Analytics to understand how you interact with the Service, helping us improve functionality and user experience. You can opt out of these by using the Google Analytics Opt-Out Browser Add-on or adjusting your browser settings.

We do not use advertising cookies, retargeting pixels, or social media tracking pixels.

Most web browsers allow you to control cookies through their settings. Disabling essential cookies may impair your ability to use the Service.

Do Not Track and Global Privacy Control. We do not respond to browser Do Not Track (“DNT”) signals because a common standard has not been established. However, we honor Global Privacy Control (“GPC”) signals as described in Section 5.

8. Data Retention

We keep personal information only as long as needed for the purposes described in this Policy, then delete it from active systems and allow it to expire from backups on a fixed schedule. Our standard retention schedule is as follows:

8.1 Account Information

Retained while your account is active. Deleted from active systems within thirty (30) days after account closure or termination. Backup copies roll off within ninety (90) days through scheduled rotation.

8.2 Listing Data and Content

Retained while your account is active. Listing data and User Content associated with your account are deleted from active systems within thirty (30) days after account closure.

8.3 Generated Websites

Published Generated Websites will remain accessible for a wind-down period of up to thirty (30) days after account closure, after which they will be taken offline and associated data deleted.

8.4 Third-Party Data

Cached listing data retrieved from third-party sources is retained only as long as reasonably necessary to provide Service features and is subject to applicable third-party terms.

8.5 Phone Verification Data

Your phone number is stored on your Supabase authentication record for the life of your account. Upon account closure or termination, your phone number is deleted from active systems within thirty (30) days. Backup copies containing phone verification data roll off within ninety (90) days through scheduled rotation. Twilio may retain transactional logs (such as delivery receipts) in accordance with its own data retention policies.

8.6 Billing and Payment Records

Transaction records, invoices, subscription history, and related billing data are retained for a minimum of three (3) years after the transaction date, or longer where required by applicable tax, accounting, or other legal obligations. Full payment card details are not stored by the Company; payment processing is handled by Stripe in accordance with Stripe’s data retention policies.

8.7 Analytics Events

Retained for twelve (12) months, then deleted.

8.8 Crash and Diagnostic Data

Retained for ninety (90) days, then deleted.

8.9 Application and Security Logs

Retained for ninety (90) days, then deleted.

8.10 Support Communications

Retained for twelve (12) months, then deleted.

8.11 Backups

Encrypted backups roll off within ninety (90) days through scheduled rotation and are not used for production processing.

8.12 De-Identified and Aggregated Data

May be retained without a set time limit and will not be used to re-identify individuals.

8.13 Legal Holds

We may retain specific records for longer periods where we reasonably believe it is necessary to comply with law, resolve disputes, or protect the Service and users. We limit such retention to what is necessary and delete when those purposes conclude.

8.14 Lifecycle Enforcement

We use storage lifecycle rules, time-based deletion jobs, and related technical controls to enforce the retention schedule above.

9. Data Security

We employ administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

1. Encryption. Encryption in transit using Transport Layer Security (TLS) version 1.2 or later. Encryption at rest using server-side encryption with a managed key service or equivalent.
2. Access controls. Least-privilege access policies, multi-factor authentication for production systems, and role-based access to administrative tools.
3. Key and secret management. Keys and secrets are stored in a secrets management system. We avoid hard-coded credentials and favor short-lived credentials where possible.
4. Vulnerability management. Routine scanning and prompt remediation. Critical vulnerabilities are addressed on an expedited basis.
5. Monitoring. Regular monitoring for security incidents, unauthorized access attempts, and anomalous activity.
6. Business continuity. Regular backups and continuity planning designed to restore the Service within a reasonable period in the event of disruption.
7. Incident response. We investigate potential security incidents and notify affected users without undue delay and within a commercially reasonable outer bound of seventy-two (72) hours where required or permitted by law.

No method of transmission or storage is perfectly secure. We work to protect personal information but cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

10. Your Rights and Choices

We honor core U.S. privacy rights for all users, even if a particular state law does not require it. Subject to legal limits, you may exercise the following rights:

10.1 Access

Request a copy of the personal information we maintain about you.

10.2 Correction

You may access and update your account information at any time through your web dashboard. You may also request correction of inaccurate information by contacting us at support@thelistingsite.com.

10.3 Deletion

You may request deletion of your account and personal information by contacting us at legal@thelistingsite.com. We will delete from active systems within thirty (30) days and allow backups to expire within ninety (90) days, subject to the retention exceptions described in Section 8.

10.4 Data Portability

You may request a portable copy of certain personal information in a commonly used, machine-readable format by contacting us at legal@thelistingsite.com.

10.5 Appeal

If we deny your request, you may appeal through the same channel you used to submit the request. We will respond to appeals within forty-five (45) days. If your appeal is denied and applicable state law gives you the right to contact your state Attorney General, our response will describe how to do so.

10.6 Non-Discrimination

We will not discriminate against you for exercising your privacy rights.

10.7 Opt-Out of Analytics

You may opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-on or by adjusting your browser cookie settings.

10.8 Communications

We send transactional communications related to your account and the Service (e.g., payment confirmations, service notifications, and service announcements). These are necessary for the operation of your account and cannot be opted out of while your account is active. You can opt out of non-transactional communications at any time. If we introduce marketing communications in the future, you will be able to opt out at any time.

10.9 How to Submit a Request

To exercise any of the rights described above, email us at legal@thelistingsite.com. We will verify your identity using the information associated with your account, and may use an email challenge for confirmation. Authorized agents may submit requests on behalf of a user where allowed by law, subject to verification of both the agent and the user. We may deny or limit requests that are excessive or unfounded.

11. State Privacy Rights and Notice at Collection

11.1 California Residents (CCPA/CPRA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete, the right to correct, the right to opt out of sale or sharing, and the right to non-discrimination for exercising your rights. We do not sell or share (as defined by the CCPA) your personal information. To exercise your rights, contact us at legal@thelistingsite.com.

11.2 Virginia, Colorado, Connecticut, and Other States

Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, and others) may have similar rights including access, correction, deletion, data portability, and the right to opt out of certain processing. To exercise your rights, contact us at legal@thelistingsite.com.

11.3 Notice at Collection

We provide the following summary of categories of personal information for transparency. We collect the categories listed below from you or your device and use them for the purposes described in Section 4. We retain them for the periods described in Section 8.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not knowingly sell or share the personal information of consumers under 16.

12. Government Requests

We require valid legal process before disclosing user information to law enforcement or other government authorities, unless disclosure is necessary to prevent imminent harm. Where legally permitted, we will notify affected users before producing their information so they can seek protection.

13. Artificial Intelligence and Service Providers

We use third-party AI service providers to deliver the Service. Our AI providers are each bound by a Data Processing Agreement (“DPA”) that requires them to process information only as instructed, to protect input information, and to prevent the use of data to train artificial intelligence systems. Specifically:

OpenAI processes images you upload or import for the purpose of image optimization and enhancement. Image data is used solely to process your request and is not retained by OpenAI for training purposes.

Anthropic (Claude) processes listing data and content to generate website code and layouts. Data is used solely to process your request and is not retained by Anthropic for training purposes.

We do not use your photos, listing content, or any user-provided data to train machine learning models, whether our own or those of our service providers. We may add, remove, or replace AI providers at any time and will update the sub-processor table in Section 6.1 accordingly.

14. Children’s Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will promptly delete that information. If you believe a child has provided us with personal information, please contact us at legal@thelistingsite.com.

15. Third-Party Links

The Service may contain links to third-party websites or services that are not operated by the Company. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.

16. Data Residency

Primary storage and routine processing occur in data centers located in the United States. We do not intentionally transfer personal information outside the United States except as required to provide the Service or comply with law. If you access the Service from outside the United States, you understand that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to such transfers.

17. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide notice via email to the address associated with your account or by prominent posting on thelistingsite.com. The “Effective” date at the top of this Policy reflects the date of the most recent update. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy. We encourage you to review this Policy periodically.

18. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about our data practices, please contact us:

The Listing Site LLC
2722 Erie Ave Ste 219 #799744
Cincinnati, Ohio 45208

Privacy and legal inquiries: legal@thelistingsite.com
General support: support@thelistingsite.com
Security reports: legal@thelistingsite.com