PRIVACY POLICY

Effective: May 20, 2026

1. Who We Are
This Privacy Policy describes how RealtyListPro, LLC ("RealtyListPro," "we," "us," or "our") collects, uses, and shares information about you when you use the RealtyListPro mobile application and the RealtyListPro Studio web application (collectively, the "Service").
RealtyListPro, LLC
4944 Pilgrimport Road
Sodus, NY 14551
support@realtylistpro.com
RealtyListPro, LLC is a limited liability company organized under the laws of the State of New York, United States.

2. Scope and Eligibility
The Service is intended for residents of the United States who are 18 years of age or older. The Service is not directed to and not intended for use by individuals under 18 years of age, or by residents of the European Union, the United Kingdom, or any other jurisdiction with comprehensive data protection regulations such as the GDPR.
If you reside in the European Union, the United Kingdom, or a similar jurisdiction, please do not use the Service. If we become aware that we have collected personal information from a resident of such a jurisdiction, we will delete that information upon request to support@realtylistpro.com.

3. Information We Collect
3.1 Information You Provide
When you create an account, book a photography session, or otherwise interact with the Service, we collect:
Account information: name, email address, phone number, brokerage affiliation, and a one-way cryptographic hash of your password. We never store your plaintext password.
Profile information: your email verification status and notification preferences.
Booking information: the property address for which you are booking a photography session, estimated square footage, optional estimated property price, your access preferences (e.g., lockbox, keyless entry, passcode), scheduling preferences, and any notes you provide to the photographer.
Payment information: when you complete a booking, you provide payment details directly to our payment processor, Stripe. We do not store your full payment card number. We retain only the payment status, transaction amounts, the last four digits of your card, the card brand, and a Stripe-issued transaction identifier needed to administer your account.
Communications: if you contact us at support@realtylistpro.com or through the Service, we retain the content of your messages.
3.2 Information Collected Automatically
When you use the Service, we automatically collect:
Device and request information: your IP address, device type, operating system version, and timestamps of your requests. This information is collected by our hosting providers (see Section 5) and is used for security, debugging, and operating the Service.
Application error data: when the Service encounters an error in the application running on your device, we collect a description of the error, the device and operating system version, and a redacted stack trace. We use Sentry for this purpose (see Section 5). We do not include your password, payment information, or message contents in error reports.
3.3 Information from Third Parties
Email delivery status from our email service provider, Postmark, including whether transactional emails (such as booking confirmations, reset links, and verification links) were delivered, opened, or bounced.
Payment status from Stripe, including whether a payment succeeded, failed, was refunded, or is disputed.
Geocoding data from Google Places, when you enter a property address. We send your typed address to Google to retrieve standardized address components and approximate latitude/longitude. We do not send your account identifier or other personal information to Google.

4. How We Use Your Information
We use the information we collect to:
Provide, maintain, and operate the Service, including processing your bookings, scheduling photography sessions, delivering media to you, and processing payments;
Communicate with you about your account, your bookings, and our Service, including sending transactional emails such as booking confirmations, media delivery notifications, password reset links, and email verification links;
Verify your identity and authenticate your access to the Service;
Detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms of Service;
Debug and improve the Service, including by analyzing error reports;
Comply with our legal obligations, including tax and financial recordkeeping under U.S. federal and New York State law; and
Enforce our Terms of Service and any agreements between you and us.
We do not use your personal information for advertising. We do not sell your personal information. We do not share your personal information with third parties for their own marketing purposes.

5. How We Share Information — Service Providers
We rely on a small number of third-party service providers ("sub-processors") to operate the Service. Each receives only the information needed to perform its function:
Service Provider    Purpose    Type of Data
Railway    Hosting our backend application servers and database    All Service data passes through Railway during normal operation
Vercel    Hosting the RealtyListPro Studio web application    Web request data, including IP and user-agent
Amazon Web Services (S3)    Storing photography and video media files    Media files and associated metadata
Postmark    Sending transactional emails    Recipient email address, message content, delivery status
Stripe    Processing payments    Payment card details, billing address, transaction history
Google Places    Address autocomplete and geocoding    Typed address fragments; no account identifier
Sentry    Application error monitoring    Error type, redacted stack trace, device info, anonymized user identifier when available
Expo Push Notification Service    Delivering push notifications to your device (when notifications are enabled)    Push notification token and message content
We do not share your information with third parties other than the service providers listed above, except as required by law (for example, in response to a valid subpoena or court order) or with your explicit consent.
If our sub-processor list changes materially, we will update this Privacy Policy and indicate the change.

6. Data Retention
We retain your information for as long as your account is active, and as required for the Service to function. After you delete your account or request deletion of your data:
General user data (account information, profile, communications, booking notes, media associated with your account, application logs): retained for up to 90 days after account deletion, then permanently deleted. The 90-day window allows you to recover an account deleted in error and allows us to investigate any disputes raised before deletion.
Payment and transaction records (transaction amounts, dates, payment status, anonymized payment method references, refund records): retained for 7 years after the transaction date. This longer retention is required by U.S. Internal Revenue Service business recordkeeping rules and New York State tax law. These records are retained in a restricted-access state and are not used for any purpose other than legal and tax compliance.
Records subject to active legal hold, dispute, or chargeback investigation: retained until the matter is fully resolved, after which the general retention rules apply.
Application logs and error reports retained by our sub-processors (Sentry, Railway) are subject to their own retention schedules — generally 30 to 90 days — and are deleted on rolling automated schedules.

7. Your Rights
You have the following rights with respect to your personal information:
Access: you may request a copy of the personal information we hold about you;
Correction: you may request that we correct inaccurate personal information;
Deletion: you may request that we delete your personal information, subject to the retention requirements in Section 6 above;
Portability: you may request your personal information in a structured, machine-readable format.
To exercise any of these rights, email support@realtylistpro.com from the email address associated with your account. We will respond within 30 days of receiving a verified request.
7.1 California Residents
If you are a resident of California, you may have additional rights under California law. We do not currently believe RealtyListPro is subject to the California Consumer Privacy Act ("CCPA") given our size and revenue, but as a matter of good practice we extend the following to California residents:
The right to know what categories of personal information we collect, the purposes for which we collect it, and the categories of third parties with whom we share it (described above);
The right to request deletion of your personal information, subject to the retention requirements in Section 6;
The right to be free from retaliation for exercising your privacy rights;
The right to opt out of "sale" of your personal information — we do not sell your personal information.
To exercise California-specific rights, email support@realtylistpro.com and identify yourself as a California resident.
7.2 European Union and United Kingdom Residents
As stated in Section 2, the Service is not intended for residents of the European Union or the United Kingdom, and we do not knowingly collect personal information from individuals in those jurisdictions. If you reside in the EU or the UK and your personal information has been collected by us, you may request its deletion by emailing support@realtylistpro.com. We will delete the information promptly and confirm completion.
We do not designate a representative in the EU or UK because we do not target or offer the Service in those jurisdictions.

8. Security
We protect your information using a combination of technical and organizational measures:
All connections between your device and our servers are encrypted using industry-standard transport layer security (HTTPS / TLS);
Passwords are stored only as one-way bcrypt hashes;
Access to production databases and infrastructure is restricted to authorized personnel and is gated by individual credentials;
Payment card data never touches our servers — Stripe handles payment processing directly under PCI DSS compliance.
No method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security. If we become aware of a security incident that affects your personal information, we will notify you in accordance with applicable law.

9. Children
The Service is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a child under 18, we will delete it promptly. If you are a parent or guardian and you believe your child has provided us with personal information, please contact us at support@realtylistpro.com.

10. Cookies and Tracking Technologies
The Service uses a minimal set of cookies and similar technologies:
Essential cookies and authentication tokens: required to keep you signed in, maintain your session, and enable the Service to function. These cannot be disabled without breaking the Service.
Error monitoring: Sentry uses limited identifiers to correlate errors. These identifiers are not used for advertising or cross-site tracking.
We do not currently use:
Analytics services (such as Google Analytics, Mixpanel, or PostHog);
Advertising cookies or pixels;
Cross-site or cross-device tracking;
Behavioral profiling.
If we add analytics services in the future, we will update this Privacy Policy and indicate the date and nature of the change before that data collection begins.

11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Effective" date at the top of this document. For material changes that affect how we collect, use, or share your personal information, we will provide at least 30 days' notice to existing users by email or through a notice in the Service before the changes take effect.
Your continued use of the Service after the effective date of an updated Privacy Policy constitutes your acceptance of the updated terms.

12. Contact Us
If you have questions, comments, or concerns about this Privacy Policy or our privacy practices, please contact us at:
RealtyListPro, LLC
4944 Pilgrimport Road
Sodus, NY 14551
support@realtylistpro.com