PRIVACY
POLICY

We collect information you provide directly when you create an account, set up your agent profile, or use our services. This includes:

• Account information — your name, email address, and authentication details, including password hashes for email/password accounts and account identifiers used for Google, Microsoft, or Apple sign-in.
• Agent profile data — phone number, WhatsApp number, agency name, headshot photo, and brokerage logo.
• Property listing data — addresses, property details, descriptions, highlights, and any other listing information you submit for kit generation.
• Photos — property images you upload to include in your marketing kits and public listing pages.
• Lead inquiry data — name, email, phone number, and messages submitted by prospective buyers through your public property pages.
• Usage data — we automatically collect information about how you interact with the Service, including pages visited, features used, and timestamps.

We use the information we collect to:

• Provide, operate, and improve the ListForger platform and its features.
• Generate AI-powered marketing kits for your property listings, including MLS descriptions, social media captions, buyer emails, video scripts, public property pages, and AI-narrated property videos.
• Authenticate your identity and manage your account securely.
• Send transactional emails such as account verification, password resets, lead notifications, and service updates.
• Provide address autocomplete when you enter a property address.
• Process subscription payments through our merchant of record.
• Monitor usage patterns and trends to improve user experience and platform reliability.
• Respond to your support requests and communicate with you about the Service.

We work with trusted third-party providers to operate ListForger. We do not sell your personal information. These providers only access your data as needed to perform their services and are contractually obligated to protect it:

• Anthropic (Claude AI) — property listing data and details you provide are sent to Anthropic's Claude API to generate marketing content. Anthropic does not use this data to train their models.
• Microsoft Azure (Neural TTS) — when you generate an AI video, your video script is sent to Microsoft Azure's Neural text-to-speech service to synthesize the narration audio. Microsoft does not use this data to train models.
• Google OAuth & Google Places API — we use Google for address autocomplete and, if you choose Google sign-in, authentication data needed to complete login. Google also receives address queries used for autocomplete.
• Microsoft OAuth & Apple OAuth — if you choose to sign in with Microsoft or Apple, those providers receive your authentication credentials.
• Merchant of record — our payment provider handles billing, payment card data, and subscription management. We do not store your payment card details.
• Self-hosted infrastructure — the ListForger application, PostgreSQL database, media storage, automated backups, and video-processing services run on infrastructure we manage directly. Property photos and generated media are stored on secure server storage controlled by us.
• SMTP email provider — we use an SMTP service to send transactional emails. Your email address and message content are shared with this provider for delivery.

We take the security of your data seriously and implement industry-standard safeguards:

• All connections to ListForger are encrypted using TLS (HTTPS).
• Authentication is handled via secure email/password and OAuth sign-in flows with JWT-based sessions. We never store raw passwords.
• Property photos and generated media are stored on secured self-hosted storage with restricted server access controls.
• Our PostgreSQL database, application services, and backups run on dedicated infrastructure we manage directly with controlled network and access restrictions.
• Access to production systems is restricted to authorized personnel only.

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If you become aware of a security vulnerability, please contact us immediately at hello@listforger.com.

ListForger uses cookies strictly for essential functionality. We do not use advertising or tracking cookies.

• Authentication cookies — we use a JWT-based session cookie (via NextAuth) to keep you logged in and identify your account securely. This cookie is required for the Service to function.
• No third-party tracking — we do not use Google Analytics, Facebook Pixel, or any other third-party tracking cookies.

By using ListForger, you consent to our use of essential cookies. Most browsers allow you to control cookies through their settings, but disabling cookies may prevent you from using the Service.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal information we hold about you.
• Correction — request that we correct inaccurate or incomplete information.
• Deletion — request that we delete your personal information and account.
• Portability — request a machine-readable export of your data.
• Objection — object to certain processing of your data.

To exercise any of these rights, email us at hello@listforger.com. We will respond within 30 days. We may ask you to verify your identity before processing your request.

We retain your data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data — retained until you delete your account or request deletion.
• Listing data and generated content — retained as long as your account is active. You can delete individual listings at any time.
• Property photos and AI-generated videos — stored until you delete the associated listing or your account. You can delete individual videos at any time from the Video tab.
• Lead inquiry data — retained as long as the associated listing exists.

When you delete your account, we will remove your personal data within 30 days. Some data may remain in protected system backups for a limited retention period, typically up to 90 days. Anonymized, aggregated data may be retained indefinitely for analytics purposes.

ListForger is designed for real estate professionals and is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at hello@listforger.com and we will promptly delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and may notify you via email or a prominent notice on the Service. Your continued use of ListForger after any changes constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your data, contact us at hello@listforger.com.