Privacy notice
Last updated: August 10, 2026
What we collect
When you check in at an open house or submit a request, we collect only what's needed: first name, email, optional mobile number, agent-status answer, and your communication preferences. Anonymous, non-identifying analytics record page views and which resource cards were opened.
Requests you send from a property page
Live calendar availability and automatic calendar holds are disabled, so requesting a tour does not send any of your details to an external calendar service and does not create a calendar event. Requests are answered personally.
If you save a request on a property page — a private tour, a similar-home comparison, other open houses, or a private question — we store your first name, the single contact detail you chose (mobile number or email), your preferred reply channel, and, for a private question, the question text you wrote. We also store the date and the version of the notice shown to you.
These requests are stored in a private inbox that only Jackson Granger can reach after signing in with an authenticated administrator account. They are used to answer your request and to keep private follow-up notes. They are not sold, and they are not shared with third parties for their own marketing.
Security and abuse prevention
To stop automated abuse and to rate-limit submissions, our server derives one-way cryptographic fingerprints from your network address and the contact value at the moment you submit. We do not store your raw IP address anywhere. For new lead and check-in submissions, we do not store the full browser user-agent string or referring-page URL in our lead database. Previously collected records may remain subject to our retention practices, and hosting, analytics, or security providers may process limited technical information independently.
Why we collect it
To follow up on your request, share listing updates you asked for, and improve how the hub is organized. We do not sell your data. We do not share mobile opt-in data with third parties for their marketing. We do not use third-party advertising cookies or trackers.
One-time response vs. optional marketing
Answering the request you sent is a one-time response through the channel you selected. Recurring messages about matching homes and future open houses are separate and optional: they are only sent if you separately check the optional opt-in box. We store the exact disclosure text, its version, and the time you agreed. Consent is not a condition of touring or receiving property information.
How to opt out today. We do not yet use a messaging or email provider, so there is no automated STOP or unsubscribe webhook running behind this site: replying STOP to a message that has not been sent cannot switch anything off. If we later send recurring messages through a provider, the standard STOP, HELP, and unsubscribe controls in those messages will work. Right now, ask Jackson directly and we record your opt-out by hand in the app. Recording an opt-out sets your future updates off and keeps them off; it cannot be reversed from inside the app.
An opt-out is stored as a one-way fingerprint of the contact detail you opted out with, together with the channel, reason, and time. That record contains no name, email address, or phone number, and we may keep it even after deleting the underlying request, so that we keep honouring your opt-out.
Providers
The site is hosted on Lovable, and information is stored in a managed database service (Supabase). These are service providers that process the information on our behalf to operate the app. Operational analytics — page views and which resource cards were opened — are processed by these same providers (Lovable and Supabase) on our behalf. No advertising network and no session-replay tool is used. We do not operate any automated external notification service for these requests; Jackson reads them in the app and replies personally.
Retention
Under our retention policy, each request that does not lead to a working relationship carries a 12-month review deadline. That date is a deadline for a human to review the record — it is not an automatic purge, and nothing is deleted by a scheduled job. Deletion happens through that review or sooner on request: Jackson can permanently delete an individual request from inside the app, and you can ask us to delete your information at any time. Applicable legal or recordkeeping obligations may require us to keep certain records longer, and an opt-out fingerprint may be retained after deletion so your opt-out is still honoured. Other information is kept only as long as necessary to answer your inquiry and honor your update preferences.
Older records created before these changes may still contain metadata we no longer collect. We have not purged that legacy metadata, and we will not claim otherwise until it has been reviewed path by path.
Access, correction, deletion
Email jackson.granger@cbrealty.com or call 469-500-7387 to request access, correction, or deletion of your information, including a saved property request. We will respond within a reasonable time and confirm when the request is complete.
Security
Concrete controls in place: the site is served over HTTPS; saved requests are readable only through an authenticated administrator account; database row-level security rules restrict access to those records; and submissions are rate-limited using one-way fingerprints. No system is perfectly secure; if a breach affects your data we will notify affected people as required by applicable law.