Privacy Policy

1. Scope and Roles

This policy applies to information processed when you visit retsy.com or retsyconnect.com, sign in to RETSY Connect, view a shared listing, scan a RETSY-generated QR code, or interact with our communications. For information you upload about your contacts, clients, or prospective clients (including names, phone numbers, emails, scan-location notes, and consumer-information lookups), you are the controller and we are your processor; we use that information only to provide the Service to you and as required by law.

2. Information We Collect

• Information you provide. Account profile (name, email, phone, profile photo), brokerage and team affiliation, license-related information you choose to add, content you create (posts, comments, polls, photos, videos, documents, messages, contact cards), pocket-listing details (addresses, prices, photos, descriptions, cooperative-compensation entries, agent contact), QR-code metadata (URL, sign number, address, notes), shared-link configuration (passwords, device limits, recipient name), and support requests.
• Information from sign-in providers. We use Google Sign-In as our authentication provider. When you sign in with Google we receive identifiers and basic profile data through the openid, email, and profile scopes (used for identity, account email and recovery, and display name and avatar respectively).
• Information collected automatically. Device and browser metadata, IP address, approximate location derived from IP, pages and features used, in-app events, log timestamps, error reports, scan events for QR codes (time, approximate location, device class), and cookies and similar technologies for sign-in sessions, security, and analytics.
• Information from third parties and integrations. Where you connect Adwerx, Bond Parking, Brokermint, Canva, Flexmls, Forewarn, Gmail, LeadingRE, Lofty, Luxury Presence, ReChat, Transaction Desk, urbAna, zipForms, or similar tools, we receive limited data necessary to provide the integration. Where you use Forewarn or similar consumer-data integrations, the integration provider is the controller of the consumer data and we transmit your queries and display results inside the Service; you are responsible for permitted-purpose compliance.

We do not knowingly collect Social Security numbers, payment-card numbers, government identifiers, precise GPS location, biometric identifiers, or special-category data through the Service.

3. How We Use Information

We use information to:

• (a) provide, secure, personalize, and improve the Service;
• (b) authenticate users and protect accounts;
• (c) operate community, listing, messaging, notification, and QR-code features;
• (d) generate AI assistance, AI-summarized news briefs, and Community Assistant comments;
• (e) send transactional, security, product, and (with consent or as permitted by law) marketing communications;
• (f) detect, prevent, and respond to fraud, abuse, and security incidents;
• (g) measure usage and performance; and
• (h) comply with law and enforce our agreements.

4. AI Features and Training

The Service includes AI features. We do not sell your User Content or chat inputs, and we do not authorize our model providers to use them to train foundation models for the benefit of unrelated customers. We may use de-identified or aggregated signals to improve our own Service. AI output may be inaccurate; you are responsible for reviewing it before relying on it. You can disable Community Assistant auto-comments in Settings.

5. Google User Data Disclosure (Limited Use)

Our use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we (i) only use Google user data to provide or improve user-facing features that are prominent in the requesting application's user interface, (ii) do not transfer the data except as necessary to provide or improve those features, comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users, (iii) do not use the data for serving advertisements, including retargeting, personalized, or interest-based advertising, and (iv) do not allow humans to read the data unless we obtain users' affirmative consent for specific messages, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or our use is for internal operations and the data has been aggregated and anonymized.

6. How We Share Information

• Service providers (subprocessors). Cloud hosting and authentication (Google Cloud / Firebase), email and notification delivery, analytics, error monitoring, customer support, and payment processing (if and when introduced). Subprocessors are contractually bound to use information only to provide services to us.
• Other RETSY Connect users. Information you choose to share — profile, posts, comments, listings, contact cards, group activity, messaging — is visible to the audience you select inside the Service.
• Recipients of links you share. People to whom you send pocket-listing share links, QR codes, or contact cards will receive the information you choose to share.
• Integration providers. Tools you connect (listed in Section 2) receive only the data necessary to perform the integration.
• Legal, safety, and corporate transactions. We may disclose information to comply with law, valid legal process, or governmental requests; to protect rights, property, safety, or security; to enforce our Terms; to investigate fraud or abuse; or in connection with a merger, acquisition, financing, reorganization, or sale of assets, with notice where required.

We do not sell personal information for money. We do not "share" personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.

7. Cookies and Analytics

We use cookies, local storage, and similar technologies for authentication, security, preferences, and product analytics. You can manage cookies through your browser settings; disabling cookies may break sign-in or other features.

8. Data Retention

We retain account and content data while your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. After account deletion, we delete or de-identify personal information within a reasonable period, except for residual data in routine backups, security logs, or where retention is legally required. Listing share-link logs and QR scan analytics are retained for the period needed to provide reporting features and to detect abuse.

9. Security

We use commercially reasonable administrative, technical, and physical safeguards, including TLS in transit, encryption at rest where applicable, access controls, logging, and least-privilege principles. No system is perfectly secure; you are responsible for safeguarding your credentials. If we become aware of a security incident affecting your personal information, we will notify you as required by law.

10. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, port, or limit the use of your personal information, to opt out of certain processing, and to appeal a denial. To exercise these rights, email info@RETSY.com from the email associated with your account or use available in-product controls (Settings → Account → Delete Account). We will verify your request and respond within the timeframes required by applicable law.

U.S. State Privacy Rights. Residents of California, Colorado, Connecticut, Delaware, Iowa, Montana, Oregon, Texas, Utah, Virginia, and other states with comprehensive privacy laws have rights to access, correct, delete, and port their personal information, and to opt out of targeted advertising, sale, and certain profiling. Because we do not sell or share personal information for cross-context behavioral advertising, no opt-out of sale or sharing is necessary, but you may still submit requests at info@RETSY.com. California residents may also designate an authorized agent.

11. Children

The Service is intended for licensed real-estate professionals and adults invited by them. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it.

12. International Users

The Service is operated from the United States. If you access it from outside the U.S., you understand that information will be transferred to and processed in the U.S., which may have data-protection laws different from those in your jurisdiction.

13. Communications and SMS Disclosures

We send transactional messages (security, product, account) and, with your consent or as permitted by law, product updates. If we offer SMS messaging, mobile information will not be shared with third parties or affiliates for market