Privacy Policy

It matters here too: we hold documents about your purchase because that is what a coordination tool does. We are not the official record of it. See the Terms.

HomeTrail is operated by Breezy Labs LLC, a Pennsylvania limited liability company. That is the company that decides what is collected here and how it is used, and it is the company that holds it. Everywhere below, “we” means that company.

An agent creates their own account, so they choose what to put in it. That is: their name, their email address, an optional phone number, their time zone, and — because agents sign in with a password — a scrambled, one-way version of that password. The scrambling only runs one way: we cannot turn it back into your password and neither can anyone who steals the file. Agents can also add a photo, a brokerage name and an accent colour, which is what their buyers see at the top of the screen.

If an agent recommends a local business on a client's list, we keep what they typed about the business (its name and phone number), which agent added it, and when they last confirmed that they own no part of it and receive nothing for recommending it.

Buyer invitations are not switched on today. This section describes how buyer access works for anyone who already has it, and for everyone once invitations are switched on.

If you are buying a home, you did not sign up here — your agent invited you. So most of what we hold about you was entered by them, on your behalf, and you can see almost all of it on your own screen.

• You never create a password. There is no password to forget, reuse or have stolen, because you do not have one. You get in by clicking a link we email you. That link works for a short time, once, and only ever goes to the email address your agent invited — never to an address typed into a form by whoever is holding the link.
• Your name, email address and an optional phone number — normally typed in by your agent when they invited you.
• Each client record has a reference number we create so we can find it when you write to us. It is not built from your name, phone or any other detail, and it means nothing outside the product.
• The purchase itself — the property address, the purchase price and closing date if your agent enters them, the key dates, the to-do items and their due dates, and the contact details your agent adds for the lender, title company, inspector and so on. Those contact details are other people's names, phone numbers and email addresses, and sometimes a licence number. If your agent has a loan estimate or closing disclosure read and approves it, also the loan's terms from it: the amount, rate, term, monthly payment, closing costs, cash to close, the lender's name and the rate-lock and closing dates. Not the loan number. From an approved appraisal, the appraised value, its date and whether it was made “as is”; from a flood determination, the flood zone. From a lead-based paint disclosure, only whether each signature line is filled, never the names. From an approved inspection report, a list of the home's parts (roof, electrical, plumbing and so on), each with its rating, its age if printed, a short version of the finding and what the report recommends, the page it came from and the report's own words for it; the inspection date and the inspection company's name. Never the inspector's name, and never your own name as the report prints it. From a radon, well water, septic or wood-destroying insect report, its result and its one number (a radon level, for example).
• People you add yourself. You can put your own loan officer, insurance agent or attorney on the purchase — their name, their company, and a phone number and email address if you have them. Three things follow, and none of them are obvious from the form. Your agent sees everyone you add, and can edit or remove them. Your co-buyer sees them too. And if your agent has the AI reading switched on, those details are part of the snapshot sent to Google described further down. They are somebody else's details, not yours, so add only what that person would expect you to pass on to your agent.
• Documents you or your agent upload — including, realistically, financial ones: pre-approval letters, proof of funds, inspection reports, the agreement of sale. A phone photo of a document is stored with the place it was taken, the phone's details and the time it was taken removed; several photos of pages in one email are also combined into one PDF, and that PDF is what gets filed. Anything else in the picture (a hand, a table, whatever was next to the page) is stored with it, so photograph only the page.
• A photo of the home, if you or your agent add one — shown to both of you on the purchase, and your agent can remove it at any time. It is kept for as long as everything else about your purchase is (see "How long we keep it" below); there is no separate schedule for it.

We do not ask for and do not want your Social Security number, your bank account or routing numbers, or your card details. Nothing in this app should ever be used to send money. If someone emails you asking you to wire funds because of something you saw here, stop and call your agent, the title company or the closing attorney on a number you already had.

If you are selling rather than buying, you are in a different position from everybody else on this page: you have no account here and no way to sign in. Your agent set up the listing, and everything we hold about you is something they typed in or uploaded. You will not get a link from us, and there is no screen of ours you can open. (If your agent turns on the weekly update email, you get one email a week about your sale; see “Email” below.) This section exists so you can find out what we hold anyway.

• Your name, and the contact details your agent has for you — normally an email address and a phone number.
• The property — its address, the asking or agreed price if your agent enters it, and the dates that matter: listing, offer, inspection, settlement.
• Documents your agent uploads — the listing agreement, your property disclosure, an inspection report, an offer or the agreement of sale. These are your documents and they can contain a great deal about you and about your house.
• The to-do list and the notes your agent keeps on the deal — including notes they mark internal, which are their working record of the transaction rather than anything we compose.
• The other people on it — the title company, the buyer's agent, an attorney, an inspector: their names and contact details, entered by your agent.

We do not ask you for anything ourselves. We send you no email, we do not text you, and we do not build a profile of you across deals. We have no financial account details of yours and do not want them.

Two things follow from your agent being the one who put it here. If they have the AI reading switched on, a document about your sale that they have read — or a text or email about it that they forward in — goes to Google to be read, exactly as described further down; the same paragraphs apply to you. And if you want to know what we hold, have it corrected, or have it deleted, you can ask us directly using the section below — you do not have to go through your agent to do that, though telling them too is usually faster, because the record is theirs and they may be required to keep their own copy of it.

Agents keep a list of the people they are working with, and they can add somebody to it before any purchase exists — before an invitation, and whether or not one is ever sent. If you spoke to an agent about buying a house, a record about you may exist in here that you have never seen and were never told about. We would rather you learned that from this page than from anywhere else.

• What is in it: the name they typed for you, an email address and a phone number if they have them, one free-text note about what you are looking for, and, if they have it, where you currently live — the address you would be moving from, written out the way they would write it on an envelope. That is the whole record — there are no other fields, and there is deliberately no structured place to record a neighbourhood, a school district, or anything about who you are.
• Who put it there: your agent, from their own notes. Not you, and not us. We never ask you to confirm it and we never contact you because of it.
• Who can see it: that one agent, and nobody else. Not other agents, not other buyers, not the person whose record it is — there is no screen where you can see it, because you have no account.
• What we never do with it: nothing is emailed to that address by us, ever, from that record alone. It is a note in an agent's own list until they invite you to an actual purchase, and only then does anything reach you.
• If your agent brought you in from a list: an agent can bring past clients in from a spreadsheet, your phone's contacts file, or a closing statement from a past sale. From these we keep only your name (and a co-buyer's name), email, phone, an address, closing date, whether you bought or sold, the price, and, if the file has them, the lender, loan type, title company or closing attorney, inspection and appraisal dates, and your agent's own commission figure. Every other column is dropped when the file is read. Anything that looks like an ID or account number is left out. The file itself is deleted when your agent finishes with it. Nothing is sent to you because your agent imported you. Your agent's broker and office staff do not see imported clients unless your agent chooses to share one past deal with their office. Your agent decides this one client at a time; the office cannot open it on its own. And we do not text you unless you agree to it yourself.

If your agent has AI reading switched on, the pages of a closing statement that carry the address, price, date and names may be read by our AI provider, Google. They are read in redacted form: ID numbers, account numbers, emails and phone numbers are blanked out before anything is sent. If your agent chooses to keep a copy of the statement on the deal, that copy is removed when a deletion request reaches your record.

If you never had an account and your agent imported you, you can ask us to delete your details. We will first send a code to the email address or phone number on the record, to check the request is yours. If the record has neither, write to us at the address in the Contact section and we check the request another way. Then we delete the record, what we read from any list or statement, any file we still hold, and the messages, notes and tasks attached only to that record. We will tell you one of two things: done, or nothing found. We tell your agent that the record was removed. To keep you from coming back, we keep a one-way scrambled code made from your email, your phone number, or your name together with your home address. It cannot be turned back into any of them. It is there only so a later import does not add you again.

If you want to know whether such a record exists about you, or want it removed, ask — using the section further down about deletion. The honest caveat: we can only search for you by the email address or name an agent typed, so tell us anything that might help us find you.

Once a purchase exists, both you and your agent get a notepad on it, and the two are not the same notepad. Whatever you type there is yours: your agent cannot read it, and if somebody is buying the house with you, they cannot read it either. Their notes work the same way in the other direction — we do not show you what your agent writes about the purchase, and we never merge the two lists.

• What is in it: whatever you choose to type — questions for your agent, dates that will not work, what the inspector said. It is free text with nothing structured in it, and we do not read it, scan it or act on it.
• Who can see it: the person who wrote it, and nobody else on the purchase. That is enforced where the notes are fetched, not by hiding them on the screen.
• What deleting one does: deleting a note takes it off your screen and out of the app for good — nobody using this product can see it again. We do keep a copy, so that if a court or a regulator formally requires it we are able to produce it. Nothing about that copy is available to your agent, to us in normal use, or to anyone in the app.
• When it goes for good: the notes, including the kept copies of deleted ones, are erased when your record is deleted under the section below. There is no separate schedule for them.

Texting is not switched on yet. This section describes how it will work when it is. Until then, no text message reaches us, and none reaches the company that would carry it.

An agent can send a text message to a number we operate rather than opening the app. The message is about a purchase, so in practice it contains an address, a date, a dollar figure, or a note about what somebody said on the phone. We keep that message. Because “we keep it” is doing a lot of work in that sentence, here is exactly what it means.

• What we store: the phone number the text came from, the number it arrived at, the complete message exactly as it was typed, and the time it arrived. All of it in plain, readable form — not scrambled, not shortened, not summarised. (The “scrambled” wording further down this page is about the sign-in counters and only about those. It has never been true of this.)
• Why we keep the whole thing: so that “did you receive it, and what did you do with it” has an answer that is not somebody's memory. Every message is filed the same way, including ones that matched no purchase, arrived from a number we do not recognise, or came in faster than a person could type.
• Who can read it: the agent whose verified number sent it, signed in to their own account. Nobody else — not you, not a co-buyer, and not that agent's supervising broker. The text of a message is never shown to a buyer, and we never send one back out by text.
• What happens to it next: it becomes a note waiting for that agent to confirm by hand. Nothing a text says changes your purchase on its own. If they never confirm it, the waiting note expires after 14 days — but the message itself does not go anywhere. If they do confirm it, it becomes an activity entry marked internal, which is the “internal” described above: theirs, not yours.
• Whether anyone outside reads it: normally no — a text sits in our database waiting for your agent. But if your agent has switched on the AI reading described in the next section, the message is sent to Google to be read as soon as it arrives, along with a snapshot of the one purchase it is filed against. The same is true of an email they forward us with no document attached. That next section says exactly what goes, what Google does with it, and how it is switched off. If the switch is off, none of that happens and the message goes nowhere.
• How long we keep it: if we could work out which agent a text belongs to, we keep it for as long as we keep the rest of that agent's account — there is no clear-out, and closing an account does not by itself remove these messages; they are removed by a person following our written deletion procedure. If we could not work out who a text belonged to — you texted a number that is not linked to any account — we delete your number and the full text of your message ninety days after it arrives, automatically, whether or not you ask. That is a real deletion, not a hidden row.
• If you texted that number and you are not an agent: we store your number and your message the same way. We send you exactly one reply telling you the number is not linked to an account, and then we never text you again — and to be sure of that we keep a permanent note of your number saying “already replied, do not text”. The same applies if you reply STOP: we keep a record of the number so that the stop is honoured forever. Those notes are the number and the reason, nothing else, and they are the one thing here we keep on purpose in order to leave you alone. The do-not-text note is the one thing that outlives that ninety days, and it is deliberate: it is your number and the reason, nothing else, and it exists so that the promise never to text you again survives the deletion of everything else about you. Deleting it would start the texting over.

Your agent can ask us to read an executed purchase agreement and pull out the dates, the price and the names, so they do not have to retype them. Since 9 September 2026 the same reading also applies to messages: when your agent forwards us a text or an email about your purchase — from their lender, the title company, an inspector — we read that too and suggest what it seems to change. This is the only place in this product where anything you or your agent put in here leaves us, so it gets its own section rather than a line in a list.

• It is off, and three separate things must be true before it is on. The feature has to be switched on for this service at all; your agent's account has to be on a plan that includes it; and that individual agent has to have opted in themselves. Any one of those missing and nothing of theirs — no document, no forwarded message — is ever sent anywhere. Those three are checked in one place in our code, so there is no screen that can quietly disagree with this paragraph.
• What opting in actually means, in one sentence: with it on, the text of every document they have read and of every text and email they forward here leaves this product and is sent to another company to be read: Google, using its Gemini AI — along with the address, task names, key dates and contact details of the one purchase it is about; a closing statement they import is read the same way, after we blank out ID numbers, account numbers, emails and phone numbers. That is the whole trade, and it is said in those words on the screen where they agree to it — not buried here. We record the date they agreed, and they can withdraw it at any time, which stops it immediately.
• Exactly what is sent, in full. Three things, and there is not a fourth. First, the words being read: either the text of one document, or the complete body of the forwarded text message or email, exactly as it arrived. Second, a snapshot of the one purchase that message is filed against — its street address, the titles of the to-do items on it and their due dates, the names of its key dates and what those dates are, whether the loan is being financed and how far along it is, and the people on it: their names, their roles, and the phone numbers and email addresses we hold for them. Some of those people were added by you, not by your agent. Third, today's date, so that “the 30th” in a message can be turned into a real date.
• What is NOT sent. No other purchase of your agent's, and no other purchase of yours. Not your sign-in details, not your account, not the private notes your agent keeps about you, not your other documents, and no way for the reader to come back and ask us for more. It gets one message and one purchase, and the connection closes. The one exception: when a purchase agreement or addendum is read and its price, closing date or contract date is not on the pages sent, a few more pages of the same document, none of them kept back, may be sent once more, as text, with the same purchase, never more than 40 pages of that document in total. Then it stops.
• Only the pages that need reading, and loan forms read here first. A document is checked page by page before anything is sent. A page that looks like somebody's personal paperwork (a credit score notice, a loan application, a pay stub, an ID) is kept back and never sent; the rest of the document is still read. A scanned page or a photo of a page is first turned into text here, on our own servers, and checked the same way; a page too blurry to check is kept back and never read, and a page with almost no text on it (a short caption over a picture, say) is never sent. A scanned page or a photo you send us is never sent to Google as a picture: from a scan or a photo, only the text recognised on pages that were not kept back. A typed document (not a scan) of 40 pages or fewer with nothing kept back may be sent whole, with any pictures printed inside it; otherwise only the pages that need reading are sent, as text, and never more than 40 pages of it. A loan estimate or a closing disclosure is read on our own servers, without Google. If that reading fails, its first page (and, for a closing disclosure, its third page, the cash-to-close table) may be sent to Google to be read instead; those pages carry your name, the property, the price, the loan's terms and the lender's loan number. We do not ask for or keep the loan number. From a home inspection report, only its summary pages are sent (or its first four pages when it has no summary), as text, with the names printed beside labels such as “Client:” and “Inspector:” blanked first. A radon, well water, septic or termite report may send its first few pages the same way; a radon result printed as a plain average and the standard termite form (NPMA-33) are read here, without Google.
• When it is sent. A document your agent uploads themselves is sent when they ask for it to be read. Everything that arrives on its own — a document emailed to our forwarding address, a text to the number your agent uses, an email with no attachment — is sent automatically, the moment it arrives, with no further tap, for as long as the switch is on. A text or email we cannot match to one of your purchases is not sent at all until your agent files it to one — then it is read once, against that purchase.
• Who reads it: Google, through its Gemini API, on Google's paid tier. No other company, and no person at ours reading it as part of this — what is described above goes to Google and comes back.
• What Google keeps, and for how long: Google logs what is sent for a limited period, which its API terms do not state as a fixed number of days, and only so that it can check for misuse of the service and meet legal obligations — after which it is deleted. Separately, and this is the part worth reading twice: on the paid tier we use, Google does not use any of it to train or improve its models. That is a published term of the paid Gemini API terms we operate under, not a reassurance we are passing along. If either that term or that period ever changes, this page changes with it and the date at the top moves.
• What we keep when it was a document: the document itself, held exactly like every other document here — private store, encrypted, handed out only through the short-lived one-off links described below. Alongside it we keep the values that were pulled out of it, while your agent decides whether they are right. Those values are cleared once the agent confirms them (at which point they are simply part of your purchase, entered by them, like anything they typed), and cleared if they discard it — and in any case after 7 days if nobody has done either. What survives is a stub with no contents in it: which document was read, when, by which system, and which person confirmed it. No extracted text, no price, no dates.
• What we keep when it was a forwarded text or email, which is different, and we would rather say so: the message itself, kept the way the section above already describes — indefinitely, until a person deletes it. On top of that we keep what the AI made of it: the one-line summary, each change it proposed with the exact words from the message it took that from, any warnings it raised, and afterwards a record of which of those your agent accepted and which they rejected. That is kept alongside the message and is not cleared after 7 days the way a document's extracted values are — it stays for as long as the message does. We keep it so that “where did this date come from, and who agreed to it?” has an answer, and so that we can tell whether the reading is any good. It is never sent back out and it is never shown to you.
• A person decides, every time. Nothing a machine reads changes your purchase by itself. For most documents your agent is shown each proposed value beside the exact words it was taken from, and each one can be turned down on its own before anything is applied. Two kinds of document work differently: a standard form that we read from the form itself (a loan estimate, a closing disclosure, an appraisal, a lead-based paint disclosure or a flood determination) is shown to your agent as one set of values with the page each came from, checked against each other and against the purchase, and one tap applies all of them; several such forms can be approved together. An inspection report is shown to your agent as a list of the home's parts, each with its rating and the page it came from, and one tap applies the whole list: it then appears on your home page, a line in your Updates says how many safety concerns and how many things need attention, and your agent gets a to-do of their own for each safety concern. For a forwarded message, “Approve 3 changes” applies the ones your agent has not turned down, in one tap. We would rather tell you that than let one sentence stand for all three. Either way nothing reaches your purchase until a named person has pressed it, and we keep a record of who did.
• Who can see a reading: only the agent it belongs to, signed in to their own account. Not you, not a co-buyer, not another agent, and not their supervising broker. What your agent then approves may well show up on your screen — a to-do of yours, a closing date, the part-by-part list from an inspection report — but it shows up as part of your purchase, entered by them. The summary, the message and the AI's working are theirs.
• There is no chat. There is no box anyone can type into to ask the AI questions, about your documents, your messages or anything else. It reads what it is given and proposes values; that is the entire surface, and it is built that way on purpose.
• How your agent stops it, and what stopping means. They turn the switch off in their settings. It takes effect immediately — the check runs again at every single read, so the next document, text or email after they switch it off is not sent. It does not reach back: anything already sent to Google has been sent, and Google's own limited-period logging above runs its course. If you would rather this were off for your purchase, ask your agent — the switch is theirs, not ours and not yours, and we say so plainly rather than implying you hold a control you do not.

What this is not: it is not a review of your contract, it is not legal advice, and it does not check that anything in your agreement is correct, complete, or in your favour. It retypes for your agent, who is responsible for every value in your file whether they typed it or confirmed it. The Terms say the same thing in the place it is binding.

Agents can forward paperwork to a shared address of ours — docs@ at our mail domain — and they hand that address to the people they work with, so mail arrives here from lenders, title companies, inspectors and occasionally from someone who simply had the address. If that was you: you have no account here, you were never asked to agree to anything, and this section is what we hold about you and for how long. It is the one part of this page written to somebody who never chose to be on it.

• If an agent already had you saved as a contact on a purchase — a lender, a title officer, an inspector — your message is treated as part of that purchase: the address you sent from, the subject, the whole message, and any attachment you sent. It is kept as long as the rest of that purchase is kept, because it is part of how that file came to be, and the agent it was sent to can act on it. It is not swept on a timer.
• If we could not work out who you were, we keep much less than you might assume, and not for long. We record the address you sent from, the subject line and the time it arrived — not the body of your message, and none of your attachments, because when nothing here recognises a sender we stop before fetching either. Ninety days after it arrived, that record is deleted outright — not hidden, not marked deleted, actually removed, along with anything stored alongside it. We keep it that long for one reason: so that “I emailed you and nothing happened” has an answer.
• The same is true of a message we refused — one that arrived too fast, or looked like an automatic reply, or was addressed to something we do not recognise. We note that it arrived and why it was refused, and that note goes on the same ninety-day clock.
• Whether the AI reads it. If the agent you wrote to has switched on the AI reading described in the section above, and we could confirm your message really came from the domain it claims, then yes — your message is sent to Google to be read, on arrival, along with details of the one purchase it concerns. If that switch is off, or we could not confirm where your message came from, it is not. Being direct about the part that is genuinely unresolved: you are not the person who agreed to that, and we have not pretended otherwise — the agent did, on the basis that they received your message lawfully. Whether that is enough is a question we have put to a lawyer rather than answered ourselves.
• We never write back. Mail to that address gets no reply of any kind — not a receipt, not a bounce, not an out-of-office. So if you are waiting on an answer from here, none is coming; contact the agent directly.

If you want it gone sooner: write to nabreazycontent@gmail.com from the address you sent from, and we will remove what we hold about you. You do not have to explain why, and you do not need an account here to ask.

• Activity — who did what and when inside a purchase: a to-do marked done, a document uploaded, a buyer invited or removed. This is how both sides can see the purchase moved, and it is also our record if anyone ever disputes what happened when.
• Product usage — sign-ins, screen opens, and which emailed link brought you here, kept in our own database. We use it to work out whether this product is worth continuing to build. There are no advertising or tracking scripts on any page — we checked the whole codebase, and there is no analytics company involved at all.
• Security records — a count of recent sign-in attempts, so nobody can hammer the sign-in form or ask for endless sign-in links. We count two things: attempts per email address, and attempts per internet connection (your IP address, as our host reports it). Neither is stored as itself — each is scrambled one way before it is written down, so the table holds a fingerprint and a time, not a readable address. Rows older than the counting window are cleared as new attempts arrive.
• A note of which emails we sent — enough to be sure the same reminder does not go out twice.

On learning from usage, since the Terms reserve it: the Terms allow us to use information about how the product is used — counts, timings, error rates, how often a suggestion was corrected — to improve it, with the contents of your purchase excluded by name: no addresses, no prices, no dates, no names, no document or message text. Two honest notes on that. First, since 26 September 2026 we do it in one place: when our own reader cannot read one of the standard forms it knows (a loan estimate, closing disclosure, appraisal, lead-based paint disclosure or flood determination), we keep a record of which boxes it missed (the box's name and yes or no, never the value), the rule that failed, the page count and, for a loan form, the lender's name as printed, with the internal ID of your agent's account, for 90 days, so we can fix the reader. Beyond that, the list above is still the whole of what we collect. Second, if that changes again, this section says so and the date at the top moves before it happens — you will not find out about it from a Terms page. Nothing you or your agent puts in here is used to train an AI model, by us or by anyone we send it to.

One thing worth knowing, because it is not obvious from the screen: your agent can put their photo on your view of the purchase, and that photo is loaded from wherever they host it. When your browser fetches it, that other website sees your internet address and the time you looked. We do not choose that host and we do not receive anything from it.

• Your agent sees everything in the purchases they own, and nothing in any other agent's purchases.
• You, as a buyer, see only the purchases you were invited to, and within them only the items your agent marked shared — plus whatever you added yourself, which is the next point. Agents can mark a to-do, a document, a document slot or an activity entry “internal” — their own working notes. Internal items are filtered out on our server, before anything is sent to your browser. They are not hidden with styling and they are not sent and then covered up: they never leave our server. We test this by planting internal items on a real purchase and searching the raw data the browser receives for any trace of them. A document your agent adds from their own documents tab is also not visible to you until they share it, whether or not they ever touch the internal switch.
• Documents you add yourself are visible only to you until you choose to share them with your agent. Sharing cannot be undone — your agent may already have a copy. Until you share one, your agent cannot open it, cannot count it, and is not told that it exists; you can also delete it yourself while it is still private. Once you have shared a document you can no longer delete it on your own — ask your agent.
• A co-buyer on the same purchase sees the same shared items you do.
• Your agent's supervising broker, and office staff that broker allows, if your agent has linked their account to their brokerage (called an office in the app). They see a limited view of your purchase, never your name, your documents or your messages, and only from the moment your agent accepts. It has its own section immediately below.
• Us — the small team running the service. Being precise, because the honest version is more useful than the reassuring one: there is no admin screen and no support login inside the app. Nobody can browse your purchase from a control panel, because no such panel exists. What a person on our side does have is direct access to the database and the file storage, the way any small team does, and that is how a support question or a deletion request gets handled.
• Google, if — and only if — your agent has switched on the AI reading. Not a person at Google browsing your purchase: its Gemini service is sent the words being read plus a snapshot of that one purchase, and answers. It is set out in full in its own section below, including what is sent and what is not.

We do not sell personal information, we do not share it for advertising of any kind, and we would hand anything to a government or into litigation only where the law actually requires it.

If this business is ever sold, merged, or wound up: the data would move to whoever takes it over, because a product like this cannot be handed on without it — otherwise every buyer's home record would be destroyed by the sale. If that happens we will say so on this page and email account holders before it takes effect, and whoever takes over is bound by this policy as it stands until they give you notice of a different one. A new owner cannot quietly start using your data for something you never agreed to.

Most agents work under a broker who is responsible for supervising their transactions. Until now that broker could see nothing in here at all. Now they can see a limited amount, and because it is another person seeing something about your purchase, it gets said properly rather than folded into a list. In the app, a brokerage is called an office, and a broker can add office staff.

• It only exists if your agent turns it on. A brokerage cannot attach itself to an agent's account, and we will not do it on a brokerage's instruction. Nothing is visible until the agent explicitly accepts, and that acceptance is the moment visibility starts — not the invitation, not the request, not the day the brokerage asked.
• What a linked broker sees. For each purchase that agent is running: the property address, what stage it has reached, whether it is live or closed or did not complete, the key dates, the wording of each to-do your agent shares with you and whether it is done, how many documents have been filed, how many required documents are still missing, and when something last happened on it. They can also download a spreadsheet of the same purchases without the to-do wording. That is the whole of it.
• What a linked broker does not see — and this is the more useful half, so it is not buried: your name, your email address or your phone number; any document or even a document's filename; the wording of anything your agent has marked internal; the details your agent keeps about you; any note, contact or message. They see that eleven documents were filed. They cannot open one of them. One honest limit: a to-do's wording is whatever your agent typed, so if they put your name in one, it shows.
• The honest edge of that, about the word “internal”: it has always meant hidden from you, not private in general, which is worth saying because the word misleads people. An internal item never reaches your agent's broker or their office staff, not even its wording, and it is not counted in any number they see. If that ever changes, this page changes before the product does.
• A linked broker cannot change anything. Reading is almost the only thing the account does. They cannot edit a date, tick off a to-do, upload or delete a document, or invite or remove anyone. The one thing they can send is a fixed reminder to your agent about an open to-do, with no room for a message, and it never goes to you. There is no way for them to contact you through this product: no message button, no introduction, and no email we send you ever comes from them.
• Office staff. A broker can give people on their staff, such as an assistant, a trainer or a compliance person, the same limited view, or less. Some may be other agents in the same office, such as a team lead. If your agent is the broker, the people in their office they allow may see your purchase the same way. They see what the broker sees and nothing more, they cannot change anything, and they cannot contact you. Your agent is told before any of them can see their purchases, and can see who they are in their own settings.
• Purchases that already existed are included when the link is made. It is not limited to purchases started afterwards. If yours was already under way, it appears on that broker's list at the moment your agent accepts — which is why we do the next thing.
• If you had already joined, we email you. If you were already using your purchase before the link existed, we will email you when it is made, naming the brokerage and saying what they can now see. We are telling you, not asking you: whether an agent is supervised by their broker is not a decision we can hand to you, and offering you a choice we would not honour would be worse than telling you the truth. Your real options are the ones you already had — talk to your agent, or ask us to delete your data using the section further down.
• When it ends, and the deliberately uneven 30 days. Either side can end the link at any time. From that moment, nothing your agent starts afterwards ever appears. If the brokerage ends it, the broker keeps a copy of each purchase that was already there, as it stood at that moment. If your agent ends it, the broker keeps seeing those purchases, including changes to them, for 30 more days, and then keeps a copy of each as it stood then; the copy is made within about a day after the 30th day. Later changes never reach the broker's copy. Brokers are expected to keep records of their agents' transactions, and a record that vanished when an agent left would defeat that. The 30 days are uneven on purpose: supervision an agent could switch off the instant it became inconvenient would not be supervision at all.
• One brokerage at a time. An agent can be linked to at most one brokerage here, so there is never a second brokerage reading alongside the first. The only other people who can look are the office staff that same broker adds, and they see no more than the broker does.
• What we hold about the broker and their office staff themselves is the same short list as any other account — name, email address, an optional phone number, a time zone, a brokerage name, and a scrambled one-way version of their password. For a staff member we also keep which screens their broker let them use, and for the broker and every staff member a record of which purchases they opened and when, so a question about who looked can be answered.

What we do not do, and will not pretend to do: we do not verify that anybody is anybody's broker. We do not check licences, we do not call the brokerage, and we have no way to tell a real supervising broker from someone who has convinced an agent to accept. What we do instead is make it visible and reversible: your agent can see, in their own settings, exactly who supervises them and until when, and they can end it themselves at any time. If the brokerage named in our email to you looks wrong, tell your agent — they are the person who can end it.

Running a service means other companies hold pieces of it. These are all of them. Each one processes data on our behalf, under its own contract, and is not permitted to use it for its own purposes, with one exception, Google Maps Platform, whose entry below says why. There are no others, and we use none of them for advertising or analytics.

• Vercel — runs the website itself and stores every uploaded document. Documents are held in a private store, encrypted while stored.
• Neon — runs our database: accounts, purchases, dates, to-dos, contacts, activity. Encrypted while stored.
• Resend — sends our email. Worth reading twice, because it is the one that surprises people: Resend keeps the contents of each message, and the record of what happened to it, for 30 days before deleting it. Our emails include things like the property address, a closing date or a to-do title, so for those 30 days Resend holds a small slice of your purchase. We attach a document to only one email: the home file your agent sends you once your purchase has closed, a PDF record of it, attached so you keep it without an account — and Resend holds that copy for the same 30 days. Every other document stays in storage and the email links to it. Email can also come IN: an agent may forward a document to a HomeTrail address, and Resend holds that message the same way until we have copied the attachment into storage.
• GitHub — stores the software's source code. No account, purchase or document data is kept there.
• Twilio — will carry the text messages described above, once texting is switched on. It is not switched on today, so nothing of anyone's has reached Twilio. When it is, Twilio will hold its own copy of each message and both phone numbers, in its own system, for a period set on our account with them. If your agent never uses texting, nothing of yours reaches Twilio at all.
• Google (Gemini API) — reads documents, and (since 9 September 2026) the texts and emails an agent forwards us, and only when an agent has switched that on and opted in (see the section above). It receives the words being read plus a snapshot of the one purchase they concern — its address, its to-do titles and due dates, its key dates, and the names, phone numbers and email addresses of the people on it. It logs that for a limited period to check for misuse of the service, and — on the paid tier we use — does not use it to train or improve its models. It holds nothing else about you, sees no other purchase, and has no access to anything else here.
• Stripe — when billing is switched on, takes the payment. Stripe gets an agent's name and email address, and the card details are typed on Stripe's own page, not ours: we never see or store a card number. Nothing about a buyer, a seller or a purchase goes to Stripe. Billing is not switched on today, so nothing of anyone's has reached it yet.
• Google Maps Platform — once the local services list is connected to Google, finds the businesses near a home for both business lists: “Services near this home”, shown while a purchase or sale is under way, and “Your home's people”, shown after a purchase closes. It receives the home's street address, the map position Google returns for it, and the kind of business being looked for (a plumber, a lender). It receives nothing about the buyer, the seller or anyone else on the purchase: no name, no email address, no phone number. Unlike the companies above, Google uses what it receives under its own terms and privacy policy, which allow it to keep that data and use it to run and improve its own services. The businesses are listed by distance from the home, nearest first. We do not ask Google for ratings or reviews and keep none of theirs, and neither list shows or uses a rating. Businesses your agent recommends are shown first and marked as your agent's. Nobody else chooses or reorders the list, nobody pays to be on it, and it is not a recommendation from us. We keep the map position for no more than 30 days, and otherwise only Google's own reference number for each business. The home file you are sent after closing keeps the list as it stood on the day it was made. Google also powers the address box where an agent or a seller enters a home's address: what is typed is sent to Google as it is typed, to suggest matching addresses, and the finished address is sent to check that it exists. These go from our server, with nothing about who is typing: no name, no email address, no phone number.

The same companies, in list form — this is the version to send to a broker, an insurer, or anyone who asks the question formally. Each one processes data on our behalf under its own data-processing terms, linked here so you can read what it is actually bound to. GitHub is named above but is not a row here, because it holds our source code and none of your information. Before we add a company to this list, it appears here at least 14 days before it processes anything of yours. See also the data-processing section of the Terms.

“Where it runs” is the region we have asked each company for, not a promise that no byte ever leaves the United States — these companies operate internationally and we would rather say that than make a promise about somebody else's infrastructure. See “Where this service is offered” below.

One company we may add: Anthropic. A second AI reader we may add alongside or instead of Google's. It has none of your data today and is not on the list above, because a list of companies that hold your information may not include one that does not. If that changes, it moves into the table — with 14 days' notice here first. Its terms are here.

Not on this list: Google Maps Platform. Finds the local businesses near a home for both business lists: "Services near this home" while a purchase or sale is under way, and "Your home's people" after a purchase closes. It receives the home's street address and map position and the kind of business being looked for, and nothing about the buyer or anyone else on the purchase. Google uses what it receives under its own terms and privacy policy. It is not a sub-processor, because it does not act only on our instructions, and that is why it is named here and not in the table. It is used only once the local services list is connected to Google. Its terms are here.

• A document is never a public link. There is no address you could paste to a friend that would open one, and there is no address that keeps working. Each time somebody who is allowed to see a file clicks it, we mint a one-off link for that one person and that one file, and it stops working 15 minutes later.
• Before a file is accepted we check what it actually is, on our server, by reading its contents — not by trusting its name. Only PDFs, common photo formats and Word documents are stored, up to 50 MB. A web page renamed to look like a PDF is refused and never written anywhere. A photo is re-made before it is stored, which is what removes where and when it was taken; a photo too large to open safely is not stored at all, and the email's note says so.
• Every download is recorded — who, which file, when — so there is an answer if it is ever asked.
• Our storage and database providers encrypt what they hold. We do not add a second layer of our own encryption on top of theirs, which means a person on our side with database and storage access can open a document. If that matters for a particular file, don't upload it.
• Traffic between your browser and the site runs over HTTPS, which our hosting platform provides and enforces. Nothing moves in the clear.

No system is perfectly secure, and anyone who tells you otherwise is selling something. If we ever have a breach that affects your personal information, we will tell the people affected and any regulator we are required to tell.

We use cookies for exactly one thing: remembering that you are signed in between clicks. There are no advertising cookies, no tracking cookies and no third-party cookies, so there is no consent banner to click through — there is nothing to consent to.

• If you are a buyer, your cookie is a long random number and nothing else. It means nothing on its own; it matches a row in our database that says which purchase you are signed in to. Your agent can end that session, and it lapses on its own after 30 days of not visiting.
• If you are an agent, your cookie is a signed token that carries your account's internal id. It does not carry your name, your email or anything about your purchases, but it is not simply a meaningless number either, and we would rather say so than round it off.

Both are set so that other websites cannot read them, and so that they are only sent over an encrypted connection.

• A purchase stays, whether it closed or not. Keeping the record of your home (the documents, the dates, everyone who helped) is the point of the product, and it is not deleted on a timer.
• A purchase that does not complete stays open to the buyer too, the same way: nothing is taken away and there is no cut-off. The agent keeps their own record of the transaction.
• Agent accounts and everything in them are kept while the account is open.
• A listing, and what an agent put in it about a seller, is kept for as long as that agent's account is open. A seller has no access of their own, so there is no separate access clock on it — only the agent's record, and a deletion request.
• Activity, product usage, security and email-sending records are kept indefinitely today. There is no automatic clear-out yet. Saying so is more useful than inventing a schedule we have not built.

Nothing here is deleted on its own, whether the purchase closed or not. A record is deleted only when (1) the person it is about asks, using the section below; (2) we stop running the service, after at least 30 days' notice and the chance to download everything; (3) the law requires it, or an account has put unlawful material here in breach of the Terms; or (4) the record is part of a business we sell, in which case it moves to the buyer under this policy and we tell you first, rather than being deleted. If a court order or a legal claim requires us to keep something, we keep only that part, only until the requirement ends, and we tell you which part. The short-lived working copies described elsewhere on this page (text messages, values pulled out of documents, the reader's miss record) still clear on their own schedules.

Being straight with you about the mechanism, because it changes what you should expect: there is no “delete my account” button in the app. Deletion is a person on our side following a written procedure across the database and the file storage. That is why the window is 30 days rather than instant, and why we confirm in writing what was removed rather than just showing you a spinner. When we automate it, this section gets shorter and faster, and we will move the effective date at the top when it does.

None of this costs anything, and asking will not get you a worse version of the product.

The one thing deletion cannot do: a purchase has two sides. If you are an agent and you ask us to delete your account, we remove your personal information, but the buyer's own record of their own purchase — their documents, their dates, their home — survives, with your details removed. If you were in a brokerage's office, the brokerage also keeps its copy of the purchases you had there, as they stood when you left; your name is not in that copy. If you are a buyer asking for deletion, your side goes and the agent keeps their record of the transaction with your personal details removed. We will not destroy one person's copy of a transaction to satisfy a request from the other party to it. Tell us which you want and we will confirm exactly what we did.

If you are a seller, there is no account of yours to close — what you are asking is that we remove your details from your agent's record of the sale. We will do that, and tell you what we removed. What we cannot do is settle your agent's own obligation to keep transaction records: they may be required by their state or their brokerage to hold a copy of the same paperwork elsewhere, and deleting our copy does not reach theirs.

Most privacy pages put a line here saying the company may keep data “for legal reasons”. That sentence is a blank cheque: it lets a company keep anything, for as long as it likes, without ever naming what or why. So instead, here is the list. It is the whole list. Anything not named on it is deleted when you ask.

• A legal demand, or a dispute somebody has told us about. If we are served with a subpoena or a court order, or told in writing that there is a lawsuit, an insurance claim or a complaint to a state real-estate commission about a particular purchase, we hold the records for that purchase — not your other purchases, and nothing about you beyond it. We hold them until the matter is finished. Then we delete them within the same 30 days, without you having to ask a second time. We tell you when a hold starts, why, and when it lifts.
• A short receipt proving we did it. Your email address, the date you asked, the date we finished, and one line saying what was removed. It exists so we can show you — or a regulator — that the deletion really happened, and so an old invitation cannot quietly pull your information back in later. No documents, no property address, no purchase details: those four things and nothing else. We keep it for as long as we run the service.
• Backups, briefly, by their nature. Our database provider keeps automatic snapshots so the service can be brought back after a failure. A deletion clears the live data straight away, and then ages out of those snapshots as they are replaced. We never restore a snapshot to bring back something you asked us to delete, and if we ever have to restore one after a real failure, we re-run your deletion against it.
• Email that already went out. As described above, the company that sends our email holds sent messages for 30 days before deleting them. Deleting your information here cannot reach back into a message that has already been sent.
• A scrambled code, if your agent imported you. Only a one-way scrambled code made from your email, your phone number, or your name together with your home address, so a later import cannot add you back. It holds no purchase details, and it cannot be turned back into any of them. We keep it for as long as we run the service.
• A note that you asked us to stop the weekly update email or the anniversary note. Only a scrambled form of your email address, which agent it was about, and when — so a deletion can never switch those emails back on. It holds no name, no property and no purchase details, and we keep it for as long as we run the service.

What about your agent's record-keeping? Agents and their brokers are required to keep their own file on a transaction for a number of years. That is a rule about their records, kept in their system — and, as the top of this page and the Terms both say, we are not that system. The brokerage keeps its own compliance file. So their record-keeping duty is not a reason for us to hold on to our copy: when you ask, we delete ours. That is our reading, and we are having it confirmed by a real-estate attorney rather than assuming it. If it turns out that some specific record does have to be kept, this page will name that record, name the rule that requires it, say for how long, and say what happens to it afterwards — and the effective date at the top will move so you can see it changed. It will not turn into a general “legal reasons” clause. That is a promise about the shape of this page, and it is the one we would most like you to hold us to.

If you are an agent closing your account: your own record-keeping duty to your broker is yours, and deleting your account here neither satisfies it nor excuses it. Download what you need first. Deletion is not reversible and we will not have a copy to give you afterwards.

Email about your own purchase — your invitation, your sign-in link, a document shared with you, a to-do coming due — is part of the service, and we will keep sending it while you have access. There is no opt-out for those, and there should not be: switching them off would lock you out of your own purchase.

Buyer invitations are not switched on today, so those emails reach only buyers who already have access. The weekly update email, if your agent turns it on, is described below.

The daily summary an agent receives is different. It is a recurring digest, so every one of them carries an opt-out with an address on it. Being precise about how that opt-out works today, because the wording in the email is friendlier than the machinery behind it: a person reads that mailbox and switches the summary off by hand. We do it within 10 business days, and it does not affect anything else — every other message keeps working. There is no self-service unsubscribe link yet.

The weekly update from your agent. If your agent switches it on, you get one email a week about where your purchase or sale stands. Every one of them has a link to stop them. It works without signing in, it takes effect straight away, and your agent cannot switch them back on for you. If you turn these emails off, we keep a scrambled form of your email address so we can keep honouring that. It can be checked against an address but can't be turned back into one, and it is kept even if the rest of your information is deleted.

The anniversary note from your agent. If your agent switches it on, you get one short email a year, in the week of the anniversary of your purchase, sent in your agent's name. It is a marketing email and says so. Every one has a link to stop them. It works without signing in, it takes effect straight away, and your agent cannot switch them back on for you. Stopping the weekly update email stops these notes too. As with the weekly email, we keep a scrambled form of your email address so we can keep honouring that, even if the rest of your information is deleted.

Every email we send identifies who sent it, carries a postal mailing address, and can be replied to.

This is a tool for people buying a house. It is not for anyone under 18, we do not knowingly collect anything from a child, and there is nothing in it aimed at children. If we learn we have collected something from one, we delete it. Nobody under 18 can be invited to a purchase except by an agent typing their address in, and if that happens, tell us and we will remove it.

We run this from the United States, for buying and selling homes in the United States. It is not offered to or aimed at people elsewhere, and we make no claim that it meets the privacy law of any other country. The companies listed above operate internationally, so we are not telling you that every byte stays inside the US — only that we do not know of a reason it would leave, and that we would rather say that than make a promise about somebody else's infrastructure.

The effective date at the top is the honest signal — it moves whenever anything on this page substantively changes, so you can always tell which version you agreed to. If a change matters to you (what we collect, who can see it, how long we keep it, or how deletion works) we will also email account holders about it rather than quietly swapping the text.

For anything on this page — a question, a request for a copy of your data, a correction, a deletion, or a complaint: nabreazycontent@gmail.com.