Privacy Policy

1. Introduction & Scope

InFlux LLC (“Listing Nav,” “we,” “us,” or “our”) operates the Listing Nav platform at listingnav.com. This Privacy Policy describes how we collect, use, share, and protect your personal information when you use our platform.

This policy applies to all users of Listing Nav, including:

• Property seekers who browse listings and submit inquiries
• Agents and brokerages who create tenant sites to list properties
• Site visitors who access any page on the platform

Listing Nav acts as a data processor for lead and inquiry data collected through tenant sites, and as a data controller for account and platform-level data.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, password (hashed with bcrypt — we never store plaintext passwords), and optionally your phone number.

Business Information (Agents & Brokerages)

If you sign up as an agent or brokerage, we also collect your company name, chosen URL slug, and real estate sector preference.

Payment Information

Payment processing is handled by Stripe. We never receive or store raw credit card numbers. We store only Stripe customer IDs and subscription IDs to manage your billing relationship.

Property Data

Property listings include addresses, descriptions, photos, geographic coordinates (latitude/longitude), and pricing information.

Lead & Inquiry Data

When visitors submit inquiries through tenant sites, we collect their name, email address, phone number, company name, and message content.

Technical Data

We collect IP addresses and user agent strings for the following purposes:

• Rate limiting on public-facing forms
• Terms of Service and Privacy Policy acceptance audit records
• Property listing attestation audit records (recorded each time you create or update a listing)
• Security audit logging (login, logout, signup, password changes, email verification events)

Uploaded Content

Images and files you upload are stored on Vercel Blob (cloud storage) in production or local storage during development.

Browsing Data

When you browse property listings on the marketplace without an account, we do not track your browsing behavior, create user profiles, or use cookies for analytics. We collect only the technical data necessary for rate limiting (IP address) when you submit forms.

3. How We Use Information

We use the information we collect for the following purposes:

• Service delivery — operating the platform, displaying property listings, and connecting seekers with agents
• Authentication — verifying your identity and managing account access
• Payment processing — managing subscriptions and billing through Stripe
• Lead forwarding — delivering inquiry data to the tenant (agent/brokerage) whose site received the inquiry
• System notifications — sending emails and SMS for password resets, team invitations, and lead alerts
• Rate limiting — preventing abuse by limiting form submissions per IP address
• Platform improvement — understanding usage patterns to improve features and performance

We do not use your property listings, lead data, or personal information to train artificial intelligence or machine learning models.

4. How We Share Information

We share information only in the following circumstances:

• With tenants — Lead inquiry data is shared with the tenant (agent or brokerage) whose site received the inquiry. This is the core function of the platform.
• With service providers — We use trusted third-party services to operate the platform:
  • Stripe for payment processing
  • Twilio for SMS notifications
  • Email provider for system notifications
  • Vercel for hosting and file storage
  • Neon for database hosting and storage

  Each of these sub-processors maintains a Data Processing Addendum (DPA):

  • Stripe DPA
  • Vercel DPA
  • Neon DPA
  • Twilio DPA
• Legal requirements — We may disclose information if required by law, court order, or governmental regulation.
• Business transfers — In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We do NOT sell or share personal information for cross-context behavioral advertising. We do not use personal information for targeted advertising or profiling. No third party receives personal information from us in exchange for monetary or other valuable consideration.

5. Cookies

Listing Nav uses one strictly necessary cookie. We do not use any analytics, advertising, or third-party tracking cookies.

Because these cookies are strictly necessary for the platform to function, no cookie consent banner is required under the GDPR ePrivacy Directive (Article 5(3)).

5A. Do Not Track & Third-Party Tracking

Do Not Track signals: Listing Nav does not track users across third-party websites. Because we do not engage in cross-site tracking, we do not currently respond to “Do Not Track” (DNT) browser signals.

Third-party tracking: We do not allow third parties to collect personally identifiable information about your online activities over time or across different websites when you use Listing Nav. We do not use any analytics, advertising, or third-party tracking technologies.

6. Data Retention

• Account data is retained while your account is active and deleted upon request.
• Lead data is retained while the associated tenant account is active. Tenants can delete individual leads at any time.
• Rate limit data is short-lived and automatically purged.
• Terms of Service acceptance records (including IP address and user agent at the time of acceptance) are retained indefinitely for legal compliance purposes.
• Listing attestation records (including IP address and user agent at the time of each property listing creation or update) are retained indefinitely for legal compliance purposes.
• Security audit logs (login, logout, signup, password change, and email verification events with associated IP addresses) are retained for security monitoring and investigation purposes.

7. Data Security

We implement the following security measures to protect your data:

• Passwords are hashed with bcrypt using 12 salt rounds
• Authentication cookies are HttpOnly and Secure in production
• All production traffic is transmitted over HTTPS
• Tenant data isolation — all database queries are filtered by tenant ID, preventing cross-tenant data access
• Rate limiting on public-facing forms to prevent abuse

While we take reasonable measures to protect your information, no method of transmission over the internet or method of electronic storage is 100% secure.

8. Your Rights (CCPA / CPRA / GDPR)

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right to know / access — Request a copy of the personal information we have collected about you in the preceding 12 months, including the categories of information, the sources, the business purposes, and the categories of third parties with whom we shared it
• Right to delete — Request deletion of your personal information, subject to certain exceptions (e.g., legal compliance records such as ToS acceptance and listing attestation records)
• Right to correct — Update inaccurate information via your account settings or by contacting us
• Right to data portability — Receive your data in a structured, commonly used format
• Right to opt-out of sale or sharing — We do not sell or share personal information for cross-context behavioral advertising. You may contact us to confirm this at any time.
• Right to limit use of sensitive personal information — We do not use sensitive personal information for purposes beyond those necessary to provide the services you requested
• Non-discrimination — We will not discriminate against you for exercising any of these rights

How to Submit a Request

To exercise any of these rights, contact us at support@listingnav.com. We will verify your identity before processing your request. We will respond within 45 days (CCPA/CPRA) or 30 days (GDPR) of receiving your verified request.

Authorized Agent Requests

You may designate an authorized agent to submit a request on your behalf. To do so, provide the agent with written permission signed by you, and have the agent submit the request to support@listingnav.com along with proof of their authorization. We may still require you to verify your own identity directly with us.

Notice at Collection (California)

The following table summarizes the categories of personal information we collect, the sources, the purposes, and the categories of third parties with whom we share it:

9. Multi-Tenant Data Roles

Listing Nav operates as a multi-tenant platform. This means multiple agents and brokerages each have their own site within our platform. The data responsibilities are divided as follows:

• Listing Nav (the platform) acts as a data processor for lead and inquiry data collected through tenant sites.
• Tenants (agents and brokerages) act as data controllers for leads collected on their respective sites.
• Tenants are responsible for their own privacy compliance regarding the lead data they receive.
• Listing Nav provides tools for tenants to manage and delete lead data within the platform.

10. Children's Privacy

Listing Nav is a business platform intended for use by individuals who are 18 years of age or older. We do not knowingly collect personal information from children under 13 years of age in compliance with the Children's Online Privacy Protection Act (COPPA). If we discover that we have inadvertently collected information from a child under 13, we will promptly delete it.

11. International Data Transfers

Your information is processed and stored in the United States. If you are accessing Listing Nav from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States. By using the platform, you consent to the transfer of your information to the United States.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. For material changes, we will notify you by email or through a prominent notice on the platform. Your continued use of Listing Nav after any changes constitutes your acceptance of the updated policy.

13. Contact

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: