Privacy Policy

1. Information We Collect

You provide directly:

• Account & contact data — name, email, phone, password (managed by our identity provider).
• Identity-verification data — government-issued ID and related verification information, used to confirm your identity and authority to list a property.
• Property & ownership data — address, property attributes, ownership documentation/evidence, and the answers in the guided questionnaire.
• Disclosure data — information used to generate Tennessee disclosure forms (e.g., RF 204, RF 209, RF 401).
• Media — property photographs and the walkthrough video you upload.
• Payment data — processed by our payment processor (Stripe); we do not store full card numbers.
• Communications — messages you send us and your support requests.

Collected automatically: device and browser type, IP address, identifiers, and usage data (pages, actions, timestamps) via analytics and similar technologies. From third parties: identity-verification results from our verification vendor, and property/comparable-sales data from data providers (e.g., ATTOM).

2. How We Use Information

We use personal information to: create and secure your account; verify your identity and property ownership; operate the listing, disclosure, media, and compliance-review features; generate data-driven pricing ranges and recommendations (which are estimates, not appraisals); process payments; communicate with you (primarily by email); detect and prevent fraud and abuse; comply with legal and brokerage obligations; and improve the Platform. Some features produce automated outputs (e.g., valuation ranges, listing-description drafts); these are decision-support estimates that require your review and do not produce legal effects without human involvement.

3. Why We’re Allowed to Process

Depending on your location, we rely on: performance of our contract with you; your consent (e.g., optional communications); our legitimate interests (security, fraud prevention, service improvement); and compliance with legal obligations.

4. How We Share Information

We share personal information with:

• Service providers acting on our behalf, including payment processing (Stripe), identity verification (our KYC vendor), cloud storage and delivery (AWS), email delivery (AWS SES), authentication (Auth0), analytics (PostHog), mapping (Google Maps / Mapbox), e-signature (DocuSign), and property data (ATTOM).
• Listing distribution — when you publish a listing, listing content (including photos and descriptions) becomes public and may be distributed to buyers and to MLS/IDX channels (RealTracs).
• Professional/transaction parties you choose to engage (e.g., title/escrow, lenders, inspectors).
• Legal & safety — to comply with law, subpoenas, or government requests, to enforce our Terms, or to protect rights and safety.
• Business transfers — in connection with a merger, acquisition, or sale of assets.

We do not sell your personal information for money.

5. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Platform, then for the period required to meet legal, tax, brokerage-recordkeeping, and dispute-resolution obligations (Tennessee real-estate transaction records may be subject to multi-year retention). Identity documents are retained only as long as needed for verification and compliance. Aggregated/de-identified data may be retained indefinitely.

6. How We Protect Information

We use administrative, technical, and physical safeguards, including access controls, encryption in transit, signed-URL access to stored documents, and audit logging of sensitive actions. No system is perfectly secure; we cannot guarantee absolute security.

7. Your Privacy Rights

California (CCPA/CPRA) and similar US state laws: you may have the right to know/access, delete, correct, opt out of sale/sharing, and limit use of sensitive personal information, free from discrimination for exercising these rights. To exercise them, contact admin@diyresidential.com. We will verify your request before acting.

EEA/UK (GDPR/UK GDPR): where applicable, you may have rights of access, rectification, erasure, restriction, portability, objection, and to withdraw consent, and to lodge a complaint with your supervisory authority.

8. Children’s Privacy

The Platform is not intended for anyone under 18, and we do not knowingly collect data from children. If we learn we have, we will delete it.

9. Cookies & Similar Technologies

We use cookies and similar technologies for authentication, security, analytics, and functionality. You can control cookies through your browser; some features may not work without them.

10. Changes to This Policy

We may update this Policy and will post the updated version with a new effective date; for material changes we will provide reasonable notice. Prior versions are available on request.

11. Contact

Privacy questions or requests: admin@diyresidential.com · Music City Partners, LLC d/b/a DIY Residential · [business address — to be added].