Last updated: October 24, 2026
We collect information you provide when creating an account (name, email, brokerage details), listing details you enter (address, price, bedrooms, bathrooms, square footage, features, description), the property photos you upload, brand kit assets you upload (logo, headshot, colors), usage data about how you interact with our platform, and — if you use a listing microsite — the contact details that visitors to your microsite choose to submit (see "Listing Microsite Visitors & Leads" below). We do not collect payment card details — all payments are processed by Stripe.
We use your information to generate marketing campaigns for your listings, personalize AI output to your brand and writing style, send transactional emails (campaign complete, billing receipts), improve our AI models (in aggregate, anonymized form only), and provide customer support.
ListOps does not connect to any MLS. The listing details and photos you provide are stored in your account so we can generate and re-open your campaigns. If you use the optional address auto-fill, the street address you enter is sent to a public-records data provider (Realie or RentCast) to retrieve basic property facts such as bedrooms, bathrooms, square footage and year built; those facts may be outdated, so please verify them. Only upload photos you own or have permission to use. You can delete a listing and its photos at any time from your account.
We use PostHog to understand how the product is used (for example, which steps of campaign creation people complete). We do NOT use session replay: we do not record your screen, mouse movements or keystrokes. We do not use autocapture; we send only a small set of explicit product events that contain counts and categories, never addresses, names or email addresses. Signed-in usage is tied to an opaque account ID. We honor Global Privacy Control and Do Not Track signals by loading no analytics at all for those browsers. Fonts are hosted on our own servers, so your browser does not contact Google or any other font provider. We use cookies and local storage only for sign-in, security and the analytics described here.
We send transactional email (for example team invitations, receipts and replies to messages you send us). If you use the commercial outreach feature, emails are sent on your behalf to the prospects you provide; you are responsible for having a lawful basis to contact them, and every such message includes the sender's identity, our postal address and a one-click unsubscribe link. When someone unsubscribes, we keep only their email address on a suppression list so we never email them again; this record is retained indefinitely for that purpose. If you use the social calendar, we store the post text, dates, status and notes you schedule, and we email you a daily reminder of posts that are due (you can turn this off in the calendar). ListOps does not post to your social accounts and does not receive any data from them; you post manually. Scheduled posts are deleted with the campaign or when your account is purged. If you use the seller approval feature, we store the text shown to your seller, their answers and comments, the full name they type, and the times they opened and answered; we email you when they respond. The approval page collects no other personal information from the seller, does not store their IP address or device details, and is deleted with the campaign or when your account is purged.
ListOps hosts public listing pages (microsites) for agents. If you are a visitor and you submit the "Schedule a Showing" or "Request More Info" form, we collect what you type — your name, email address, optional phone number, optional message, and (for showing requests) your preferred date and time — together with the consent statement you agreed to and the time you agreed. We also record where you came from (a campaign tag such as ?utm_source=instagram if the link had one, and the host name of the referring website, never the full address), and a one-way salted hash of your IP address that we use only to detect duplicates and abuse; we do not store your raw IP address. We deliver your request to the listing agent who owns that page by email and, if that agent has turned these features on, by text message to the agent's own phone and to a webhook the agent configured (for example to their CRM or Zapier). The agent decides what to do with your information and is responsible for how they use it; ListOps processes it on the agent's behalf to deliver and store the request. We do not sell it, do not use it for our own marketing, and never email or text you ourselves in response to the form. Your request is stored in the agent's ListOps account until the agent deletes it, the listing is deleted, or the account is closed and purged (see Data Retention). To access, correct or delete what you submitted, contact the listing agent shown on the page, or email privacy@listops.io and we will help route or action your request. We also keep daily counters of page views of each microsite, taps on the agent's call and email buttons, downloads of the agent's flyers and graphics, and scans of the agent's printed QR codes (a scan opens a short ListOps link that adds one to a daily count and sends you to the listing page), which the agent can see (and can share with the property seller in an activity report) as totals; these counters hold no names, contact details, IP addresses or device identifiers and are not tied to you. Page views from search-engine and link-preview bots are not counted. Agents who use ListOps must obtain any consent required by law before contacting you, and the form shows the consent statement you agree to. Do not submit information on a microsite form that you do not want shared with the listing agent.
ListOps is not directed to anyone under 18 and we do not knowingly collect personal information from minors. We ask every account holder to confirm they are 18 or older. If we learn that an account belongs to someone under 18, we close it and delete the associated sign-in account.
We do not sell your data. We share data only with service providers that help us run ListOps: Anthropic (Claude AI — your listing details and photos are sent to generate campaigns), Stripe (payment processing), Clerk (authentication), Cloudflare R2 (photo and file storage), Neon (database hosting), Resend (transactional email, including lead alerts to agents), Twilio (text-message alerts to an agent's own phone, only if the agent enables them), Upstash (rate limiting), PostHog (product analytics), Sentry (error monitoring), and, if you use auto-fill, Realie or RentCast (public-records lookup). We do not sell your data and do not allow these providers to use it for their own marketing.
Campaigns, listings and photos are kept while your account is active so you can reopen and reuse them. You can delete a listing and its photos at any time. If your account is closed (by you or by us), your content is permanently deleted and your personal details anonymized after 30 days. Leads submitted through microsite forms are kept in the agent's account until the agent deletes them or the account is purged as described above. Other retention periods: failed campaign records 90 days; AI usage records about 13 months; security and audit logs 2 years; and the list of email addresses that have unsubscribed is kept indefinitely so we never email them again. Payment records are kept by Stripe as required by financial-record laws. To request deletion, contact privacy@listops.io.
If you are located in the EU/EEA or California, you have the right to access, correct, delete, or export your personal data. Contact privacy@listops.io to exercise these rights. We respond within 30 days.
We use HTTPS encryption for all data in transit, encrypted storage at rest, and role-based access controls. We conduct regular security reviews. Despite these measures, no system is 100% secure.
Questions about this policy? Email privacy@listops.io. You can also reach us through our contact page.