Privacy Policy

1. Introduction & Scope

InFlux LLC (“Listing Nav,” “we,” “us,” or “our”) operates the Listing Nav platform at listingnav.com. This Privacy Policy describes how we collect, use, share, and protect your personal information when you use our platform.

This policy applies to all users of Listing Nav, including:

• Property seekers who browse listings and submit inquiries
• Agents and brokerages who create tenant sites to list properties
• Site visitors who access any page on the platform

Listing Nav acts as a data processor for lead and inquiry data collected through tenant sites, and as a data controller for account and platform-level data.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, password (hashed with bcrypt — we never store plaintext passwords), and optionally your phone number.

Business Information (Agents & Brokerages)

If you sign up as an agent or brokerage, we also collect your company name, chosen URL slug, and real estate sector preference.

Payment Information

Payment processing is handled by Stripe. We never receive or store raw credit card numbers. We store only Stripe customer IDs and subscription IDs to manage your billing relationship.

Property Data

Property listings include addresses, descriptions, photos, geographic coordinates (latitude/longitude), and pricing information.

Lead & Inquiry Data

When visitors submit inquiries through tenant sites, we collect their name, email address, phone number, company name, and message content.

Technical Data

We collect IP addresses for rate limiting purposes and user agent strings for Terms of Service acceptance audit records.

Uploaded Content

Images and files you upload are stored on Vercel Blob (cloud storage) in production or local storage during development.

3. How We Use Information

We use the information we collect for the following purposes:

• Service delivery — operating the platform, displaying property listings, and connecting seekers with agents
• Authentication — verifying your identity and managing account access
• Payment processing — managing subscriptions and billing through Stripe
• Lead forwarding — delivering inquiry data to the tenant (agent/brokerage) whose site received the inquiry
• System notifications — sending emails and SMS for password resets, team invitations, and lead alerts
• Rate limiting — preventing abuse by limiting form submissions per IP address
• Platform improvement — understanding usage patterns to improve features and performance

4. How We Share Information

We share information only in the following circumstances:

• With tenants — Lead inquiry data is shared with the tenant (agent or brokerage) whose site received the inquiry. This is the core function of the platform.
• With service providers — We use trusted third-party services to operate the platform:
  • Stripe for payment processing
  • Twilio for SMS notifications
  • Email provider for system notifications
  • Vercel for hosting and file storage
• Legal requirements — We may disclose information if required by law, court order, or governmental regulation.
• Business transfers — In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We do NOT sell personal information.

5. Cookies

Listing Nav uses one strictly necessary cookie. We do not use any analytics, advertising, or third-party tracking cookies.

Because these cookies are strictly necessary for the platform to function, no cookie consent banner is required under the GDPR ePrivacy Directive (Article 5(3)).

6. Data Retention

• Account data is retained while your account is active and deleted upon request.
• Lead data is retained while the associated tenant account is active. Tenants can delete individual leads at any time.
• Rate limit data is short-lived and automatically purged.
• Terms of Service acceptance records (including IP address and user agent at the time of acceptance) are retained indefinitely for legal compliance purposes.

7. Data Security

We implement the following security measures to protect your data:

• Passwords are hashed with bcrypt using 12 salt rounds
• Authentication cookies are HttpOnly and Secure in production
• All production traffic is transmitted over HTTPS
• Tenant data isolation — all database queries are filtered by tenant ID, preventing cross-tenant data access
• Rate limiting on public-facing forms to prevent abuse

While we take reasonable measures to protect your information, no method of transmission over the internet or method of electronic storage is 100% secure.

8. Your Rights (CCPA / GDPR)

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right to know / access — Request a copy of the personal information we hold about you
• Right to delete — Request deletion of your personal information
• Right to correct — Update inaccurate information via your account settings or by contacting us
• Right to data portability — Receive your data in a structured, commonly used format
• Right to opt-out of sale — We do not sell personal information, but you may contact us to confirm this at any time
• Non-discrimination — We will not discriminate against you for exercising any of these rights

To exercise any of these rights, contact us at support@listingnav.com. We will respond within 45 days (CCPA) or 30 days (GDPR) of receiving your request.

9. Multi-Tenant Data Roles

Listing Nav operates as a multi-tenant platform. This means multiple agents and brokerages each have their own site within our platform. The data responsibilities are divided as follows:

• Listing Nav (the platform) acts as a data processor for lead and inquiry data collected through tenant sites.
• Tenants (agents and brokerages) act as data controllers for leads collected on their respective sites.
• Tenants are responsible for their own privacy compliance regarding the lead data they receive.
• Listing Nav provides tools for tenants to manage and delete lead data within the platform.

10. Children's Privacy

Listing Nav is a business platform intended for use by individuals who are 18 years of age or older. We do not knowingly collect personal information from children under 13 years of age in compliance with the Children's Online Privacy Protection Act (COPPA). If we discover that we have inadvertently collected information from a child under 13, we will promptly delete it.

11. International Data Transfers

Your information is processed and stored in the United States. If you are accessing Listing Nav from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States. By using the platform, you consent to the transfer of your information to the United States.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. For material changes, we will notify you by email or through a prominent notice on the platform. Your continued use of Listing Nav after any changes constitutes your acceptance of the updated policy.

13. Contact

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: