Keystone

Legal

Privacy Policy

KEYSTONE LISTINGS

PRIVACY POLICY

Effective Date: June 10, 2026 | Last Updated: June 10, 2026

Privacy at a Glance

Keystone Listings is a software service that helps real estate professionals generate dedicated, shareable property pages with AI-written copy and neighborhood context. This summary highlights the most important points; the full Policy follows.

  • We collect account information from real estate professionals ("Agents"), the listing content they submit, contact information that visitors submit through property-page inquiry forms, and standard device and usage data.
  • Property Pages are public web pages. Content published on them — including property photos, addresses, prices, and descriptions — is visible to anyone on the internet and may be indexed by search engines.
  • When a visitor submits an inquiry on a Property Page, that inquiry (including name and contact details) is delivered to the Agent who created the page. The Agent — not Keystone — responds to inquiries.
  • We do not sell personal information, and we do not use non-public customer content to train generally available AI models without separate opt-in.
  • If your home or personal information appears on a Property Page and you want it corrected or removed, contact the Agent identified on the page or e-mail privacy@keystonelistings.com — see Section 6.
  • You have rights to access, correct, delete, and port your personal information, and to opt out of certain processing. Section 11 explains how to exercise them.

1. Scope and Roles

1.1 Who This Policy Covers

This Privacy Policy describes how Keystone Listings, a service operated by Trusty Goat, Inc. ("Keystone," "we," "us," or "our"), collects, uses, and discloses personal information when:

  • you visit our websites, including keystonelistings.com and the Property Pages we host;
  • you create or use a Keystone account as an Agent or Authorized User;
  • you submit an inquiry through a contact form on a Property Page;
  • you interact with our marketing communications, support channels, or sales team; or
  • information about you or your property appears in content an Agent publishes through the Services, even if you do not have an account.

1.2 Controller vs. Processor / Service Provider

For Agents and Visitors browsing our websites, Keystone is the controller (or "business" under U.S. state privacy laws) of personal information we collect for our own purposes — account management, billing, security, analytics, marketing, and service improvement.

For inquiry information that a Visitor submits through a Property Page ("Lead" data), Keystone collects the information at the direction of, and delivers it to, the Agent associated with that page. The Agent determines how Leads are used and is responsible for its own privacy practices and follow-up communications. For Lead data we process on an Agent's behalf, Keystone generally acts as a processor or "service provider"; for the copy we retain to operate, secure, and improve the Services, we act as a controller.

For personal information contained in listing content (for example, photographs of a home's interior or details about a property), the Agent who publishes the Property Page is responsible for having the right to publish that content, including any required permission from the property owner. See Section 6.

2. Information We Collect

2.1 Agent Account and Profile Information

Name, e-mail address, phone number, brokerage and team affiliation, real estate license number and jurisdiction (where provided), password or single-sign-on identifiers, profile photo and branding, billing information (processed by our payment processor), and account settings.

2.2 Listing and Property Page Content

Property addresses, listing links, photographs, videos, floor plans, property details (price, beds, baths, square footage, and similar), descriptive text, and any other content an Agent submits or imports to build a Property Page, along with the AI-generated narratives, neighborhood descriptions, and points-of-interest content assembled by the Services. Listing content may incidentally include personal information — for example, images of a home's interior or belongings, or details that relate to the property's owner or occupants.

2.3 Visitor Inquiries (Leads)

When you submit a contact or inquiry form on a Property Page, we collect the information you provide, such as your name, e-mail address, phone number, and message, together with the Property Page it relates to. This information is delivered to the Agent associated with the page so the Agent can respond to you.

2.4 Device, Log, and Usage Data

IP address, device identifiers, browser type, operating system, referring URLs, language settings, time stamps, pages viewed (including which Property Pages are visited and shared), feature usage, performance and error data.

2.5 Cookies and Similar Technologies

Cookies, pixels, and similar technologies used to operate, secure, and analyze the Services and our marketing. See Section 15 for details.

2.6 Information from Third Parties

We may receive information from third-party data sources used to build Property Pages (such as listing portals, public records, mapping and points-of-interest providers, and school-information services), from single-sign-on providers, payment processors, fraud-prevention services, and marketing partners. Third-party property and neighborhood data may be inaccurate or out of date; Agents are responsible for reviewing it before publication.

2.7 Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it.

3. How We Use Information

We use the personal information described above to:

  • provide, operate, secure, and maintain the Services, including generating and hosting Property Pages and delivering Leads to Agents;
  • authenticate users, manage accounts, and process payments;
  • communicate with you about the Services, including operational notices, security alerts, support, and (where permitted) marketing;
  • debug, monitor, and improve the Services, including improving the quality of generated content;
  • detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service, including misuse of promotional offers;
  • comply with legal obligations, respond to lawful requests, and protect our rights and the rights of others, including responding to fair-housing, copyright, and property-owner complaints; and
  • perform aggregate analytics about Service usage.

4. Legal Bases for Processing (EEA, UK, Switzerland)

The Services are designed for U.S. real estate marketing. If you are nonetheless in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases: contract, to provide the Services under our Terms (Article 6(1)(b) GDPR); legitimate interests, to secure and improve the Services, operate our business, and communicate with you, balanced against your rights (Article 6(1)(f)); legal obligation, to comply with applicable law (Article 6(1)(c)); and consent, where required, including for certain cookies and marketing (Article 6(1)(a)). You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

5. AI Processing

Keystone uses machine-learning models — both internally developed and provided by third parties — to generate property narratives, neighborhood descriptions, and curated local highlights from the address, listing content, and third-party data. Content submitted to the Services is processed by these models under contractual confidentiality and data-protection obligations.

Keystone will not use non-public customer content to train, fine-tune, or evaluate generally available machine-learning models without separate, affirmative opt-in. AI outputs are probabilistic and may be inaccurate or incomplete; Agents are responsible for reviewing generated content before publishing it, and visitors should independently verify property and neighborhood information.

The Services do not make automated decisions that produce legal or similarly significant effects on individuals.

6. Property Pages Are Public; Property Owners and Occupants

Property Pages are public marketing pages created at the direction of the Agent identified on the page. They are visible to anyone with the link, may be indexed by search engines, and copies may persist in caches and archives after a page is unpublished.

The Agent is responsible for having the authority to market the property and to publish the content on the page, including any permissions required from the property's owner. If you are a property owner or occupant and you believe a Property Page about your property is unauthorized, inaccurate, or should be removed, you may (i) contact the Agent identified on the page, or (ii) e-mail privacy@keystonelistings.com with the page URL and a description of your concern. We will review removal requests promptly and may unpublish pages that violate our Terms of Service.

7. How We Share Information

We share personal information with the categories of recipients below:

  • Agents. Visitor inquiries submitted through a Property Page are delivered to the Agent associated with that page. The Agent's use of your information is governed by the Agent's own privacy practices and applicable law.
  • Service providers and sub-processors that host, support, and secure the Services (e.g., cloud-infrastructure providers, AI and data providers, mapping and points-of-interest providers, e-mail and analytics providers, payment processors), under contractual confidentiality and data-protection obligations.
  • The public, with respect to content published on Property Pages and featured listings on our marketing site, as described in Section 6.
  • Professional advisors (accountants, lawyers, auditors), insurers, and corporate-development counterparties under confidentiality obligations.
  • Government authorities, law-enforcement agencies, courts, and other parties when required by law, subpoena, or court order, or to protect rights, property, or safety. We evaluate these requests and challenge requests that we believe are overbroad or unlawful.
  • Successors in a merger, acquisition, financing, reorganization, or sale of assets, subject to confidentiality and continuing privacy commitments.
  • With your consent or at your direction.

We do not sell personal information for money, and we do not share Lead information with anyone other than the Agent whose Property Page received the inquiry and our service providers. Limited cookie-based sharing on our marketing site may qualify as "sharing" or a "sale" under certain state laws; you can opt out as described in Section 12.3.

8. International Data Transfers

Keystone is headquartered in the United States, and we process personal information in the United States and other countries where we or our sub-processors operate. When we transfer personal information from the EEA, the UK, or Switzerland to a country that has not received an adequacy decision, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses (with the UK International Data Transfer Addendum or Swiss addendum as needed) and supplementary measures such as encryption in transit and at rest. You may request a copy of the safeguards we rely on by contacting privacy@keystonelistings.com.

9. Data Retention

  • Property Pages and listing content are retained while the Agent's account is active and the page remains published. Agents can unpublish pages and delete content through in-product controls. After account closure, we delete or de-identify listing content within ninety (90) days, except as required by law.
  • Lead data is retained as needed to deliver it to the Agent and to operate, secure, and audit the Services, after which we delete or de-identify it. Agents retain their own copies subject to their own practices.
  • Operational and legal records (e.g., billing, security logs, support tickets) are retained as long as needed to operate the business and to satisfy legal, accounting, or audit obligations, after which we delete or de-identify them.

10. Security

We implement technical and organizational measures appropriate to the sensitivity of the data we process, including encryption in transit (TLS 1.2+) and at rest (AES-256), access controls, multi-factor authentication for our internal systems, logging and anomaly detection, vulnerability management, and incident response. No security program is perfect, and you must take appropriate steps to protect your credentials.

11. Your Privacy Rights and Choices

Depending on where you live, you may have some or all of the following rights:

  • Access — request a copy of personal information we hold about you.
  • Correction — request correction of inaccurate or incomplete personal information.
  • Deletion / Erasure — request deletion of personal information, subject to certain exceptions.
  • Portability — receive your personal information in a structured, commonly used, machine-readable format.
  • Restriction / Objection — restrict or object to certain processing, including direct marketing.
  • Withdraw consent — withdraw consent where processing is based on consent.
  • Opt out of sale, sharing, or targeted advertising — see Section 12.3.
  • Non-discrimination — you will not be discriminated against for exercising your rights.
  • Lodge a complaint with a supervisory authority (e.g., your state attorney general, or your local Data Protection Authority in the EEA or the UK ICO).

11.1 How to Submit a Request

E-mail privacy@keystonelistings.com. We will verify your identity using information already associated with your account or inquiry. Authorized agents may submit requests on your behalf with written authorization. We respond within the time required by applicable law (typically 45 days under most U.S. state laws and 30 days under GDPR/UK GDPR, with extensions where permitted).

11.2 If You Submitted an Inquiry to an Agent

If your information was delivered to an Agent because you submitted an inquiry on the Agent's Property Page, the Agent maintains its own copy of your information. Please direct requests about the Agent's use of your information — including requests to stop follow-up communications — to that Agent in the first instance. We will support and assist as required by law, and we will honor requests directed at the copy we hold.

11.3 Marketing Communications

You can opt out of marketing e-mails by clicking the unsubscribe link in any marketing e-mail or by updating your preferences in account settings. We will continue to send transactional messages necessary for the operation of the Services.

12. U.S. State Privacy Disclosures

This section provides additional disclosures for residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, New Hampshire, New Jersey, and other states with comprehensive privacy laws. Specific rights vary by state; we honor the rights you have under the law that applies to you.

12.1 Categories of Personal Information Collected and Disclosed

In the prior 12 months, we have collected the categories listed below (using the CCPA/CPRA definitions) and disclosed them to the categories of recipients identified in Section 7.

| Category (CCPA/CPRA) | Examples | | --- | --- | | Identifiers | Name, e-mail, phone number, IP address, account ID. | | Customer records | Billing and contact information, license number. | | Commercial information | Purchase history, Property Pages created, transaction records. | | Internet activity | Usage logs, device data, cookies, pages visited. | | Geolocation (general) | Approximate location from IP address. | | Audio, visual, or electronic information | Property photographs and videos uploaded by Agents. | | Professional or employment information | Brokerage, team, license jurisdiction. | | Inferences | Service-usage and engagement metrics. |

We do not knowingly collect sensitive personal information as defined by the CPRA, other than account log-in credentials, and we do not use sensitive personal information for purposes that would require a right to limit under CPRA § 1798.121.

12.2 Sources, Purposes, and Retention

Sources are described in Section 2, purposes in Section 3, and retention in Section 9.

12.3 No Sale; Limited Sharing for Advertising

We do not sell personal information for money. On our marketing website, certain advertising and analytics cookies may qualify as "sharing" for cross-context behavioral advertising or as a "sale" under California law. You can opt out by clicking the "Your Privacy Choices" link in our website footer, e-mailing privacy@keystonelistings.com, or sending a Global Privacy Control (GPC) signal from a supported browser, which we honor as an opt-out where required by law.

12.4 Authorized Agents; Verification; Minors; Incentives

You may use an authorized agent to submit a request with written authorization; we may verify your identity. We do not require you to create an account to submit a request. We do not knowingly sell or share personal information of minors under 16. We do not offer financial incentives in exchange for personal information. California residents may request information under the "Shine the Light" law about disclosures for third parties' direct-marketing purposes; we do not make such disclosures.

13. European Economic Area, United Kingdom, and Switzerland

If you are located in the EEA, the UK, or Switzerland, the controller of your personal information (when we act as a controller) is Trusty Goat, Inc., 8 The Green Ste B, Dover, DE 19901, USA, operating the Keystone Listings service. You have the right to lodge a complaint with your local supervisory authority. A list of EU supervisory authorities is available at edpb.europa.eu; UK residents may complain to the Information Commissioner's Office (ico.org.uk); Swiss residents may complain to the Federal Data Protection and Information Commissioner (edoeb.admin.ch).

14. Other Regions

We comply with applicable local laws in other regions where the Services are available, including PIPEDA and provincial laws in Canada (e.g., Quebec's Law 25), in each case as those laws apply to our processing.

15. Cookies and Similar Technologies

We use cookies and similar technologies for the following purposes:

  • Strictly necessary — to authenticate users, prevent fraud, and provide the Services.
  • Functional — to remember your preferences and improve usability.
  • Analytics — to understand how visitors use our websites and Property Pages.
  • Marketing — to deliver and measure marketing communications, including on third-party sites.

You can manage cookies through your browser, through our cookie preference center (where available), and through universal opt-out signals like GPC. We honor Do Not Track signals only to the extent required by law.

16. Changes to This Policy

We may update this Policy from time to time. If a change is material, we will provide notice in advance by e-mail or in-product. The "Last Updated" date at the top of this Policy reflects the most recent revision. Continued use of the Services after the effective date constitutes acceptance of the updated Policy.

17. Contact Us

Keystone Listings, c/o Trusty Goat, Inc. 8 The Green Ste B, Dover, DE 19901

Privacy: privacy@keystonelistings.com General: hello@keystonelistings.com