Privacy Policy

Account information. Name, email address, password (stored only as a salted hash by our authentication provider), role (buyer, agent, admin), phone number if you enable SMS alerts, profile details, referral codes, and two-factor authentication settings for admins.

Listing information. Property address, price, status, attributes, descriptions, photos and video you upload or import, and the status history of each listing.

Buyer submissions. Soft Offers and buyer demand entries, including the amount indicated, timeline, financing notes, comments and any contact details you choose to provide, plus showing and tour feedback.

Anonymous submissions. You can submit a Soft Offer without revealing your identity to the agent. Your contact details are held in escrow and released to the listing agent only after the agent expresses interest and you grant permission. We still store the submission so we can operate the escrow, prevent abuse and satisfy legal obligations.

Usage and analytics data. Pages and listings viewed, engagement events, approximate location derived from IP, device and browser type, referral source, and error diagnostics.

Technical and security data. IP address, timestamps, rate-limit counters, bot-protection results and authentication events (such as failed sign-in attempts), used to protect accounts and the Platform.

When you submit information to us, you authorize YourSoftOffer™ to collect, store and process the information provided in order to facilitate communication, provide platform services, deliver notifications, improve the YourSoftOffer™ experience, and operate the platform according to this Privacy Policy. Specifically, we use information to:

• Provide platform services: publish listings, route Soft Offers, manage leads, showings and account settings.
• Connect buyers with real estate professionals, including the privacy-escrow release of buyer contact details you authorize.
• Send communications you have requested or that relate to your account — transactional email, SMS and push notifications.
• Improve platform performance, reliability and usability, including diagnosing errors and testing new features.
• Analytics and reporting: understand how listings, searches and Soft Offers are used, and give agents reporting on their own listings.
• Fraud prevention and security: rate limiting, bot protection, abuse investigation, authentication monitoring and audit logging.
• Business operations: subscriptions, invoices, refunds, customer support, accounting and legal compliance.
• Generate AI market reports and listing description clean-ups you request.

Aggregated and anonymized insights. We may in the future produce aggregated or de-identified market insights — for example, typical Soft Offer activity levels, price bands or demand trends for an area. This information is aggregated or stripped of identifiers so that it does not identify you, your household or any individual submission, and we do not attempt to re-identify it.

We do not sell your personal information, and we do not use buyer submissions for third-party advertising. If that ever changes, we will update this policy, tell you before it takes effect, and give you a way to opt out.

Before you submit a Soft Offer, buyer demand entry, inquiry, support request or new account, we ask you to agree to our Terms of Service and this Privacy Policy. Submission is not possible without that agreement, because it is how we are permitted to handle your information at all.

For each submission we record the user ID (where you are signed in), the email address supplied (where one is supplied), the timestamp, the version of the consent language you accepted, and the type of submission it applied to. This record exists so that both you and we can later confirm exactly what was agreed and when.

Marketing is separate and optional. A second, unticked checkbox lets you opt in to updates, market insights and product announcements. You never have to accept it to use the Platform, declining has no effect on any service or submission, and you can withdraw it at any time from your notification settings or by using the unsubscribe link in any marketing message.

We use strictly necessary cookies and local storage for sign-in sessions, security, bot protection and remembering preferences such as saved searches or a dismissed install prompt. We use limited first-party analytics to count page and listing views. We do not run third-party advertising trackers. Blocking essential cookies will break sign-in.

We share information with the service providers below, each of which processes it only on our instructions and only for the purpose listed. We do not sell personal information to anyone.

• Payment processing — Stripe. Handles card details, subscription billing, invoices and refunds. Card numbers go directly to Stripe and never reach our servers.
• Email delivery — our transactional email provider sends account, billing, Soft Offer, lead and support email from our verified sending domain, and receives the recipient address and message content.
• SMS delivery — Twilio, where you have opted in to text alerts. Receives your phone number and message content.
• Push notifications — Web Push and Firebase Cloud Messaging deliver notifications to your browser or mobile device.
• Cloud infrastructure — our Supabase-based hosting provider stores the database, uploaded media and account records, and runs authentication and server functions.
• Analytics — first-party product analytics counting page views, listing views and engagement events so we can report on performance. We do not run third-party advertising or cross-site tracking networks.
• Bot protection — Cloudflare Turnstile checks public form submissions and receives the challenge token and IP address.
• Address and mapping — Photon and Google Places provide address autocomplete and verification for addresses you type.
• AI model providers — generate market reports and listing description clean-ups from the listing data you submit for that purpose.
• Real estate professionals — the listing agent for a property receives the Soft Offer, demand or inquiry details you submit for it, and receives your contact details only as described in the anonymity and escrow rules above.

Future business partners. If we add a new category of recipient — for example an MLS or brokerage integration, a CRM connector or a new marketing partner — we will list it in this section and update the effective date before that sharing begins. Where the sharing goes beyond operating the Platform, we will ask for your consent first.

We may also disclose information to comply with law or a lawful request, to enforce our Terms or protect the rights and safety of users, or in connection with a merger, acquisition or sale of assets — in which case we will notify you and the acquirer remains bound by this policy.

All card payments are handled by Stripe over an encrypted connection. We never receive or store full card numbers, CVCs or bank credentials. We store only a customer reference, subscription status, plan, and invoice metadata needed for billing history and support.

Transactional messages (account, security, billing, Soft Offer and lead activity) are part of the service and cannot be fully disabled while your account is active, although you can tune notification categories in your settings. Every message identifies the sending domain, and SMS can be stopped by replying STOP.

Marketing messages — product announcements, market insights and updates — are sent only to people who ticked the optional marketing checkbox. They always include an unsubscribe link, and opting out of them never affects your account or any submission.

• Account and listing data: kept while your account is active and for up to 24 months after closure, so you can reactivate and so we can resolve disputes.
• Soft Offers, leads and lead events: kept for the life of the associated listing plus 24 months, as a record of the transaction trail.
• Billing records and invoices: kept for at least 7 years where tax and accounting law requires it.
• Security, rate-limit and audit logs: typically 12 months.
• Anonymous submissions where contact details were never released: contact details are deleted on request at any time.

On verified deletion request we delete or irreversibly anonymize personal data outside the legal-retention categories above.

Depending on where you live (including under the GDPR and US state privacy laws such as the CCPA/CPRA) you may have the right to access, correct, delete, restrict or object to processing, to data portability, to withdraw consent, and to not be discriminated against for exercising these rights.

To exercise a right, email support@yoursoftoffer.com from the address on your account. We respond within 30 days and may ask for verification. Agents can also edit or delete most of their data directly in the portal.

• All traffic is served over HTTPS with HSTS and a content security policy.
• Passwords are hashed by our authentication provider and checked against known-breach databases (HIBP) at signup and password change.
• Email verification is required before an account becomes active.
• Row-level database security restricts every record to the users entitled to see it; buyer comments are visible only to the listing’s agent.
• Admin accounts require two-factor authentication and their actions are written to an audit log.
• Rate limiting and bot protection are applied to authentication and public submission forms.
• Backups are taken by our infrastructure provider with point-in-time recovery.

No system is perfectly secure; we cannot guarantee absolute security.

The Platform is not directed to anyone under 18 and we do not knowingly collect their personal information. If you believe a minor has given us data, contact us and we will delete it.

We and our providers operate in the United States. If you access the Platform from elsewhere, your information will be transferred to and processed in the United States under appropriate safeguards.

We may update this policy; the version and effective date above will change and material changes will be notified by email or in-app notice.

Privacy questions or requests: support@yoursoftoffer.com. General enquiries: hello@yoursoftoffer.com. See also our Terms of Service.