Privacy Policy

Last updated: July 16, 2026

In short:we collect what we need to run your workspace and generate your marketing kits — your account info, the property details and photos you upload, and basic usage data. We don’t sell your data. Property details you enter are sent to Google Gemini to write your listing copy; photos are not sent to Gemini unless a future feature says otherwise. You can export or delete your account data at any time from Settings.

This policy explains what curblist (“we,” “us”) collects when you use our website and application (the “Service”), why we collect it, who we share it with, and the choices you have. It applies to everyone who visits curblistit.com or uses the app, including free trials.

1. Information we collect

Account information

When you sign up, we collect your name, email address, and a hashed password (we never store your password in plain text). If you add license information to your brand kit, we store your real estate license number and issuing state — this is used only to display on your generated marketing assets where required, never shared beyond your workspace.

Workspace and property content

To generate a listing kit, you give us property details (address, price, beds/baths, square footage, features), photos you upload, and your brand kit (logo, colors, fonts, headshot, brokerage name, contact info). This content is stored so you can revisit, re-download, and re-list a property later.

Payment information

If you upgrade to a paid plan, payment is handled entirely by Stripe, our payment processor. We never see or store your full card number — Stripe shares back only what we need to manage your subscription (e.g., plan, billing status, renewal date).

Usage data

We log basic product usage — kits generated, assets downloaded, pages viewed — to understand how the product is used and to enforce plan limits (like monthly kit counts). We use standard web analytics; see the Cookies section below.

2. How your content reaches Google Gemini

When you generate AI-written copy, the property details you’ve entered (address, price, features, hook, tone) are sent to Google’s Gemini API to write descriptions, captions, and emails. Photos are notincluded in that request today. Google processes this content under its own API terms and does not use data sent through the API to train its consumer models. We don’t control Google’s infrastructure and aren’t responsible for its independent processing, but we only send the minimum property details needed to write your copy — never your account credentials, payment information, or another agent’s data.

3. How we use your information

To provide the Service — generate copy, render graphics, run compliance scans, and store your listings and brand kits.
To operate your account — authentication, plan enforcement, and customer support.
To process payments and manage subscriptions through Stripe.
To send transactional email (receipts, password resets) and, if you opt in, product updates — you can unsubscribe from the latter at any time.
To improve the product, using aggregated or de-identified usage patterns.
To detect abuse, enforce our Terms, and comply with legal obligations.

4. Who we share information with

We don’t sell your personal information. We share it only with:

Google (Gemini API) — property details, to generate your AI copy (see Section 2).
Stripe — billing details, to process payments and manage your subscription.
Infrastructure providers (hosting, database, file storage) — to run the Service, bound by confidentiality obligations.
Other members of your workspace — if you invite teammates, they can see the organization’s properties, brand kits, and listings, per their assigned role.
Law enforcement or regulators — only when required by valid legal process.

5. Data retention

We keep your account and workspace content for as long as your account is active. If you delete your account, we delete your personal data and workspace content within 30 days, except where we’re required to retain records (e.g., payment records for tax and accounting purposes, which Stripe retains per its own policy). Deleted records are soft-deleted first and purged on a rolling schedule.

6. Your rights and choices

Access & export — request a copy of your account and workspace data at any time.
Correction — update your account, brand kit, or property details directly in the app.
Deletion — close your account and request deletion of your data from Settings or by contacting us.
Marketing opt-out — unsubscribe from product emails via the link in any email, or from account settings.

If you’re in a jurisdiction with statutory privacy rights (e.g., California’s CCPA/CPRA), these choices are how you exercise them — contact us at success@curblistit.com if you need help.

7. Cookies and analytics

We use essential cookies to keep you signed in and remember your theme preference, and privacy-respecting analytics to understand aggregate product usage. We don’t use third-party advertising trackers on the app itself.

8. Data security

Passwords are hashed with bcrypt and never stored in plain text. Data is encrypted in transit (TLS) and at rest by our hosting and database providers. No method of storage or transmission is 100% secure, but we work to protect your information using industry-standard practices.

9. Children’s privacy

curblist is a business tool for licensed real estate professionals and is not directed at or intended for use by children under 18.

10. Changes to this policy

We’ll update the date at the top of this page when we make changes, and for material changes, we’ll notify you by email or an in-app notice before they take effect.

11. Contact us

Questions about this policy or your data: success@curblistit.com.

← Back to curblistit.com