Privacy

Last updated 6 November 2026. Written in plain English; it is the whole policy.

Who we are

Homefolio is operated by Dalyn Butler (support: dalynbutler@gmail.com). It gives real-estate agents and teams a page for each listing, a lead inbox and a portfolio page.

If you are an agent (our customer)

• Account: your email, a salted password hash, your plan and billing status. Card details never touch our servers — Stripe (web) or Apple (iPhone app) handle payment.
• Agent card and branding: the name, title, brokerage, licence number, phone, public email, bio, headshot, logo and colour you choose to publish. These are public by design: they appear on your listing and portfolio pages.
• Listings: everything you enter plus the photos and documents you upload, stored in Cloudflare R2. Published listings are public pages; drafts are visible only to you and your team.
• Push tokens: if you turn on notifications in the iPhone app, the device token Apple gives us, used only to send you lead alerts.

If you are a buyer or visitor

• Lead form: the name, email, phone, timing and message you send go to the listing agent (and any co-listing agent they named). We store them so the agent can see them in their inbox. The agent is the controller of that data; ask them to delete it, or write to us and we will.
• Analytics: we count page views, time on page, the source (QR code, link, portfolio or referring site) and taps on call/text/email. We keep a daily, salted hash so a return visit counts once — never your IP address, never a cookie, never a cross-site profile.
• Maps: the location map is an OpenStreetMap embed; loading it sends your request to openstreetmap.org under their policy. Video tours load from YouTube or Vimeo only when present.

What we never do

• Sell or share personal data, run ads, or build profiles.
• Scrape or import anything from an MLS.
• Keep a deleted account: deleting it removes listings, photos, documents, leads, tokens and billing links. R2 objects are deleted in the same step.

Who we rely on

Cloudflare R2 (photos and documents), a PostgreSQL database on our own server, Stripe (web billing), Apple (in-app billing and push), Resend (email) and Anthropic (the optional AI polish button — only the text you ask it to polish and the listing facts are sent; nothing about visitors).

Retention and your rights

Data lives as long as the account does. You can export your listings and leads from the app at any time and delete the account from Account → Delete. Email us for anything else — access, correction, deletion — and we answer within 30 days.

Children

Homefolio is for licensed professionals and adult buyers; we do not knowingly collect data from anyone under 16.