Privacy Policy

1. What we collect

• Account data: your email address, display name, phone (optional), and profile details you provide.
• Listing content: photos, descriptions, specs, and documents you upload.
• Inquiries: name, email, phone, message, purpose, and offer amount you send to a seller.
• Usage data: listing view counts (aggregate), saved searches, and favorites — used to operate features and our weekly alert emails.
• Operational logs: server logs (requests, timestamps) kept for security and debugging.

2. What we do NOT do

We do not sell your personal data. We do not run advertising trackers. We do not collect payment information (no payments are processed while billing is disabled in beta).

3. How your data is shared

• Sellers receive the name/email/phone you include in an inquiry about their listing.
• Public pages display the seller name, initials, location, and rating that accompany a listing — never your sign-in email.
• Email delivery is sent through our mail relay (Gmail SMTP under our domain); its servers process the message content to deliver it.
• Legal process: we may disclose data if compelled by valid legal order.

4. Cookies

ClearProp uses only strictly necessary cookies: your signed-in session cookie (HttpOnly, same-site) and language/theme preferences if set. We do not use advertising or third-party analytics cookies, so no cookie-consent banner is required for our current setup.

5. Retention & deletion

• Sign-in tokens expire automatically 20 minutes after creation (expired tokens are retained briefly for audit and then purged).
• Listings you delete are removed; expired listings follow the listing-duration policy.
• You may request an account/and export at any time: email privacy@clearprop.imwirefree.com. We respond within 30 days (GDPR/CCPA timelines).
• Backups rotate on our database schedule; deletion requests apply to backups within one cycle.

6. Your rights

Depending on jurisdiction (including EU/EEA and California), you may have rights to access, correct, delete, port, or object to processing of your personal data. To exercise any of them, email privacy@clearprop.imwirefree.com — we verify by sending a challenge to the account email.

7. Security

Data in transit is protected with TLS (being finalized with our domain certificate rollout). Session cookies are HttpOnly and HMAC-signed. Access to production data is limited to ClearProp staff, and staff actions on your account (support, impersonation with your recorded consent) are written to an internal audit log.

8. Your rights and how to use them (GDPR / CCPA)

Members in any jurisdiction can use the same self-service tools, and we treat the strictest standard as the default:

• Access & portability: download everything we hold about you as JSON at Profile → Your data → Export my data.
• Deletion: delete your account at Profile → Your data → Delete my account (password-confirmed). Personal rows are purged; shared history (offers, reviews) is pseudonymized so other people's records stay honest.
• Correction: edit your profile directly, or email privacy@clearprop.imwirefree.com.
• Opt-out of sale/sharing: we do not sell or share personal information with anyone, ever — there is nothing to opt out of.
• Non-discrimination: using these rights never changes your price or service.

Requests from a rights-authorized agent are honored with written permission from the member. We verify by sending a challenge to the account email before acting.

9. Retention policy

• Account profile — kept while your account is open; purged at deletion.
• Sessions & sign-in tokens — 90 days, then purged.
• Analytics events — 12 months, device-hash keyed (no cookies), then aggregated to counts.
• Messages, offers, escrow records — kept while your account is open (they are the deal trail both sides rely on); pseudonymized at account deletion.
• Transaction skeletons (offers, reviews) — pseudonymized, kept for legal-defense and tax record needs after deletion.
• Support tickets & staff audit log — 24 months, then purged.
• Listings you published — you control them; deleting your account asks whether to unpublish or keep (kept ones reassign ownership to the operator).

10. Sanctions screening (OFAC)

To comply with U.S. sanctions law, we screen account names and emails at signup, publishing, and offer time against the U.S. Treasury OFAC Specially Designated Nationals list. A match pauses the account/listing for manual review before transacting. The SDN list is public data; the screening does not add a record about you beyond the match case itself.

11. Children

ClearProp is not directed to anyone under 18, and we delete such accounts when identified.

12. Updates to this policy

Material changes will be announced on the site. This policy is not a contract — the Terms of Service govern the service.