Privacy Policy

Last updated: March 1, 2026

HUT Real Estate Intelligence ("HUT," "we," "us," or "our") explains below how we collect, use, share, retain, and delete personal information when you use our platform.

Information We Collect

Account information: Name, email, phone, brokerage affiliation, role, and account settings.
Authentication/security data: Login metadata, session/security events, and anti-abuse signals.
Usage data: Features used, search and workflow interactions, and product telemetry.
Customer content: Saved properties, CRM/workflow notes, and configuration inputs you submit.
Billing metadata: Subscription/invoice metadata from payment processors (card numbers are not stored by HUT).

Data Categories & Purposes

The following table summarises the personal data we process, why, and how long it is retained:

Data Category	Examples	Purpose / Legal Basis	Retention
Account Identity	Name, email, phone, brokerage	Service delivery & contract performance	Active term + 24 months
Authentication & Security	Login events, IP, session tokens	Security, fraud prevention, legal obligation	24 months
Usage Telemetry	Feature clicks, search queries	Product improvement (legitimate interest)	24 months
Customer Content	Saved properties, CRM notes	Service delivery & contract performance	Active term + 24 months
Billing Records	Invoices, subscription events	Tax/accounting legal obligation	7 years
Property Card Outputs	Generated property snapshots	Service delivery	12 months
Public-Record Source Data	Government records, enrichments	Service delivery & legitimate interest	36 months
Audit & Compliance Logs	Access logs, policy decisions	Legal obligation & compliance	36 months

How We Use Information

Provide platform functionality and customer support
Operate account management, authentication, and fraud/security controls
Deliver alerts/notifications and subscription operations
Improve product quality, reliability, and compliance auditability
Meet legal, contractual, and regulatory obligations

How We Share Information

We do not sell personal information. We may disclose information to:

Service providers/processors (e.g., hosting, billing, messaging, support tooling) under contract
Brokerage administrators for firm-managed enterprise accounts
Authorities/law enforcement where required by valid legal process
Successors in a corporate transaction, subject to continued confidentiality obligations

Third-Party Services

We use the following third-party services that may process personal data on our behalf:

Service	Provider	Purpose	Data Shared
Payment Processing	Stripe, Inc.	Subscription billing & payment	Email, billing metadata (card data handled by Stripe only)
CRM & Business Suite	Zoho Corporation	CRM, email campaigns, help desk, billing sync	Name, email, subscription status, support interactions
Live Chat (Zoho SalesIQ)	Zoho Corporation	Visitor chat & engagement	Page URL, browser metadata, chat messages
Error Monitoring	Sentry (Functional Software, Inc.)	Application error tracking	Error context, IP (anonymised), browser metadata
Infrastructure / Hosting	Render, Redis Labs	Application hosting, caching, database	All application data (encrypted at rest and in transit)

Each third-party processor operates under a data processing agreement or equivalent contractual safeguards.

Data Retention and Deletion

We retain information only as long as necessary for service delivery, legal/contract obligations, dispute handling, and security. Retention windows and deletion workflows are governed by our internal Data Retention & Deletion Policy. Backups are retained on rolling windows and expire automatically. Automated retention enforcement runs on a scheduled basis, and all deletion events are recorded in our immutable audit trail.

Your Privacy Rights — Data Subject Access Requests (DSAR)

Subject to applicable law, you may exercise any of the following rights regarding your personal information:

Right of access: Request a copy of the personal data we hold about you.
Right to correction: Request correction of inaccurate or incomplete data.
Right to deletion: Request deletion of your personal data, subject to legal retention obligations.
Right to data portability: Receive your data in a structured, machine-readable format.
Right to restrict processing: Request that we limit how we use your data.
Right to object: Object to processing based on legitimate interest.
Right to withdraw consent: Where processing is based on consent, withdraw at any time.

How to Submit a Request

Submit: Email privacy@huthut.app with subject line "Privacy Request — [Your Name]", or write to the postal address below.
Verify: We will verify your identity using account-linked email or government-issued ID where required.
Acknowledge: We will confirm receipt within 3 business days.
Fulfil: Requests are completed within 30 calendar days. Complex requests may require an additional 30 days with notice.
Confirm: You will receive written confirmation of actions taken and any exceptions.

Cookie & Tracking Consent

HUT uses essential cookies required for platform operation. Non-essential cookies (analytics, third-party chat) are loaded only after you provide consent via our cookie banner. You may change your preference at any time using the "Manage Preferences" option in the site footer.

Security

We use administrative, technical, and organizational safeguards, including access controls, encryption in transit, and audit logging. No system is guaranteed to be 100% secure.

Children

HUT is not directed to children under 13, and we do not knowingly collect personal information from children.

Policy Changes

We may update this policy. Material changes will be posted with an updated effective date.

Contact

For privacy-related questions or to submit a data subject request:

Email: privacy@huthut.app
General support: support@huthut.app
Postal: HUT Real Estate Intelligence, Attn: Privacy, Houston, TX 77002