Privacy Policy
What we collect, and why.
This policy explains what personal information REmentioned collects, how it is used, who it is shared with, how long it is kept and the choices you have. It covers rementioned.com, the agent backend, and the platform that runs the websites we build for real estate agents.
1. Who we are
REmentioned is a technology and marketing service for licensed real estate professionals in the United States. We build and run websites for agents, keep their online profiles consistent, and publish their own work in a form search engines and AI assistants can read. We are not a real estate broker and we do not represent buyers or sellers.
In this policy, "we", "us" and "our" mean REmentioned. "You" means anyone whose information we handle: visitors to rementioned.com, agents who contact us or become clients, and visitors to the websites we run for agents.
2. The two roles we play
For our own business
When you visit rementioned.com, write to us, buy one of our products or become a client, we decide how your information is used. This policy governs that use in full.
On behalf of the agents we serve
The websites we build for agents run on our platform. When someone sends an inquiry, requests a home valuation, creates an account, saves a favorite or sets up a saved search on an agent's website, we store and process that information for the agent, as the agent's service provider, and only to run the website for them. The agent decides how to use it and the agent's own privacy notice governs what they do with it. This policy explains what happens to it on our platform. Section 12 covers the choices you have.
3. What we collect
When you contact us
The contact form on rementioned.com asks for your name, email address, phone number, brokerage, the towns you work and your message. Only your name and email address are required. The form is sent to us by email. If you write to us or call us directly, we keep what you send.
When you buy
Checkout is hosted by Stripe. Stripe collects your name, email address, billing details and payment card. We receive your name, email address, what you bought, the payment status and confirmation that you accepted the applicable agreement. We never receive or store your full card number.
When you become a client
To deliver the service we collect:
- your name exactly as licensed, your license number and designation, and your license status;
- your brokerage's name and street address as they must appear in advertising, your phone number and your email address;
- your headshot, logo and other brand material, your bio, your specialties and the towns you work;
- links to your profiles on Google Business Profile, Zillow, Realtor.com, Homes.com and social media, and delegated access to them where you grant it;
- read-only access to your Google Search Console and Google Analytics, where you grant it, so we can show you how your site is found and report on it. We read those figures; we cannot change anything in either account, and removing our access in Google ends it immediately;
- what you tell us about your sales, for the short account that goes on each sold listing page;
- the names and contact details of your own clients that you give us so we can prepare a thank-you and review request page for them after a closing;
- your approvals, change requests and messages to us.
Listing and market data
We receive your own listings and closed sales from your MLS through a licensed data feed, as distributed by MLS GRID, and town level market figures under the same licence. Listing data includes property addresses, prices, photographs, dates and the names of the listing agent and brokerage. We use it to build your website and the content you approve, and we display it only as the MLS licence and its rules allow.
When you sign in to the agent backend
Agents sign in at rementioned.com/backend. We keep your sign-in email address, a session token held only in hashed form, and the actions you take there, such as approving a post.
On the websites we run for agents
We store the following for the agent whose website it is:
- Inquiries and valuation requests: your name, email address, phone number, message, the page you sent it from and the listing it was about, with the time it arrived and whether it was delivered to the agent.
- Accounts: your name, email address and phone number. A password is stored only as a one-way hash that cannot be turned back into the password. If you sign in with Google or Apple we receive the name and email address the provider shares and whether the provider has verified that email address. We create or link an account only when the provider confirms the address is verified.
- Favorites: a short text description of each listing you save. We do not store listing photographs with favorites.
- Saved searches: your search criteria, a name for the search, whether you want alerts, and whether you have confirmed your email address.
- Review request pages: the name of the agent's client and the sale the page thanks them for, as supplied by the agent.
Creating an account on an agent's website is itself passed to that agent as an inquiry, because it is a request to hear from them.
Collected automatically
- Server logs: IP address, date and time, the page requested, the referring page, and browser and device type, kept for security and to diagnose faults.
- Network and security: our websites are delivered through Cloudflare, which processes each request, including your IP address, to deliver pages quickly and to block attacks.
- Fonts: fonts are loaded from Google Fonts, which receives your IP address as part of that request.
- Email delivery: our email provider tells us when a message was delivered.
We do not use advertising pixels, third party analytics, session recording, cross-site tracking or device fingerprinting.
4. How we use it
- To answer your inquiry and arrange a conversation you asked for.
- To deliver what you bought: building and hosting your website, drafting content for your approval, publishing what you approve, aligning your profiles, preparing review request pages, press pitches and monthly reports.
- To deliver every inquiry from an agent's website to that agent, and to keep a stored copy so an inquiry is not lost if an email fails.
- To run accounts, favorites and saved searches on agents' websites, and to send saved search alerts, only after the email address has been confirmed.
- To bill you, keep accounts and meet tax obligations.
- To keep our services secure, prevent fraud and abuse, and find and fix faults.
- To comply with the law, with MLS rules and data licences and with real estate advertising rules, and to enforce our terms.
- To send messages about the service, such as approvals waiting, delivery confirmations and changes to these policies.
We do not sell personal information. We do not share it for cross-context behavioral advertising or targeted advertising. We do not add people who use our contact form to a mailing list. We never use an inquiry or account from one agent's website for our own marketing, and we never give it to another agent.
5. Drafting with AI
We use AI models, currently Anthropic's Claude, to draft content such as the account of a sale and weekly town market briefs. What we send is listing data, market figures and what the agent has told us about a sale. We do not send inquiries, account details, favorites or saved searches from agents' websites to an AI provider. Under our provider's commercial terms, content we send through its API is not used to train its models.
Every draft passes automated checks, is read by a person and publishes under an agent's name only after the agent approves it. We do not use AI or any other automated process to make decisions about individuals that have legal or similarly significant effects on them.
The content we publish for agents is public on purpose: it is written to be read by search engines and AI assistants. Information about visitors to agents' websites is never published.
6. Who we share it with
Service providers
These companies process information on our behalf, only to provide their service to us:
- Stripe: payments and checkout.
- Cloudflare: delivery of our websites and protection against attacks.
- Our hosting provider: the servers and databases the websites and platform run on.
- Resend: delivery of email, including inquiry notifications to agents, address confirmations and saved search alerts.
- Anthropic: drafting content, as described in section 5.
- Google: sign in with Google, Google Business Profile publishing for agents who connect it, Search Console and Analytics reporting for agents who grant it, and web fonts.
- Apple: Sign in with Apple.
- Our email and office software providers: for our own correspondence with you.
The agent
Inquiries, valuation requests and new accounts from an agent's website go to that agent. If the agent asks us to connect their CRM or another tool, they go there too. Agents can export the inquiries from their own website at any time.
The public
Content an agent approves is published on their website and on the profiles they authorized us to manage. That is the purpose of the service.
Legal and safety reasons
We disclose information when the law requires it, in response to valid legal process, to protect the rights, safety or property of our clients, the public or ourselves, and where an MLS, its data distributor or a regulator is entitled to review how listing data is displayed.
Business transfers
If our business is sold, merged or reorganized, information may pass to the successor, which will remain bound by this policy for information collected under it.
With your consent
In any other case, only when you have asked us to or agreed to it.
7. Google user data
When a visitor signs in with Google, we request only their name, email address and whether that address is verified. When an agent connects their Google Business Profile, we request access to manage that profile, which we use only to publish posts and profile changes the agent has approved and to keep the profile consistent with their website. When an agent grants us access to their Google Search Console and Google Analytics, we request read-only access, which we use only to show that agent how their own site is found and visited and to report it to them. We do not use one agent's figures for another agent, and we do not sell or share them.
REmentioned's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not use it to develop, improve or train generalized AI or machine learning models. People at REmentioned read it only with your permission, for security, to comply with the law, or where it is necessary to provide the service you asked for. You can remove our access at any time from your Google Account's third party connections page.
8. Cookies and tracking
- rementioned.com public pages set no cookies of our own and run no analytics or advertising scripts. Cloudflare may set a strictly necessary cookie to tell people from automated traffic.
- The agent backend sets one strictly necessary cookie that holds a random session token so you stay signed in. It is removed when you sign out.
- Agents' websites set a strictly necessary sign-in cookie for visitors who sign in. The platform sets no advertising cookies.
Because we do not sell or share personal information for advertising, there is nothing to opt out of. We still honor Global Privacy Control signals as a valid request to opt out, and we treat Do Not Track the same way.
9. How long we keep it
- Contact form messages: for as long as we need them to respond and follow up, and deleted when you ask.
- Client information: for as long as you are a client, then through the thirty days after your last day of paid service in which you may ask for an export of your content. After that we delete it, normally within ninety days, except for what we must keep: billing and tax documents for as long as tax law requires, and proof of your acceptance of an agreement and of your approvals for as long as a claim about them could be brought.
- Inquiries from agents' websites: retired from active use two years after they arrive, which removes them from the agent's screens and exports, and held in restricted storage until erased. They are erased permanently at the agent's request or at your verified request.
- Accounts, favorites and saved searches: until you delete them or ask us or the agent to, and handled under the agent's instructions if the agent's website leaves our platform.
- Server logs: rotated and deleted on a rolling basis.
- Backups: the platform database is backed up nightly and each backup is kept for fourteen days, so deleted information can remain in a backup for up to fourteen days.
10. Security
Every page and every connection to the platform is encrypted in transit. Passwords are stored only as one-way hashes, and session and access tokens are stored only in hashed form. Each agent's website can reach only its own information, a limit set by its access credentials rather than by anything a caller sends. Access to production systems is limited to the people who run the service, and we ask clients for delegated access to their accounts in preference to passwords.
No system is perfectly secure. If a breach affects your information, we will notify you and the authorities as the law requires.
11. Your rights and choices
Wherever you live, you can ask us to:
- tell you what personal information we hold about you, where it came from, what we use it for and who we have disclosed it to;
- give you a copy of it in a portable format;
- correct it if it is wrong;
- delete it, subject to what we must keep by law;
- stop sending you any email other than messages about a service you use.
You can also disconnect Google or Apple sign-in, remove our access to any account you connected, and stop saved search alerts with the link in every alert email.
Residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with consumer privacy laws may have these rights by law, along with the right to opt out of the sale or sharing of personal information, targeted advertising and profiling. We do none of those. Some of these laws may not apply to a business of our size; we honor these requests from everyone anyway. California residents may also ask whether we disclosed personal information to third parties for their direct marketing in the prior year; we did not.
How to make a request
Email [email protected] with "Privacy request" in the subject. We confirm who you are by writing to the email address we have on file, and we may ask for one more detail if needed. Someone you authorize may ask for you with your signed permission. We answer within forty-five days, and if we need longer we will tell you why and take no more than another forty-five days. We will not charge you or treat you differently for asking.
Appeals
If we decline all or part of a request, you can appeal by replying with "Appeal" in the subject within forty-five days. We decide appeals within sixty days and explain the decision. If you disagree with it, you can contact your state attorney general.
12. If you visited an agent's website
The agent controls the information you gave on their website. You can ask the agent directly, or email us at [email protected] and name the website. We will pass your request to the agent and help them carry it out, and where the law allows we will carry it out ourselves. You can delete favorites and saved searches from the website itself where it offers that, and stop alerts with the link in any alert email.
What the agent does with an inquiry once it reaches them, including in their own email, phone or CRM, is governed by the agent's privacy notice and their brokerage's policies, not by this policy.
13. Children
Our services are for adults and are not directed to children. We do not knowingly collect personal information from anyone under thirteen. If you believe a child has given us information, email us and we will delete it.
14. Where information is processed
We operate from the United States and our services are intended for people in the United States. Our service providers may process information in the United States and in other countries where they operate, under contracts that require them to protect it.
15. Changes to this policy
When we change this policy we post the new version here with a new effective date. If a change materially affects how we use information we already hold, we will tell clients by email before it takes effect.
16. Contact
Questions or requests about privacy: John Priani, REmentioned, [email protected].
See also our Terms of Service.