This Privacy Policy describes how Punchlist Labs ("we," "our," or "us") collects, uses, and shares information when you use the BusyRealtor platform and related services (collectively, the "Service"). By accessing or using the Service, you agree to the practices described in this policy.
1 Overview
BusyRealtor is a software-as-a-service (SaaS) platform that enables licensed real estate agents and brokerages ("Subscribers") to create and manage professional real estate websites. This policy applies to our Subscribers — the realtors and team members who create accounts on BusyRealtor.com.
If you are a visitor to a website built using BusyRealtor (i.e., a home buyer browsing a realtor's site), your data is handled by that realtor under their own privacy policy. We process it on their behalf as a data processor.
We do not sell your personal information to third parties. We are not in the business of advertising — we are in the business of building great software.
2 Information We Collect
Account Information
When you register for BusyRealtor, we collect your name, email address, password (stored as a secure hash), and the name of your brokerage or agency. We use this to create and manage your account.
Billing Information
Subscription payments are processed by Stripe. We do not store your full credit card number, CVV, or bank account details on our servers. We receive and store a payment token, the last four digits of your card, your billing name, and transaction records.
Content You Create
This includes property listings, photos, staff profiles, site settings, chatbot configurations, and any other content you upload or generate through the platform. This content is stored on your behalf and is yours.
Usage Data
We collect standard server logs including your IP address, browser type, pages visited, and timestamps. This helps us diagnose issues, improve performance, and detect abuse.
Data From Your Site Visitors
When visitors contact you through your BusyRealtor site (contact forms, appointment requests, chatbot conversations), that data is stored in your account's database. You are the data controller for this information; we process it on your behalf.
Communications
If you contact us via email or a support channel, we retain those communications to assist you and improve our service.
3 How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Process subscription payments and send billing-related communications
- Send transactional emails (account confirmations, password resets, billing receipts)
- Send service-related announcements, product updates, and platform communications to the email address associated with your account
- Respond to support requests and troubleshoot issues
- Monitor platform health, detect errors, and prevent fraud or abuse
- Improve and develop new features based on aggregate usage patterns
- Comply with legal obligations
We do not use your data or your clients' data for advertising purposes, and we do not sell data to brokers, marketers, or other third parties.
6 Data Security
We implement industry-standard technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- All data in transit is encrypted using TLS/HTTPS
- Passwords are hashed with bcrypt before storage — we never store plaintext passwords
- Payment card data is handled exclusively by Stripe (PCI DSS compliant)
- Database access is restricted to application servers on a private network
- Regular security updates applied to server software and dependencies
No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach that affects your rights, we will notify you as required by applicable law.
7 Data Retention
We retain your account data and content for as long as your subscription is active. After cancellation or account closure:
- Your account is deactivated and your public site is taken offline immediately.
- Your data is retained for 30 days in case you wish to reactivate or export.
- After 30 days, your account data and uploaded files are permanently deleted from our systems.
- Billing records and invoices are retained for 7 years as required by law.
You can export all your data at any time from the Settings → Data section of your dashboard.
8 Your Rights
Depending on your location, you may have the following rights regarding your personal data:
Access
Request a copy of the personal data we hold about you.
Correction
Request correction of inaccurate or incomplete data.
Deletion
Request deletion of your personal data, subject to legal obligations.
Portability
Receive your data in a structured, machine-readable format. Use the export tool in your dashboard.
Restriction
Request that we limit how we process your data in certain circumstances.
Objection
Object to processing of your data for specific purposes.
To exercise any of these rights, email us at contact@punchlistify.com. We will respond within 30 days. We may need to verify your identity before acting on a request.
9 Third-Party Services
The Service integrates with the following third-party providers. Each has its own privacy policy:
Stripe
Payment processing and subscription billing
Google Maps
Interactive property map (requires API key)
Google Analytics
Optional — configured per-account by Subscriber
OpenAI / Anthropic
Optional AI chatbot and description generation (requires API key)
Google Fonts
Typefaces loaded from Google CDN on public sites
10 Children's Privacy
The Service is intended for business use by real estate professionals and is not directed at children under 13 years of age. We do not knowingly collect personal information from children. If we learn that we have inadvertently collected personal information from a child under 13, we will delete that information promptly. If you believe a child has provided us with personal information, please contact us at contact@punchlistify.com.
11 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will:
- Update the "Last updated" date at the top of this page
- Send an email notification to all active Subscribers
- Post a notice in the platform dashboard for 30 days
Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy.
12 Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We aim to respond to all privacy-related inquiries within 5 business days.
Also see our Terms of Service
The rules governing your use of the BusyRealtor platform.