Privacy Policy

Waypoint is a service operated by Buzz LLC, a California limited liability company ("we", "us", "our"). We provide a software platform that real estate agents use to publish property listing pages and capture leads from interested buyers. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

Information we collect

Account information. When you sign up, we collect your name, email address, and authentication identifiers from our identity provider (Supabase). If you subscribe, our payment processor (Stripe) provides us with your subscription status and the last four digits of your card — we never receive or store your full card number.

Listing content. Photos, descriptions, addresses, prices, and contact details that you upload to create listing pages. This content is published on the public listing URL you choose.

Lead data. When a visitor submits a lead form on a listing page, we collect their name, email, phone number, and message and share that information with the agent who owns the listing.

Usage data. We log requests, error reports, and aggregate usage events (page views, clicks) to operate and improve the service. With your consent, we also place cookies for analytics (Google Analytics) and advertising attribution (Meta Pixel, Google Ads).

How we use information

• To operate the platform, host your listings, and deliver leads to your inbox.
• To process subscriptions and prevent fraud (via Stripe).
• To send transactional email (lead notifications, billing receipts) via Resend.
• To measure marketing performance and improve the product, only when you accept analytics cookies.
• To comply with legal obligations and enforce our Terms of Service.

Sharing

We do not sell personal information. We share data only with the service providers required to run Waypoint: Supabase (authentication), Stripe (payments), Resend (email), Google Cloud (hosting and storage), and — only with your consent — Google Analytics, Google Ads, and Meta for advertising measurement.

Cookies and tracking

We use a cookie consent banner that defaults to denying analytics and advertising cookies until you choose to accept. We implement Google Consent Mode v2, which means our analytics and ad tags respect your choice and adjust their behavior accordingly. You can change your choice at any time by clearing your browser storage for this site.

Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict processing of your personal information. To exercise any of these rights, email us at the address below. We will respond within the time required by applicable law (typically 45 days for California residents, extendable by another 45 days where reasonably necessary).

Notice for California residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), gives you specific rights regarding your personal information.

Categories of personal information we collect. In the past 12 months, we have collected the following categories of personal information, as defined by the CCPA:

• Identifiers — name, email address, phone number, IP address, account ID.
• Customer records — billing address and payment method metadata (held by Stripe).
• Commercial information — subscription plan, billing history, listings purchased or published.
• Internet or electronic network activity — pages viewed, clicks, referring URLs, device and browser type, approximate location derived from IP.
• Geolocation data — only the city/region inferred from IP; we do not collect precise GPS location.
• Inferences — basic engagement scores used to prioritize lead notifications.

We do not collect sensitive personal information as defined by the CCPA (such as government IDs, precise geolocation, account credentials beyond what is needed to log you in, health data, or contents of private communications).

Sources. We collect this information directly from you, automatically from your device when you use the Service, and from our service providers (Supabase, Stripe, Resend, Google Cloud, and — only with your consent — Google Analytics, Google Ads, and Meta).

Purposes. We use this information to operate and secure the Service, process payments, deliver leads, send transactional and (where permitted) marketing email, measure and improve the product, prevent fraud, and comply with legal obligations.

Retention. We retain account, listing, and lead data for as long as your account is active and for up to 90 days after account closure, except where longer retention is required by tax, accounting, or fraud-prevention obligations (typically up to 7 years for billing records). Cookie and analytics data is retained for up to 14 months.

Sale and sharing of personal information. We do not sellpersonal information for money. However, when you consent to analytics and advertising cookies, we share certain identifiers and internet activity with Google Ads and Meta for cross-context behavioral advertising — which is treated as "sharing" under the CCPA. You have the right to opt out at any time, and we will not retaliate against you for doing so. We do not knowingly sell or share the personal information of consumers under 16.

Your CCPA rights. California residents may:

• Right to know what personal information we have collected about you and how we use it.
• Right to delete personal information we have collected from you.
• Right to correct inaccurate personal information we maintain about you.
• Right to opt out of the sale or sharing of your personal information.
• Right to limit the use of any sensitive personal information (we do not collect any, so this right is automatically respected).
• Right to non-discrimination — we will not deny service, change pricing, or reduce quality because you exercised a CCPA right.

How to exercise your rights. To opt out of sharing for behavioral advertising, click Do Not Sell or Share My Personal Information and deny analytics and advertising cookies. We also honor the Global Privacy Control ("GPC") browser signal as a valid opt-out request. For all other rights, email support@waypoint-realestate.com from the address on your account, or describe enough information for us to verify your identity. You may designate an authorized agent to make a request on your behalf by sending us a signed permission and government-issued ID (which we delete after verification).

Shine the Light (Cal. Civ. Code §1798.83). California residents may request information once per year about personal information disclosed to third parties for their direct marketing purposes. Email us at the address above to request this disclosure. We do not currently share personal information with third parties for their own direct marketing.

Data retention

We retain account and listing data for as long as your account is active. After account closure, we delete or anonymize personal data within 90 days, except where we are required to retain it for legal, tax, or fraud-prevention purposes.

Children

Waypoint is not directed to children under 16, and we do not knowingly collect personal information from them.

Changes to this policy

We may update this policy from time to time. Material changes will be announced by email or in-product notice at least 14 days before they take effect.

Contact

Buzz LLC, California, USA
Questions or requests: support@waypoint-realestate.com