listreelistree← Back to home

Legal

Privacy Policy

Last updated:

Your privacy matters to us. This Privacy Policy explains what personal data listree ("we", "us", "our") collects, why we collect it, how we use it, and your rights in relation to it.

listree is a link-in-bio and social CRM platform for real estate agents, accessible at https://www.listr.ee.

1. Information We Collect

1.1 Account Information

When you create an account we collect: your name, email address, phone number (for OTP verification), and optional profile details such as a photo, bio, and location.

1.2 Property Listings

Content you add to the platform — property details, photos, pricing — is stored and displayed on your public hub page.

1.3 Lead Data

When visitors submit enquiries through your public hub, we collect their name, phone number or email address, and their message. This data is visible only to you (the agent) and is not shared with other users or sold to third parties.

1.4 Instagram Integration

If you connect your Instagram Business or Creator account, we collect and store a Meta access token, your Instagram user ID and username, and limited post or reel metadata such as media IDs, permalinks, captions, thumbnails, and comment event metadata. We use this information to show your recent Instagram posts in your dashboard, link a listing to a post or reel, detect comments on linked media, create lead records, and send permitted keyword-triggered Instagram messages with the relevant listing link. We do not store your Instagram password.

1.5 Payment Information

Payments are processed by Razorpay (India) or Stripe (international). We do not store card numbers on our servers. We receive a confirmation of payment status and the associated subscription tier.

1.6 Usage Analytics

With your consent, we use PostHog to collect pseudonymised analytics about how you interact with the platform (pages visited, features used). See our Cookie Policy for details.

1.7 Technical Data

We may automatically collect IP address, browser type, device type, and referring URL for security and debugging purposes. This data is not used for advertising.

2. How We Use Your Data

  • Provide and operate the service — authentication, displaying your listings, routing leads to you.
  • Operate connected Instagram features — connecting your Instagram account through Meta, reading linked media metadata, receiving comment webhooks, creating leads from comments, and sending listing links when your configured keywords match.
  • Communications — transactional emails (login OTPs, subscription receipts) sent via Resend.
  • Product improvement — anonymised analytics to understand usage patterns.
  • Security and fraud prevention — detecting abuse and protecting your account.
  • Legal compliance — retaining records as required by applicable law.

We do not sell personal data. We do not use your data for behavioural advertising.

3. Data Sharing

We share data only with trusted sub-processors that help us run the service:

  • Supabase / PostgreSQL — database hosting.
  • Resend — transactional email delivery.
  • PostHog — analytics (consent-gated).
  • Razorpay / Stripe — payment processing.
  • Meta (Instagram API) — social integration (if connected), including Instagram login, media lookup, comment webhooks, and messaging features.

Each sub-processor is bound by data processing agreements and their own privacy policies.

4. Data Retention

  • Account data is retained for the lifetime of your account and for up to 90 days after deletion.
  • Lead data is retained until you delete it from your dashboard or delete your account.
  • Instagram access tokens and connected Instagram account metadata are retained until you disconnect Instagram or delete your account.
  • Analytics data (PostHog) is retained per PostHog's default retention settings (1 year).

5. Your Rights

Depending on your location you may have the right to: access, correct, delete, or export your personal data; withdraw consent to analytics at any time; and lodge a complaint with a data protection authority.

To exercise any of these rights, email us at hello@listr.ee.

You can also disconnect Instagram from your dashboard integrations page or delete your listree account from dashboard settings. Account deletion instructions are available at https://www.listr.ee/data-deletion.

6. Security

We implement reasonable technical and organisational measures to protect your data — including encrypted connections (HTTPS), hashed credentials, and access controls. No system is 100% secure; please use a strong, unique password.

7. Children's Privacy

listree is not directed to children under 13. We do not knowingly collect personal data from children.

8. International Transfers

Our servers and sub-processors may be located outside your country of residence. Where data is transferred internationally, we rely on standard contractual clauses or equivalent safeguards.

9. Changes to This Policy

We may update this policy periodically. The "last updated" date at the top of this page reflects the most recent version. Material changes will be communicated by email or in-app notice.

10. Contact

For privacy-related questions or requests, contact us at hello@listr.ee.