Privacy Policy

This policy applies to personal information the operator of 1031 MLS collects when you use the marketplace — whether you are a buyer searching against an identification deadline, a seller publishing a listing, a professional in the directory, or a visitor using a calculator without an account.

We collect the following categories of personal information:

• Identifiers and account information — name, email address, phone number, password hash, and the roles and verification tier on your account.
• Exchange information you enter — relinquished and replacement property details, sale prices, mortgage payoffs, closing dates, and the 45-day and 180-day deadlines derived from them.
• Identification lists — the replacement properties you identify against an exchange, and the letters generated from them.
• Verification documents — government-issued identification, closing statements and similar documents you upload to earn a verification badge. These are the most sensitive category we handle, and they are treated accordingly (see retention below).
• Listing content — photographs, descriptions, addresses, prices and cap rates you submit for a listing.
• Directory and billing information — a professional’s firm details, service areas, and the subscription and payment records held by our payment processor. We do not store full card numbers.
• Messages and inquiries — the content of inquiries and threads between buyers and sellers, retained even after a message is withdrawn so a moderator can review a disputed transaction.
• Usage and device information — IP address, browser user-agent, pages viewed, listing views and saves, and audit-log entries recording sensitive actions.

We use personal information to:

• run the marketplace — publish listings, run search, and route inquiries;
• calculate and display exchange deadlines, identification lists and estimates;
• verify identity and eligibility, and grant or withhold verification badges;
• bill directory subscriptions and deliver leads;
• send transactional and account mail, and notifications you have not turned off;
• moderate content, prevent fraud and abuse, and keep an audit trail of sensitive actions; and
• comply with law and respond to lawful requests.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

We share personal information with the service providers we rely on to run the marketplace. Each processes it only on our instructions and only for the purpose named:

• Stripe — payment processing for directory subscriptions.
• Resend — delivery of transactional and notification email.
• Cloudflare R2 — object storage for listing photographs and, while they await review, verification documents.
• Mapbox — maps and geocoding for search and listing locations.
• Sentry — error monitoring, which may incidentally capture request context when something fails.

We may also disclose information to comply with the law, to enforce our terms, or in connection with a merger or acquisition, subject to this policy.

We keep personal information for as long as your account is open and as long as we need it for the purposes above or to meet a legal obligation. Two categories are worth stating precisely:

Verification documents are purged after review

A verification document — your government ID, a closing statement — is destroyed once a reviewer has finished with it. After a decision is made, the document is scheduled for deletion; a routine job then deletes the file from storage and clears the pointer to it, and the record of who was reviewed, by whom, and when survives without the document itself. We keep the proof that a check happened; we do not keep the passport.

Messages are kept even when withdrawn

Withdrawn messages, left threads and deleted saved searches keep their underlying records. This marketplace exists to support transactions that can end in dispute, and a moderator has to be able to read what was actually said. Withdrawn message content is readable only under a moderation permission.

Depending on where you live — and in particular if you are a California resident under the CCPA as amended by the CPRA — you may have the right to:

• know what personal information we have collected about you and how we use it;
• access a copy of that information;
• correct inaccurate information;
• delete your personal information, subject to legal exceptions; and
• not be discriminated against for exercising these rights.

Because we do not sell personal information or share it for cross-context behavioural advertising, there is nothing to opt out of on that front. To exercise any of the rights above, use our privacy request form. We will verify your request before acting on it, and we will respond within the timeline the law requires.

We protect personal information with access controls, encryption in transit, and an audit trail on sensitive actions such as opening a verification document. No system is perfectly secure, and we cannot guarantee absolute security.

1031 MLS is not directed at children and is not intended for anyone under 18. We do not knowingly collect personal information from children.

We may update this policy. Material changes are reflected in the effective date above and, for account-holders, notified through the service.