Privacy Policy
How information is handled when you browse, submit a request or use an OpLot account.
Last Updated: September 14, 2026
Information we collect
We receive the information you choose to submit: name, email, optional phone, company, role, user type, property address or listing link, selected concept, consultation goal and messages, as relevant to the form. Browsing public snapshots does not require an account. We also process technical request information needed to deliver and protect the website.
How we use information
We use submissions to respond, evaluate a property, coordinate requested feasibility discussions, manage early access, maintain records and improve or protect the service. A submission may be linked to the referenced property. We do not need payment-card information for the current public service.
Account information
An existing sign-up and sign-in workflow uses Supabase Authentication. If you use it, Supabase processes your email, password credentials and authentication/session data; your profile may include name, email and assigned role. Authorized administrators manage access and property records. Public snapshots remain accessible without signing in.
Property submissions
The public property-review form accepts written property details and links. Requests and their contact details are saved in Supabase when configured. Company, role, concept and request type may be included within the stored message. A submission is not automatically published. Approved public property records, broker contacts and related imagery are displayed to visitors.
Files and images
The current public submission form does not provide direct file upload. Administrators can maintain property and image records and image URLs. If you separately provide documents or images, send only materials you are authorized to share; publication and service use depend on the agreed purpose. Third-party image hosts may receive a visitor's request when their images are displayed.
Communications
When email delivery is configured, Resend processes requester contact information and message content to deliver acknowledgments and notifications to OpLot. OpLot may contact you about your request or requested early access. You can ask us to stop optional communications; essential responses or security communications may still be needed.
Service providers
Supabase supports authentication and database records; Vercel supports hosting, request processing and analytics; Resend supports configured email delivery. Authorized providers process information to deliver those services. An existing optional concept-generation endpoint, if enabled and deliberately used, sends the submitted property data and chat history to OpenAI. The curated public snapshots and financial calculations do not call that endpoint. Provider operations may involve processing in countries other than your own.
Data sharing
Authorized OpLot personnel and service providers access information needed for their work. We may share information with a professional or listing contact when needed to handle a referral you request, subject to appropriate notice, or when required by law, to protect rights/security, or as part of a lawful business transition. Public listing contacts and approved property content are visible to others. The current application does not implement personal-data sales or advertising-audience integrations; this describes the implemented product, not an unconditional promise about future practices.
Retention
We keep information for the purposes for which it was provided, ongoing requests, security and applicable recordkeeping obligations. Retention depends on the type of record and the circumstances; there is no automatic universal deletion period in the current application. You can request deletion or correction. Provider backups, legal obligations and legitimate recordkeeping may limit immediate removal.
Security
We use access controls, authentication and hosted infrastructure to protect information. No internet service is completely secure. Do not send credentials, financial account numbers, identification documents or other unnecessary sensitive information in a property message.
Your choices
You may browse without registering, omit optional form fields, decline to submit, clear browser storage or adjust browser controls. Blocking session cookies can prevent sign-in. To stop optional communications or ask about your data, contact OpLot. Financial what-if inputs can be reset in the interface.
Privacy rights
Depending on your location and applicable law, you may have rights to access, correct, delete, receive a copy of, restrict or object to processing of personal information, withdraw consent where used, or complain to a regulator. Contact OpLot to make a request; we may need proportionate identity verification. Exceptions and applicable legal requirements affect the response. This policy does not assert that every jurisdiction's rights apply identically.
Children's privacy
The service is intended for adults evaluating real estate and is not directed to children under 13. Do not submit a child's information. Contact us if you believe a child has provided information so we can review and address it.
Third-party links
External listing, broker, professional and government sites have their own privacy practices. This policy covers OpLot's service, not websites reached through external links.
Policy changes
The Last Updated date identifies this version. We will update the policy as practices change and provide additional notice where required. New descriptions do not retroactively authorize unrelated uses of previously collected information.
Contact
For questions or requests about this policy, contact OpLot at deen@oplot.app.