Privacy Policy

Effective 28 July 2026 · BaseStack, a product of BuiltStack, LLC ("we", "us").

BaseStack is a customer-relationship platform for real-estate agents. This policy explains what we collect, how we use it, and who we share it with. Two kinds of people appear here:

• Agents / agencies — our direct customers, who create BaseStack accounts.
• Clients — the buyers, sellers, renters and landlords whose information an agent enters into BaseStack. For client data, the agent is the "controller" and BaseStack acts as a service provider ("processor") on the agent's behalf.

1. Information we collect

From agents: name, username, business phone, optional personal cell, email, business address (verified via Google/USPS), and — when billing is active — payment information handled by our payment processor (we do not store card numbers).

From or about clients (entered by the agent, or submitted through an agent's intake / showing-request / application link): name, phone, email, target area and budget, and — for rental applicants — the details on the application (desired move-in, income for affordability, current address and landlord, employer, references, date of birth, pets, vehicle, and a typed e-signature). Agents may also upload documents such as a lease, ID, or pay stub.

2. What we do NOT collect or do

• We do not run credit or background checks ourselves and do not store screening reports. Screening is performed by independent, FCRA-compliant consumer reporting agencies (e.g. RentSpree, TransUnion SmartMove); we retain only a pass/fail status and a reference id.
• We do not collect or use race, religion, national origin, sex, familial status, disability, or source of income (e.g. housing vouchers) for any matching, ranking, or filtering — consistent with the Fair Housing Act and applicable state and local law.
• We do not sell personal information.

3. How we use information

• To operate the CRM: pipelines, applications, documents, and the internal lead-matching engine (which uses only price, ZIP, and timeline).
• To send messages you or your agent authorize — verification codes, showing requests, and listing notifications — only to contacts who have opted in.
• To invite applicants to third-party screening at the agent's request.
• To secure, maintain, and improve the service.

4. Service providers we share with

We share the minimum necessary data with vetted providers who process it on our behalf:

• Cloudflare — hosting, database (D1), and encrypted file storage (R2).
• Twilio — SMS delivery (verification codes, consented notifications).
• Resend — transactional email (verification codes).
• Google — business-address autocomplete/validation. USPS — address verification.
• Screening vendors (RentSpree / TransUnion SmartMove) — only when an agent invites an applicant; the report stays with them, not us.
• Payment processor (Square) — subscription billing, when active.

5. Text and email consent (TCPA / CAN-SPAM)

We send SMS and marketing email only to people who have opted in. Every text includes a one-tap opt-out — reply STOP to stop, START to resume. You can unsubscribe from emails at any time.

6. Security & access

Data is encrypted in transit. Each agency's data is isolated — one agent can never access another agency's clients or documents. Uploaded documents (leases, IDs, pay stubs) are stored in access-controlled storage keyed to the owning agency.

7. Retention & your rights

We keep information for as long as the agent's account is active or as needed to provide the service and meet legal obligations. Subject to applicable law (including CCPA/CPRA where it applies), you may request access to, correction of, a copy of, or deletion of your personal information. Clients should contact the agent who collected their data; agents and clients may also contact us at privacy@builtstack.app.

8. Children

BaseStack is not directed to anyone under 18, and we do not knowingly collect information from children.

9. Changes

We may update this policy; we will revise the effective date above and, for material changes, notify account holders.