Privacy Policy

Last Updated: September 16, 2025

Welcome to Aloha My Home’s Privacy Policy. Aloha My Home, LLC (“Aloha My Home,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains what information we collect about you when you use our website, mobile app, and services (together, the “Services” or “Platform”), how we use and share that information, and your rights and choices regarding your personal information. We aim to be transparent and to use plain language so you can understand our practices.

By using Aloha My Home, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our practices, please do not use our Services. This policy is incorporated into our Terms of Use. Capitalized terms not defined here have the definitions given in the Terms of Use.

We may update this Privacy Policy from time to time (for example, to reflect changes in law or our Services), and will post the new policy with an updated effective date. We encourage you to review this policy periodically. If changes are significant, we may also notify you via email or within the Platform.

1. Information We Collect

We collect information that you provide to us directly, information automatically collected from your use of the Platform, and in some cases information from third parties. Some of this information may be considered “personal data” or “personal information” under applicable laws (meaning it identifies or relates to you as an individual).

a. Information You Provide Directly: When you use Aloha My Home, you may give us information, including:

Account Registration: When you create an account, we ask for basic registration details like your name, email address, phone number, and a password. If you register as a seller, we may also ask for your property address and some details about the property you plan to list. Buyers may provide their general location or purchasing preferences.

Profile Information: You have the option to provide additional profile details (e.g., a profile picture, a bio, designation if you are a licensed real estate agent, etc.).

Property Listings: If you list a property for sale, you will provide extensive information about that property. This may include the property’s address, price, description, photographs/images, videos, floor plans, the number of bedrooms/bathrooms, square footage, lot size, year built, and other features. You might also provide documents or disclosures related to the property (e.g., inspection reports, homeowner association details). Please avoid including personal contact details in the public description or images – we provide specific fields for necessary contact exchange.

Transactional Information: When you engage in a transaction (e.g., making or accepting an offer, signing a contract through our system), we collect information related to that transaction. This can include offer terms, contract details, and any messages or negotiation terms exchanged. If an offer is accepted, you may provide or confirm information needed for closing (like the legal names for the purchase agreement, or preferred title company).

Communications: If you use our messaging features to communicate with other users (buyers, sellers) or with us (customer support), we will collect and store those communications. This includes chat messages, inquiries on listings, and any feedback you provide.

Identity Verification and Compliance: We may request or receive documents to verify your identity or property ownership (such as a copy of a government ID, utility bill, or property deed). We will note information like your date of birth or address from those documents as needed for verification. We might also collect Social Security Number or Tax ID if needed for payment processing (e.g., issuing a 1099 form, if applicable for any payments).

Payment Information: Currently, sellers pay the platform fee at closing via the title company, so we typically do not directly collect sensitive payment info from you (like credit card or bank details) for the platform fee. However, if you choose to pay any fees directly to us (say, for a premium feature) or if in the future we facilitate earnest money deposits or other payments, we (or our payment processor) would collect payment information such as your credit card number, expiration date, CVV, and billing address, or bank account information for ACH. Such info is usually processed by third-party payment processors and not stored on our servers (see “How We Share Info” below).

Email and Submissions: If you subscribe to our newsletter, blog, or educational materials, we collect your email and any preferences. If you fill out any forms (such as a contact form, survey, or enter a promotion), we collect the information you submit. For example, if you participate in a survey about our services, your responses. If you post a question in our community forums (if any) or comment on a blog post, we collect what you post along with your name (or username).

Other: Any other information you voluntarily provide to us, such as when you respond to user polls, request customer support, or provide feedback. When you contact support, we’ll collect the information you choose to give us (which might include screenshots, account info, or descriptions of the issue).

b. Information We Collect Automatically: When you use our Platform, we (and service providers on our behalf) automatically collect certain information about your device and usage of the Platform through cookies, web beacons, and other tracking technologies. This includes:

• Device and Technical Data: We collect details about the device and browser you use to access the Platform. This may include your IP address (and approximate geographic location derived from it), device type (e.g., iPhone, Android, PC), operating system version, browser type/version (e.g., Chrome, Safari), screen resolution, unique device identifiers or advertising identifiers, and similar technical data.

• Usage Data: We log usage information such as the pages or screens you view, the dates/times of access, the route by which you navigate the site (e.g., what link you clicked to come to our site), your search queries within the Platform, properties you view or favorite, how long you spend on pages, interaction with features (like clicking buttons or sending messages), and errors or performance issues.

• Cookies & Similar Tech: We (or third parties) use cookies and similar technologies (like pixel tags, local storage, and SDKs in apps) to collect and store information. Cookies are small text files placed on your device to remember your preferences and activity. They help us recognize you, remember your preferences (such as saved searches), and understand usage. We use different types of cookies for different reasons:

• Essential Cookies: These are necessary for our site to function, e.g., to stay logged in, or load core features.

• Analytical/Performance Cookies: These help us see how users navigate the site, which pages are popular, what site or ad you came from, etc., so we can improve our service. We use tools like Google Analytics which use their own cookies. The information collected is typically aggregated and doesn’t directly identify individuals (we get reports like “X page had 100 visits”).

• Functional Cookies: These remember choices you make to give a more personalized experience, e.g., your preferred language or region.

• Advertising/Targeting Cookies: If we ever display advertising or use retargeting, these cookies would be used to show you relevant ads on our site or others, and limit how often you see an ad. For instance, we might later use Facebook Pixel or Google Ads cookies to promote our service to people who have visited our site. (As of the latest update, we primarily focus on our marketplace service rather than third-party ads, but we reserve the right to use these in the future with proper notice.)

• Location Information: Aside from the IP-based location, if you use our mobile app (if we have one) and allow location permissions, we might collect precise geolocation data from your device (for example, to show nearby listings or calculate distances). You can control location access via your device settings.

• Logging and Analytics: Our servers keep logs of requests, which include technical data and usage info as above. We may use third-party analytics (like Google Analytics, mentioned) and possibly session replay tools (which record how you interact with our site to help find UI issues – though if used, we’d ensure sensitive fields are masked).

• Do Not Track: Currently, our site does not respond to “Do Not Track” browser signals, because there is no standard for how to interpret them. You can manage cookies as described in our Cookie Policy (see below).

For more details on cookies, see our Cookie Policy section.

c. Information from Third Parties: In some cases, we obtain information from third-party sources:

• Service Providers: If we use verification services (for identity or credit), they might provide results (e.g., confirmation that an ID is valid, or a credit score if a feature required it). If a title company or other partner reports back closing confirmation or any issues, we collect that.

• Social or Single Sign-On: If we allow sign-up through Google, Facebook, or another account, we would get information from them (like your name and email, as permitted by you and that platform) to create your account. That information will be treated according to this policy once we have it.

• Public Records and Listings: For instance, we might integrate with MLS data or public property records to pre-fill some info on a listing (with your consent). If we pull in data like property tax assessments, recent sale history, neighborhood info, etc., those are third-party data we display to enhance listings.

• Referral Programs and Affiliates: If someone refers you to our Platform or you interact with our social media or advertising, we might receive certain info. For example, if you sign up via a referral link, we may know which user or campaign referred you.

• Third-Party Cookies: As mentioned, third-party analytics and ad partners may provide us with aggregate insights (like demographics or interest categories) based on your interactions with our site or other sites (this ties into advertising cookies). For instance, Google Analytics might give us demographic info about our user base in aggregate.

We use and combine all of this information to provide and improve the Services, as detailed next.

2. How We Use Your Information

We use your information for various business purposes consistent with operating an online real estate marketplace. The primary uses include:

Providing and Improving the Service: We use personal information to operate the Platform’s core functionalities – for example, using your account data to log you in, using your listing info to create a public listing page, using your search queries to show results, etc. We also use it to customize your experience (such as showing relevant homes or content based on your location or past activity). We might use usage data to debug and improve site performance, features, and layout (e.g., see where users drop off during a process and improve it). Information about device types and errors helps us ensure compatibility and fix issues.

Facilitating Transactions: We use information to enable communications and transactions between buyers and sellers. For instance, if you express interest in a property, we use your profile info and message to notify the seller. If you schedule a showing, we use calendar and contact info to set that up. When an offer is made, we generate the offer summary for the other party. If a contract is signed, we use the provided information to fill in documents and route them to the chosen title company. We basically act on your provided info to carry out the steps of the home sale process. We may also send transactional messages: for example, confirming that your offer was submitted, or reminders like “You have a showing tomorrow at 10am.” These are part of the service.

Communication: We may send you administrative or account-related communications, such as updates to Terms or Privacy Policy, security alerts, or support messages in response to your inquiries. We will also send transaction-related communications, as noted (messages between users, offer notifications, etc.). Additionally, if you opt in, we might send marketing communications: e.g., our newsletter, new feature announcements, promotions, or educational content about FSBO selling. You can opt out of marketing emails at any time (each such email has an unsubscribe link, or you can adjust preferences in your account). Note: even if you opt out of marketing, we will still send essential transactional or account emails (you can’t opt out of those as long as you have an account, because they are not promotional).

Analytics and Product Development: We use data (mostly aggregated or pseudonymized) to understand user behavior and preferences. For example, we might analyze search and listing view data to see which features are most used, or what types of homes are most popular in searches. This helps us improve existing features and develop new features. We may use heatmaps or session replays (as mentioned) to see UI issues. We also measure the effectiveness of our own marketing (like how many people who get an email actually sign in or list a home).

Personalization: We might use cookies and activity data to personalize the content and experience for you. For instance, remembering your recent searches or viewed listings to show them on your next visit, or suggesting homes in locations you’ve shown interest in. If we implement recommendation features (“Homes you might like”), that would involve analyzing your interactions.

Advertising and Retargeting: Currently, we do not host third-party ads on our platform (aside from maybe our own promotions), but we may in the future. We may use collected data to deliver relevant advertisements to you. For example, if we partner to advertise on other websites, we or our ad partners might use cookies to show you Aloha My Home ads on other sites after you visited ours (this is known as retargeting). Or we might show ads on our site for services relevant to our users (like moving companies), in which case cookies might tailor those. Any such activities will comply with applicable law (and if required, we’ll seek consent, especially in regions like the EU). You can manage cookie preferences as described in our Cookie Policy.

Security and Fraud Prevention: We use information to maintain the security of our Platform and users. This includes using data to detect and prevent fraud, abuse, security incidents, and other harmful activity. For example, we may use certain data (IP address, behavioral patterns) to identify potential fraudulent listings or accounts. We might use captcha or other tools when suspicious activity is detected. If necessary, we’ll use info from ID verifications or other sources to confirm identities and block malicious actors. We also may use your communications or behavior to investigate spam or violations of our Terms (like attempts to circumvent fees, or harassment reports). In short, to enforce our policies and protect the integrity of our marketplace, we will use relevant data.

Legal Compliance: We may need to process and retain personal information for legal and regulatory reasons. For example, to comply with Know Your Customer (KYC) or anti-money laundering laws, we might retain identity verification data or reports of suspicious transactions. We also keep records to be ready for audits (like if regulators ever review FSBO practices or privacy compliance). If you exercise privacy rights (like requesting a copy or deletion of your data), we’ll use your info to fulfill those requests. Additionally, if we receive a lawful subpoena or legal order, we may need to disclose data (see Sharing section).

Service Announcements: On occasion, we might send out Service-related announcements when necessary (for example, if our service is temporarily suspended for maintenance, or about major changes to functionality). These are not promotional but for your awareness.

Aggregated Data: We may aggregate or anonymize personal information so that it can no longer identify any individual, and use that data for purposes such as statistical analysis, research, and improving our business. For example, “We have X number of users in Virginia and Y in Maryland” or “Average time to sale on our platform is 45 days,” etc. This aggregated data contains no personal details and may be shared externally (e.g., in marketing materials or with partners) in that form.

Legal Bases for Processing (GDPR note): If you are in a jurisdiction that requires a legal basis for data processing (like the EU under GDPR), our legal bases include: Contract (we process data to provide the services you requested under our Terms – e.g., using your info to facilitate a sale contract, so it’s necessary for performance of a contract you’re party to); Legitimate Interests (for uses like improving our product, fraud prevention, direct marketing of our own similar services to users, etc., we ensure our interests are balanced with your rights); Consent (for certain optional uses, like sending you third-party marketing or using certain cookies, we rely on your consent, which you can withdraw); and Legal Obligation (some processing is done to comply with laws). We’ll specify these in more detail if needed in a GDPR-specific addendum or upon request.

3. How We Share Information

We understand that your personal information is important. We do not sell your personal information to third parties for their own direct marketing. We only share information in the following circumstances:

3.1 Sharing Between Users: Since Aloha My Home is a platform intended to connect buyers and sellers, certain information is shared with other users by design:

• Public Listings: If you are a seller who creates a property listing, the content of that listing (address, property details, photos, your display name or initials, etc.) will be publicly visible to any visitors on our site. Contact information is not publicly shown, but once a buyer signs up and inquires, we share means for you to communicate (e.g., via our messaging or masked email relay). If you include any personal info in the listing description (which we advise against), that will be visible. We may also syndicate or share your listing on partner sites (for example, if we partner with another real estate site to increase exposure, or share on social media).

• Buyer to Seller (and vice versa): When you express interest or schedule a showing for a property, the seller will see your name and basic profile info (and any message you send). When a buyer makes an offer, the seller will see the buyer’s full name (as needed for the contract) and offer details. Once an offer is accepted, both parties will typically receive each other’s full names and contact information because they will need to coordinate the contract and closing. For instance, on a purchase agreement generated, buyer and seller names, addresses (for contract), and possibly contact emails/phones will be exchanged. Also, if a buyer or seller uses our messaging or call features, the content of those communications is obviously shared with the other party.

• Reviews/Feedback: If we implement a system where buyers and sellers can rate or review each other or provide testimonials, any content you post in such a manner could be visible to other users (with your first name or initials).

• Agent Use: If you are an agent using the platform on behalf of a client, information may be shared similarly (the agent might provide their client’s details for a contract, etc.). But such usage would still involve user-to-user sharing as needed for the deal.

We do not disclose things like your private messages to other users beyond the intended recipient. Internal messages between two parties are only accessible to them (and occasionally to our staff if needed for compliance or support, as noted below).

3.2 Service Providers: We use trusted third-party companies to perform certain business-related functions on our behalf. They only get the information needed for their function and are contractually obligated to protect it and use it only for our service. Key service providers include:

• Hosting & Infrastructure: We might use cloud service providers (like Amazon Web Services, Microsoft Azure, or similar) to host our website, database, and data. These providers store data (including personal info) on our behalf.

• Email and Communication Providers: We use email delivery services (for example, SendGrid, Mailgun, or similar) to send the emails we need to send (like verification codes, notifications, newsletters). They obviously process your email address and the content of the message on our behalf to deliver it. If we send SMS texts (e.g., showing alerts), we use an SMS gateway (like Twilio).

• Analytics Services: As mentioned, we use analytics tools like Google Analytics. They use tracking technologies to collect data about your use of our site and report to us. Google Analytics may receive info like your IP, device info, pages visited, etc. (Google’s ability to use and share info collected by Google Analytics about your visits is governed by their Terms and Privacy Policy). You can opt-out of Google Analytics by using their browser add-on, etc. We may also use other analytics or error-tracking services (e.g., Sentry for error logging). These help us diagnose issues by logging data about crashes or bugs, which may incidentally include some user data (like if an error is tied to your account action).

• Payment Processors: If we handle any online payments, we will use a PCI-compliant third-party payment processor (e.g., Stripe). They will handle your credit card or bank info. We do not store full financial account numbers on our servers (except maybe the last4 digits and a token). The processor will inform us whether a payment was successful and other necessary transaction details. These processors might also screen for fraud. They might require certain info for compliance (for instance, Stripe might need the payor’s address and name to process a charge or do verification). Their use of your data is governed by their own privacy policies as well (but they are not allowed to use it for other purposes than processing payments for us).

• Identity Verification / Fraud Prevention Tools: We could use third-party verification services (for example, services that verify ID documents or perform a background check for fraud prevention). If we do, we’ll share the data needed (like your name, DOB, perhaps the document image) and they will return a result (verified or not, etc.). Similarly, we might use services to check if a given user is on any government sanctions lists (complying with anti-money laundering law).

• Communications and Customer Support Tools: We may use tools for live chat support or customer relationship management (CRM). For example, if we use Zendesk or Intercom for customer support, when you chat with us or email us, those communications and your contact info will pass through those systems. They store the conversation history for us. If we do phone support, call data may be collected by a telephony provider.

• Marketing and Advertising Partners: If we run marketing campaigns, we might use marketing platforms (like Mailchimp for emails, or Facebook Custom Audiences to show ads). For instance, we could upload a list of user emails (in a hashed format) to Facebook to target ads to our users (Facebook then matches if you have an account). We could also use Google Ads or similar to run ads; they place cookies, etc., as described in Cookies section. If we have referral programs or partnerships, we might share data needed to credit referrals (like a referral ID or confirmation of sign-up).

• Document E-signature and Management: If we integrate with a document signing service (like DocuSign or Dotloop) for facilitating the real estate contract signatures, then the information needed for those documents (names, emails, contract terms) will be processed by that third-party platform to generate and store the e-signed documents. They might keep a copy of the contract for legal evidence of signature. They operate under their security and privacy commitments as well.

We ensure that service providers only use your data to provide services to us and not for other purposes. We also require they maintain confidentiality and security of your data.

3.3 Third-Party Partners (with your direction): In some cases, you may explicitly direct or consent to us sharing information with a third party. For example:

If you choose to connect or integrate a third-party service with Aloha My Home (for instance, if we allow you to import a listing from another platform, or share your listing to Facebook), we will share data as needed to fulfill that.

If as a buyer or seller you ask us to connect you with a third-party provider (like a mortgage lender, home inspector, or insurance provider), and you consent, we might share your contact info and property interest with that provider so they can reach out to you. (As an example, maybe we have a button “Get financing quote” and by clicking it you agree we send your name, contact, and the property price to a partner lender; they then handle it from there under their own privacy policy.) This is always up to you.

When a transaction goes to closing, we share necessary information with the title or escrow company and any other necessary third parties involved in the closing process. For instance, we will send the purchase agreement contract (containing buyer and seller names, addresses, agreed price, etc.) to the title company chosen, as well as contact info for both parties. We might also coordinate sharing any KYC info needed by the title company. We may also share info with insurance or warranty companies if such services are part of the transaction at your request.

If we partner with other listing websites to broaden exposure, we might send your listing data to those sites (which then display it). They may include photos and descriptions, but we would not share your personal contact unless it’s part of the listing contact (which normally it isn’t; leads would come back through us or via anonymized email). We would ensure those partners only use it for listing display purposes.

If you use a financing tool or mortgage calculator integrated on our site, any data you input might be sent to the service providing that feature (which could be a third party). We’ll indicate if that’s happening.

3.4 Legal and Safety Reasons: We may disclose personal information if we reasonably believe that such action is necessary to:

Comply with the law and any lawful requests or legal process, such as to respond to subpoenas, warrants, or court orders. For example, if we get a subpoena for user records related to a fraud investigation, we’ll comply to the extent legally required.

Enforce our Terms of Service and policies, including investigation of potential violations. If you are involved in a dispute or violation, we might share relevant information with legal counsel or arbitrators/adjudicators.

Detect, prevent, or address fraud, security, or technical issues. If we suspect fraudulent activities, we might share info with appropriate law enforcement or fraud prevention agencies. For example, if someone attempted to scam users on our platform, we might report that and provide data (user name, IP, communications) to law enforcement.

Protect the rights, property, or safety of Aloha My Home, our users, or the public. This includes exchanging information with other companies and organizations for fraud protection and spam/malware prevention (for example, if a known bad actor is identified, we might warn others or seek outside help). If someone’s communications on our platform threaten violence or illegal activity, we may alert authorities and provide information to prevent harm.

In cases of disputes between users, if we receive legally binding requests (like from arbitrators or law enforcement) for communications data or logs, we may have to provide those.

We will attempt to notify you if we are compelled to share your data in this way, unless legally prohibited or if it’s clear we should not (like in an emergency).

3.5 Business Transfers: If Aloha My Home is involved in a merger, acquisition, investment, reorganization, or sale of all or some of its assets, your information may be transferred as part of that deal. For example, if another company acquires us or invests, user data typically is one of the transferred assets. In such a case, we will ensure the successor respects your personal data in line with this Privacy Policy (or give you notice and choice if it’s to be used differently). Similarly, if we go through bankruptcy or insolvency proceedings, your data may be considered an asset and sold or transferred, but any new entity will still be bound by the privacy commitments made here (or we’ll notify you and perhaps get consent if required).

3.6 Aggregated/Non-identifiable Data: We might share aggregated information (that does not identify you personally) with third parties for various purposes. For example, publishing trends about FSBO transactions, or sharing statistics with a research partner or journalist (“X% of our users sold within 60 days”). This information will not contain personal details. We may also share anonymized data (where personal identifiers have been removed) for analytical or research purposes.

3.7 With Your Consent: Other than the cases above, we will seek your consent before sharing your personal information with third parties for purposes not covered by this Privacy Policy. For instance, if we ever want to post your success story or testimonial on our site using your name or photo, we’d ask your permission. Or if a third party requests your info for their own marketing, we’d only do that if you opt-in.

In summary, we share information primarily to facilitate the services you expect (connecting buyers and sellers and completing transactions), to run our business (with providers who support our operations), and for legal protection and compliance. We do not sell your info to brokers or spammers. We aim to keep sharing limited to what’s needed and will update you if our sharing practices change in a material way.

4. Your Rights and Choices

Account and Profile Information: You can access and update much of your account information by logging into your Aloha My Home account and editing your profile or settings. For example, you can change your contact information, password, and notification preferences. It’s important to keep your info up-to-date (especially email/phone) so we can reach you for transactional matters.

Communication Preferences

• Email Marketing: If you no longer want to receive marketing or promotional emails from us, you can click the “unsubscribe” link at the bottom of those emails, or adjust your email preferences in your account settings (if available). Note that you will still continue to receive transactional or service-related emails (for example, responses to inquiries, updates on an ongoing transaction, policy updates, etc.), as these are not promotional. If you truly wish to not receive any emails at all, you would need to deactivate your account (because we need to communicate for active transactions).

• SMS: If you opted in to SMS alerts (say for showing reminders), you can opt out by replying “STOP” to any message (or per instructions provided). Standard messaging rates apply as per your carrier. Opting out of marketing texts doesn’t affect service communications via text if you explicitly requested those (e.g., if you requested a one-time verification code by SMS).

• Push Notifications: If our mobile app sends push notifications, you can disable these by adjusting the app or device settings.

• Do Not Call: We generally communicate by email or in-app, but if we ever call for promotional purposes and you prefer we not, just let us know and we will respect a do-not-call request. Keep in mind, if you’re in an active transaction, phone calls may be necessary for service reasons.

Cookies and Tracking

• Cookie Preferences: We provide a Cookie Policy (see below) that explains how to manage cookies. When you first visit, depending on your region, you might see a cookie banner to manage preferences. Even if not, you can usually set your browser to refuse some or all cookies or to alert you when cookies are being used. You can also delete cookies that have already been set. Please note that if you disable cookies, some parts of our site may not function properly (like staying logged in, or remembering preferences).

• Analytics Opt-Out: As mentioned, you can opt out of Google Analytics specifically by installing the Google Analytics opt-out browser add-on. For other analytics or advertising, third parties may offer their own opt-outs. For example, to opt out of targeted ads from many providers, you can use tools like the NAI Opt-Out (Network Advertising Initiative) or DAA’s WebChoices (Digital Advertising Alliance). On mobile, you can usually limit ad tracking via your device settings (“Limit Ad Tracking” on iOS, or “Opt out of Ads Personalization” on Android).

• Do Not Track: If you have enabled the “Do Not Track” (DNT) browser feature, note that our site behavior might not change in response to DNT signals, because there isn’t a consensus on how to interpret them and we rely on the cookie consent and preferences approach described above.

Privacy Rights (California/CCPA and others): If you are a California resident, you have specific privacy rights under the California Consumer Privacy Act (CCPA) and California’s “Shine the Light” law, among others. Similarly, residents of certain other jurisdictions (like the EU, under GDPR, or Virginia under VCDPA, etc.) have rights. We honor applicable rights requests. These may include:

• Right to Know: You can request that we disclose to you the categories and specific pieces of personal information we have collected about you, as well as the categories of sources, the business purpose for collecting, and the categories of third parties with whom we share personal info. Essentially, “please provide me the data you have about me and more info about how it’s used/shared.”

• Right to Delete: You can request that we delete personal information we have collected from you. Important: Because our Platform involves transactions, we will need to retain certain info for legal and business reasons (for example, we cannot delete information related to a completed transaction entirely, as we have to maintain records, or if required for dispute resolution or legal compliance). But if you request deletion, we will remove what we can from our active systems and flag your account not to use the data for other purposes. Some data may remain in backups or archives for a certain period, but we will isolate it.

• Right to Correct: If you believe we hold inaccurate information about you, you have the right to request we correct it. The easiest way is often for you to log in and fix it (like updating a misspelled name), but you can also contact us.

• Right to Opt-Out of Sale/Sharing: As noted, we do not sell personal info for monetary consideration. We also don’t share your info for cross-context behavioral advertising except as described (cookie-based targeted ads which you can opt out of by cookie settings). If in the future our practices change in a way that might be deemed “selling” under broad definitions (like exchanging data for some benefit), we will provide a mechanism to opt out (like a “Do Not Sell or Share My Personal Information” link). For now, that is not applicable since we don’t do such sharing.

• Right to Non-Discrimination: If you exercise any privacy rights, we will not discriminate against you. This means we won’t deny you services, charge you different prices, or provide a different level of quality just because you made a privacy rights request. However, in some cases, fulfilling a deletion request might prevent us from being able to provide service (e.g., if you ask us to delete all your data while you have an active listing, we might have to close your listing because we can’t operate it without data). We will inform you if such a situation arises as a result of your request.

• Shine the Light (California): California’s “Shine the Light” law allows residents to request certain information about what personal info we share with third parties for those third parties’ direct marketing purposes. We do not currently share personal info with third parties for their own direct marketing. So there is nothing to disclose under that law. If we ever did in the past year, you could request a list of categories of data shared and who we shared it with.

Exercising Your Rights: To submit any privacy request (access, deletion, etc.), you can contact us by email at [email protected] with the subject “Privacy Request” and detail what you need. Alternatively, if we have an account portal with options or a web form, you can use that. We will need to verify your identity before fulfilling certain requests, especially for access or deletion, to make sure it’s really you (for example, by confirming through your logged-in account, or asking for some identifying information). For deletion requests, we might reconfirm since it’s a serious step. If you have an authorized agent (someone acting on your behalf), there are steps: we would need written permission from you or a power of attorney, and we’ll still verify the agent’s identity and potentially yours. We aim to respond to requests within the time required by law (typically within 45 days for CCPA, with an extension if needed which we would communicate).

International Users – GDPR Rights: If you are in the European Economic Area (EEA) or a similar jurisdiction with GDPR-like rights, you have the rights to access your data, rectify inaccuracies, erase (right to be forgotten, within limitations), restrict or object to certain processing, and the right to data portability (get a copy of your data in a machine-readable format). You also have the right not to be subject to a decision based solely on automated processing (we don’t do solely automated decisions with legal effects – any significant decision like banning for policy violation involves some human review). You also have the right to withdraw consent at any time if processing is based on consent (withdrawing won’t affect lawful processing we did previously). To exercise these, you can also email us at [email protected]. Additionally, EU users have the right to lodge a complaint with a Data Protection Authority (DPA) in their country if they believe we have infringed their data rights. We would appreciate the chance to address any concern first, so do reach out.

Data Retention: We will retain your personal information only as long as necessary to fulfill the purposes for which it was collected, as outlined in this Policy, and as required or permitted by law. That often means: for the duration of your account being active, plus a period after closure if needed. For example, if you delete your account or it becomes inactive, we might keep certain info for a few years for legal/tax/reporting reasons, or in case of disputes. Real estate transaction records might be kept for at least several years because property law claims or tax issues can arise later. Communications with customer service might be retained to help us improve or to establish what happened if there's a future dispute. When we no longer have a legitimate need or legal obligation to keep your data, we will securely dispose of it or anonymize it. Our retention also depends on context: for instance, logs and backups might be routinely purged after X days unless they are flagged for an active issue.

Security: We take security seriously and use appropriate measures (technical, administrative, and physical) to protect your personal information from unauthorized access or disclosure. For example, our site uses HTTPS encryption for data in transit (so your browser’s connection is secure). We encrypt certain sensitive data at rest. We restrict access to personal data to employees and contractors who need it to operate, and they are subject to confidentiality obligations. We have firewalls and monitoring against intrusion. However, please understand that no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. You are responsible for keeping your login credentials secure. Do not share your password; use a strong password and consider enabling any available two-factor authentication. If you suspect any unauthorized access to your account, notify us immediately. We also recommend that you log out when using shared devices. Our security team periodically reviews and updates practices to adapt to new threats.

Children’s Privacy: Our Services are not intended for children under 18. We do not knowingly collect personal information from anyone under 18 years of age. If you are under 18, please do not use the Platform or provide any personal info. If we learn that we have inadvertently collected personal data from a child under 18, we will take steps to delete such information as soon as possible. (Note: because real estate transactions involve contracts and such, users are expected to be adults who can legally transact.) If you are a parent or guardian and believe your child under 18 has provided personal information to us, please contact us so we can investigate and delete it.

Third-Party Links and Services: The Platform may contain links to third-party websites or services not operated by us (for example, a link to a mortgage calculator site, or external articles, or perhaps embedded maps from Google). If you click those links or use those services, you will be interacting with the third party, and any information you provide to them is governed by their policies, not ours. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party site or service before providing any personal information. This Privacy Policy applies solely to information collected by Aloha My Home through our own Services.

Cross-Border Data Transfers: We are a U.S.-based company. If you are accessing our Services from outside the United States, be aware that your information will likely be transferred to and processed in the United States (and possibly other countries where our service providers or partners operate). These countries may not have the same data protection laws as your home jurisdiction. However, we will take steps to ensure appropriate safeguards are in place to protect your data in line with this Privacy Policy. For example, for EEA data, we may use standard contractual clauses approved by the EU Commission when transferring to the U.S., or rely on another legal transfer mechanism. By using the Services, you consent to your information being transferred to our facilities and to those third parties with whom we share it, as described in this Policy.

If you have questions or concerns: Please contact us! We are here to help with any privacy-related questions. You can reach our privacy team at [email protected] with the subject: Aloha My Home, LLC – Privacy

We will do our best to address your inquiry promptly. If you feel we have not satisfactorily resolved an issue, and you are in a region where you have the right to escalate, you can reach out to the relevant data protection authority or regulator.

Thank you for trusting Aloha My Home with your home buying and selling journey. We value your privacy and are dedicated to safeguarding your personal information.