Privacy Policy

Last updated: August 5, 2026

1. Who we are and what this covers

spreadhaus ("we", "us") is a service that builds and hosts real-estate marketing material — property websites, print-ready documents, and emails — from content our customers provide. This policy explains what personal information we collect, why, who we share it with, and the choices you have. It applies to spreadhaus.com, the spreadhaus application, and our marketing pages.

Property websites published by our customers (for example, a listing site on a spreadhaus subdomain or a custom domain) are a special case: the real-estate professional who published the site controls its content and is responsible for it. We host those sites but do not place our analytics or advertising trackers on them. See section 9.

2. Changes to this policy

When we change this policy we will update the date above, and for material changes we will also tell you by email or an in-app notice before they take effect.

3. What we collect

• Account information — your name, email address, password (stored as a salted hash, never in plain text), organization name, and role.
• Listing content — the photos, video, text, addresses, and brand assets you upload to build marketing material.
• Billing information — handled by Stripe, our payment processor. We never see or store your card number; we keep your Stripe customer reference, plan, and subscription status.
• Communications — messages you send us for support or feedback.
• Device information — IP address, browser and device type, operating system, cookie and similar identifiers, and approximate location derived from your IP address.
• Usage information — pages you visit, features you use, links you click, referring pages, and the timing of that activity.

4. How we use it

• To provide the service — generating and hosting your marketing material, processing subscriptions, sending transactional email (invites, receipts, password resets), and enforcing plan limits.
• For analytics and improvement — understanding how the product is used so we can fix and improve it.
• For marketing and advertising — measuring our ad campaigns, reaching people who may be interested in spreadhaus, and showing relevant ads to people who have visited our site (often called "targeted" or "interest-based" advertising). Your listing content is never used for our advertising.
• For security and compliance — preventing abuse and fraud, debugging, enforcing our agreements, and meeting legal obligations.

5. Cookies, pixels, and similar technologies

We use three kinds of technologies on spreadhaus.com:

• Essential — your sign-in session cookie. The service cannot work without it.
• Analytics — measurement tools (such as Google Analytics) that tell us how visitors use our pages, using cookies or similar identifiers.
• Advertising — tags and pixels from our advertising partners (currently Google and Meta) that record that your device visited our pages or completed an action such as starting a trial, so those platforms can measure our campaigns and show our ads to relevant audiences on their networks.

Analytics and advertising technologies are active by default, and you can opt out at any time: through our cookie notice (or the "reopen it here" link in section 7), in which case Google's tag drops to a cookieless, consent-denied mode (no ad personalization, no identifiers stored on your device) and Meta's technologies stop loading; or by browsing with a Global Privacy Control signal, which we honor as a standing opt-out — nothing loads and no events are sent, including from our servers.

6. Who we share information with

Service providers

Companies that run parts of the service for us, receiving only what they need for their job: Fly.io (hosting), Neon (database), Stripe (payments), Anthropic (optional AI features — your photos and listing facts are sent for processing only when you use an AI action), RentCast and public government sources (property-record prefill), Namecheap (domain registration), and Resend (transactional email).

Advertising partners

When advertising technologies are active (see section 5), the following partners collect device and usage information such as IP address, cookie or advertising identifiers, and pages visited on our site:

• Google (Google Ads and Google Analytics) — see Google's privacy policy; manage or opt out of personalized ads in Google's My Ad Center.
• Meta (the Meta Pixel, for ads on Facebook and Instagram) — see Meta's privacy policy; manage or opt out in your Meta account's Ad Preferences.

These partners use the information to measure our campaigns and to show our ads across their networks, and they may combine it with information they collect from other sites. We do not send them your listing content, and we do not sell personal information for money.

Matched audiences

Where you have consented to advertising cookies, we may also share limited customer contact data — such as your email address, protected by hashing so the raw address is not readable — with Google (its "Customer Match" feature) and Meta to measure our advertising and to reach people who have already interacted with spreadhaus, or audiences similar to them. These platforms act as our service providers for this matching: they use the data only to match against their own accounts and to run our campaigns under their data-processing terms, not for their own purposes. You can opt out of matched audiences at any time by declining advertising cookies (see section 7) or by emailing hello@spreadhaus.com.

Legal and safety

We may disclose information if we believe in good faith it is required to comply with law or legal process, to protect the rights, property, or safety of our users or others, to enforce our agreements, or to investigate fraud or abuse.

Business transfers

If spreadhaus is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction; this policy would continue to apply to it.

7. Your choices

• Cookie controls — you can decline non-essential cookies in our cookie notice (reopen it here to change your choice), block or delete cookies in your browser settings, and use the industry opt-out pages run by the Network Advertising Initiative and the Digital Advertising Alliance.
• Platform controls — opt out of personalized ads directly with Google and in Meta's Ad Preferences.
• Global Privacy Control — where required by law, we treat a GPC signal from your browser as an opt-out of targeted advertising for that browser.
• Email — marketing emails include an unsubscribe link. Transactional emails (receipts, password resets, invites) are part of the service and can't be opted out of while you have an account.

8. Your rights

Depending on where you live (including California and the EU/UK), you may have the right to access, correct, delete, or export your personal information, to opt out of "sharing" for targeted advertising, and not to be discriminated against for exercising those rights. To exercise any of them, email hello@spreadhaus.com — we will verify the request (normally by confirming control of your account email) and respond within the time required by law. If you are in the EU/UK: we process personal information to perform our contract with you, for our legitimate interests (security, improvement, measuring marketing), with your consent (advertising cookies), and to meet legal obligations; you may also lodge a complaint with your local supervisory authority.

9. Published property sites

Property websites created with spreadhaus display content chosen by the real-estate professional who published them, including property details and agent contact information. That professional is the controller of the site's content and of any inquiries you send through it. We host these sites and keep standard server logs (IP address, request, timestamp) for security; we do not place our analytics or advertising trackers on them.

10. Data transfers and retention

We are based in the United States and process information there. If you use spreadhaus from elsewhere, your information will be transferred to the US, which may have different data-protection laws than your country. We keep personal information for as long as needed for the purposes above: your content stays while your account is active; deleting a listing removes its photos and generated files; when an account closes, remaining data is deleted after a reasonable wind-down period, except records we must keep (such as billing history). Server logs and measurement data are kept for shorter operational periods.

11. Children

spreadhaus is a business tool, is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

12. Third-party links

Our pages may link to sites we don't control (including our customers' property sites and our partners' sites). Their privacy practices are their own — read their policies.

13. Contact

hello@spreadhaus.com