Privacy Policy

This Privacy Policy explains how NexGen Convergent Solutions Ltd. ("Trulisted", "we", "us") collects, uses and protects personal information when you use our website and app (the "Service"). We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), British Columbia's Personal Information Protection Act (PIPA), and, where they apply, US state privacy laws such as California's.

In short: we collect what we need to run the Service, we don't sell your information, we don't use advertising cookies, and we don't use your photos or listings to train our own AI models.

1. Information we collect

Information you give us

• Account: your name, email address and password. We only store your password in hashed form. If you choose Continue with Google, Google tells us your name and email address instead (we don't get your Google password).
• Your website: the web address you choose, your headline, bio, areas you serve, neighbourhood guides, client reviews you add (with the client's name, stars and photo if you include them), listings you add by hand, your booking link, WhatsApp number, the languages you speak and a link to your intro video.
• Profile and brand kit: brokerage name, team name, Personal Real Estate Corporation wording, phone number, website, headshot, logo and colours, and, if you tell us, how you heard about Trulisted.
• Listings: addresses, property details, photos and room tags, strata or HOA rules, campaign details (such as open house times), and any text you write, edit or paste in (for example, listing text you copy from your MLS® system).
• Market analyses (CMAs): the home and the comparable sales you enter or paste, and the report we write.
• Market updates: the market statistics you paste, your own notes, and the update we write from them.
• Music: audio files you upload to your brand kit for your videos.
• Team: if you invite people to your team, their email address and role. Team members can see each other's names, sign-in email addresses and listings.
• Referrals: if you invite fellow agents from Freebies, their email addresses, when you invited them and whether they signed up. We email each person once, on your behalf, and use this to check referral rewards.
• Billing: your plan and payment history. Card details go directly to Stripe, our payment processor. We never see or store full card numbers.
• Messages: what you send us through Help (with the page you were on) or by email, and your email address if you sign up for offers from a coupon pop-up.

Information collected automatically

• Visitor statistics: for public pages only (our website and your listing websites), we count page views without cookies. We record the page, the referring website, the country and the device type. A visitor is counted using a one-way code made from a random value that changes every day, so we can't recognise you on another day or identify you. We don't store IP addresses for this. If your browser sends a "Global Privacy Control" or "Do Not Track" signal, we don't count you at all.
• Security: to stop fake sign-ups and password guessing, we use Cloudflare Turnstile, a bot check, on sign-in and sign-up. We also briefly keep a record of attempts linked to your IP address and a one-way code of your email address. Those records are deleted automatically.
• Error reports: if something breaks, our error-monitoring service (Sentry) receives technical details such as the page, browser type and error message. We configure it not to collect IP addresses, cookies or form contents.
• Sign-in cookies: we use only the cookies needed to keep you signed in. We don't use advertising or tracking cookies.
• Intro videos on agent websites: an agent's website can show a YouTube or Vimeo video. Nothing loads from YouTube or Vimeo until you press play. When you do, the video plays from that service, which receives your IP address and may set its own cookies under its own privacy policy. We use YouTube's privacy-enhanced mode and Vimeo's "do not track" setting.

2. How we use information

• To provide the Service: create your listing materials, run the compliance checks, host your Original Photos pages, and process payments.
• To keep accounts and the Service secure, prevent fraud and abuse, and fix problems.
• To communicate with you about your account, billing and important changes. We send marketing emails only with your consent, and you can unsubscribe at any time.
• To understand, in aggregate, how the website and Service are used, so we can improve them.
• To meet legal, tax and accounting obligations.

3. AI processing

To create staged photos, twilight and decluttered images, listing copy, photo captions, room types and CMA explanations, and to read listing or sales text you paste in, we send the relevant photos and details to AI service providers. These currently are Anthropic (Claude: text, captions, room types and reviews of edited photos), Google (Gemini: images) and Kling (Kuaishou: short AI camera-move videos from a listing photo, only when you choose cinematic scenes). They process this content to return results to us under their business or API terms.

Address suggestions and nearby places: when you type an address or look up nearby places, we send that address or the listing's location to Google Maps Platform. We don't send your name or contact details with it.

• We don't use your content to train our own AI models.
• We send only what each task needs. Please don't put personal information about sellers or other people in listing details or photos.

4. Public content

Some content is public by design so that buyers can see it:

• Original Photos pages (and the QR codes and links that point to them) show your unaltered photos to anyone with the link.
• Listing websites you publish show the listing, its photos, your name, brokerage and contact details, and campaign details such as open house times.
• Images in "Just listed" emails are hosted at public links so email programs can display them.
• Private links you choose to share (CMA reports, seller updates and listing presentations) can be opened by anyone who has the link. They aren't listed by search engines, and you can turn each link off.
• Market update pages and your website, when you turn them on, are public: they show what you wrote, your name, brokerage, contact details, logos and headshot, your published listing websites, the reviews and listings you add, and your neighbourhood pages. If you manage a Group and turn on a team page, it shows the agents in your Group who chose to appear, with their name, photo, title, areas and a link to their website.
• Blog posts and other public website content.

5. Buyers, sellers and other people

When someone uses the form on a listing website, a market update page or an agent's website (to book a showing, reply to an open house, ask a question, hear when a home is listed, ask about buying or ask about their home's value), we store their name, email address, phone number (if given), message and whether they agreed to marketing. We show it to the agent and their team and email the agent an alert.

For this information, we act on behalf of the agent. The agent decides how to contact the person and is responsible for doing so lawfully, including under anti-spam laws. If you sent your details through a listing website, you can ask the agent, or us at privacy@trulisted.com, to see, correct or delete them.

Seller updates show sellers counts only (for example, page views and showing requests), never buyers' names or contact details.

Client reviews: agents can show reviews from their clients on their website, with a name, stars and a photo. The agent confirms each review is real and that they have the client's permission (and, for a photo, the client's agreement to show it). If your review is on an agent's website and you want it changed or removed, ask the agent, or contact us at privacy@trulisted.com.

6. Who we share information with

We share personal information only with service providers who help us run the Service, under contracts that limit how they use it, or when the law requires it. We don't sell or rent personal information, and we don't "share" it for cross-context behavioural advertising (as defined in California law).

We may also disclose information if required by law, to protect rights and safety, or as part of a merger, sale or reorganisation, in which case this policy continues to apply.

7. Storage outside Canada

Some of our providers store or process information outside Canada, mainly in the United States. AI processing happens in the United States, and cinematic video scenes (Kling) are made in Singapore. While information is outside Canada, it may be accessible to courts, law enforcement and national security authorities under the laws of that country. We use contracts and security measures to protect it.

8. How long we keep information

• Account, brand kit and listings: while your account is open. When you ask us to delete your account, we delete your content within 30 days, and from backups within a further 90 days.
• Leads from listing websites: while the listing is in your account (the agent can delete a listing at any time), then as above.
• Leads from listing websites, market update pages and agent websites: while the agent's account is open, then as above.
• Help messages: up to 2 years.
• Team invites: until they're used, cancelled or expire (14 days), then kept with your team's records.
• Referral invitations: with the inviting agent's account, and deleted when that account is deleted.
• Billing records: as long as tax and accounting laws require (generally up to 7 years).
• Visitor statistics: up to 25 months. They don't identify you.
• Security records (retry limits): minutes to hours.
• Error reports: up to 90 days.

9. How we protect information

We use encryption in transit (HTTPS), access controls and row-level security in our database, two-step sign-in for staff accounts, limited staff access, and regular updates. No system is perfectly secure. If a breach creates a real risk of significant harm, we'll notify you and the regulators as the law requires.

10. Your choices and rights

Depending on where you live, you can:

• see the personal information we hold about you and get a copy;
• correct it if it is wrong;
• delete it, or close your account;
• withdraw consent, for example to marketing emails, subject to legal or contract limits;
• in California and some other US states: know what we collect and why, delete and correct it, and not be treated differently for using these rights. We don't sell or share personal information.

To make a request, email privacy@trulisted.com. We'll respond within 30 days and may need to confirm your identity first. If you're not satisfied, you can contact the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.

11. Children

The Service is for real estate professionals and isn't intended for anyone under 18.

12. Changes to this policy

We'll post any changes here and update the date at the top. If a change is significant, we'll also tell you by email or in the app.

13. Contact our Privacy Officer

Bhupinder Bhatti, Privacy Officer, NexGen Convergent Solutions Ltd., 8-17655 57 Ave, Surrey, BC V3S 1H1, Canada. Email: privacy@trulisted.com.