Privacy policy

Last updated: October 17, 2026 (lead capture, lead emails and account deletion)

This policy explains what information Listhand (listhand.com) collects, why, who helps us process it, and the choices you have. Listhand is in private beta. We don't sell your information and we don't show ads.

Short version: we collect what you give us (your waitlist details, your account email and profile, and the listings, leads and addresses you work with in the app), we use it only to run Listhand for you, and we share it only with the service providers listed below that make the product work.

What we collect

When you join the waitlist

Your name, email address, and role (solo agent, team lead, brokerage or other).
Your mobile phone number, if you choose to give it.
Whether you asked for a founding-agent spot.
Whether you checked the box agreeing to text messages, and when.
The IP address and time of your signup, kept as a record of your signup and consent.

We use this to keep your place on the waitlist, send you a confirmation email, and contact you about Listhand. Listhand does not send text messages today. If you agreed to texts, we keep that choice and will only text you about your waitlist status and product updates if we start texting. You can reply STOP at any time.

When you sign in to the app

Your email address. We email you a 6-digit sign-in code. We store only a scrambled (hashed) copy of the code; it expires after 10 minutes and stops working after 5 wrong tries.
Your account record: email, name, brokerage and phone number if you add them (they are used to sign the follow-up drafts we write for you), your settings (such as your MLS character limit), whether you asked to be notified about comps, and when you created your account and last signed in.
A sign-in cookie (lh_session) that keeps you signed in for up to 30 days. It is required for the app to work. We don't use advertising or tracking cookies.

What you put into the app

Listings. The property facts and notes you type or paste, and the listing copy generated for you. We keep your 25 most recent listings so you can reopen and edit them.
Leads. The leads you add, import by CSV, or receive through your Listhand lead form or webhook: name, email, phone, source, the message or interest they sent, status, their time zone if their browser shares it, follow-up drafts, and the status of each follow-up (scheduled, waiting for your review, sent, failed, skipped or stopped, with times). This is information about other people, so please only add leads you are allowed to share with us. We use it only to provide Listhand to you.
Consent records. When a lead checks the text-message consent box on your Listhand form, we store the exact consent wording they saw, the time, the form address, and their IP address and browser type, as proof of consent. We also record unsubscribes, STOP requests and replies so follow-ups stop.
Lead email settings. Whether lead emails are on, instant reply, review or auto-send mode, your daily send limit, your business mailing address (shown in every lead email, as CAN-SPAM requires) and an optional reply-to address. We also count emails sent per day to enforce the limit, and keep a do-not-email list per agent of leads who unsubscribed.
Billing. Paid plans are not live yet. When they are, Stripe will collect and store your card details; we will only store your Stripe customer and subscription IDs, plan, and subscription status.
Comps and property lookups. The addresses you look up, property details you confirm (type, square feet, beds, baths, units), the comps you include or exclude, and any sold prices you enter. We keep your 12 most recent comps runs and a count of how many lookups you use each day.
Property data cache. When you click Look up or Run comps, we save the property data returned for that address (public-record details, a value estimate, and comparable listings) so the same address doesn't have to be fetched again. This cache is stored by address for 30 to 180 days and can be reused when anyone looks up the same address. It contains property data, not your personal details.

Stored on your own device

The app saves unsaved form drafts in your browser's local storage for up to 7 days so you don't lose work, and remembers your preferred copy tone. Signing out clears the drafts.

Technical information

Like any website, our hosting provider processes standard request information (such as IP address, browser type and the pages requested) to deliver the site and keep it secure, and we keep error logs to fix problems.

Who we share it with

We use these service providers to run Listhand. Each receives only what it needs for its job:

Vercel hosts the website and app and runs our server code. Your account, listings, leads, comps history and the property data cache are stored in Vercel Blob private storage.
Resend sends our emails (sign-in codes and waitlist confirmations) and stores the waitlist contact list. When you turn on lead emails, Resend also delivers your instant replies and follow-up emails to your leads, so it receives the lead’s email address and the message.
Stripe will process payments when paid plans launch. We don’t send Stripe anything today.
Twilio will deliver text messages when texting launches. Texting is not switched on, and we don’t send Twilio anything today.
xAI (the Grok API) writes listing copy. When you generate copy, the property facts and notes you entered are sent to xAI. When you use paste-to-fill, the text you pasted is sent to xAI so it can pull out the property facts. Your leads are not sent to xAI.
RentCast provides property records, value estimates and comparable listings. When you click Look up or Run comps, the address is sent to RentCast.
Photon by komoot, using OpenStreetMap data, suggests addresses as you type in the app. The partial address you type is sent to Photon through our server; we don't save it.
ImprovMX forwards email sent to our listhand.com addresses, including hello@listhand.com.

We may also disclose information if the law requires it, or to protect the rights and safety of our users or the public. If Listhand is ever sold or merged, your information may move to the new owner under this policy.

What we don't do

We don't sell or rent personal information, and we don't share it for advertising.
We don't contact your leads unless you turn it on. Listhand emails your leads only after you switch on lead emails, and then only the instant reply and the follow-ups you approve or set to auto-send. Listhand does not send text messages yet; texts are drafts you send yourself. We never use your leads for our own marketing.
We don't collect payment information. Paid plans aren't live yet, and when they are, card details go to Stripe, not to us.

How long we keep it

Waitlist details: until you ask us to delete them. Unsubscribing stops our emails, but doesn't delete your record unless you ask.
Account data, listings, leads, follow-up history and consent records: while your account is active, or until you delete them. Older listings past the 25 most recent and older comps runs past the 12 most recent are replaced automatically. Deleting your account removes all of it right away.
Property data cache: 30 to 180 days per address.
Sign-in codes: they expire after 10 minutes.

Your choices

Unsubscribe from waitlist emails using the link in any of them.
Update or delete leads in the app at any time.
Download or delete your account yourself. In the app, Account → Your data downloads everything we store for your account as a file, and Account → Delete account permanently deletes your profile, leads, follow-up history, consent records, listings, comps, lead form and webhook, and cancels any subscription. Shared property-data cache entries (which contain no personal details) and waitlist records are separate; ask us to delete your waitlist record.
Leads can unsubscribe. Every email Listhand sends to a lead has an unsubscribe link that works with one click. Leads can also reply STOP to texts once texting launches.
Access, correct or delete your data. You can also email hello@listhand.com from the address on your account and tell us what you want. We'll confirm the request comes from you and respond within 30 days. Depending on where you live, you may have more rights under local privacy law; we'll honor them.

Security

All traffic uses HTTPS. Sign-in codes are stored hashed, the sign-in cookie can't be read by page scripts, and app data sits in private storage that only our server can read. A small Listhand team can access stored data to run and support the service. No system is perfectly secure, so please tell us right away at hello@listhand.com if you think something is wrong.

Children

Listhand is a business tool for real estate professionals and isn't meant for anyone under 18. We don't knowingly collect information from children.

Changes to this policy

If we change this policy, we'll update the date at the top. If the change is significant, we'll also tell you by email or in the app before it takes effect.

Contact

Questions or requests: hello@listhand.com.