Privacy Policy

Who This Policy Applies To

This Policy applies to:

• Visitors to our website.
• Individuals who create a Stoop account.
• Real-estate agents, brokers, brokerages, teams, transaction coordinators, and other business users who use Stoop.
• Clients and other participants invited into a Stoop transaction workspace.
• Individuals who contact us, request support, attend an event, subscribe to communications, or otherwise interact with Stoop.

An Agent User is an agent, broker, brokerage, team, transaction coordinator, or other business user who creates or administers a Stoop workspace. A Client Invitee is a buyer, seller, tenant, homeowner, or other individual invited into a workspace by an Agent User or another authorized participant. Personal Information means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an identified or identifiable person.

Our Role in Transaction Workspaces

When an Agent User, brokerage, or other business customer creates a transaction workspace and invites participants, that customer generally decides what information is entered, who is invited, what content is shared, and how the Service is used.

In those circumstances, Stoop generally processes the personal information in the workspace to provide the Service to the Agent User or business customer, subject to their instructions and our agreements with them. If you are a Client Invitee and have a question about why you were invited, the accuracy of transaction information, your access to a workspace, or a communication received from an Agent User, please contact the inviting Agent User, brokerage, or other workspace administrator first.

Information We Collect

We collect information in the following categories, depending on how you use the Service:

• Account and profile information: name, email address, telephone number, username, password, profile photo, company or brokerage name, professional role, and account preferences.
• Business and billing information: business name, entity information, billing address, payment method information, transaction history, and subscription-plan selections.
• Transaction and workspace information: property address, client names, participant contact details, transaction stage, dates, milestones, task assignments, deadlines, and workflow settings.
• Communications: messages, questions, replies, updates, requests, surveys, support tickets, feedback, and email or SMS content sent through or to Stoop.
• Documents and files: documents, images, attachments, contracts, disclosures, checklists, or other files you choose to upload or share.
• Information created through use of the Service: login events, workspace invitations and role changes, task and milestone activity, notification delivery status, support interactions, and audit logs.
• Device, log, and usage information: IP address, browser and device type, operating system, application version, features accessed, diagnostic data, and cookie or local-storage information.
• Information from other sources: Agent Users and workspace administrators, service providers, third-party integrations, publicly available sources, and business partners, where permitted by law.

Because Stoop may be used in connection with real-estate transactions, users may choose to upload documents containing sensitive personal information. Unless Stoop specifically provides a secured feature for this purpose, do not upload, transmit, or store Social Security numbers, financial-account or payment-card numbers, online-banking credentials, unverified wire instructions, government-issued identification, full loan applications or credit reports, or protected health information.

How We Use Personal Information

We may use personal information to:

• Provide, operate, maintain, and improve the Service.
• Create and manage accounts, transaction workspaces, participant access, permissions, tasks, milestones, reminders, and communications.
• Send invitations, confirmations, updates, reminders, notices, requested documents, and other transaction-related communications.
• Process transactions, subscriptions, payments, refunds, and billing inquiries.
• Personalize account settings and the user experience.
• Provide customer support and respond to questions, requests, feedback, and complaints.
• Monitor, troubleshoot, secure, and improve our systems, products, and services.
• Detect, investigate, prevent, and address fraud, abuse, security incidents, unauthorized access, and violations of our Terms.
• Comply with legal obligations, respond to lawful requests, enforce agreements, and protect the rights, safety, and property of Stoop, users, and others.
• Send marketing communications where permitted by law and consistent with your preferences.
• Create aggregated or de-identified information that does not reasonably identify you.

We do not make decisions that produce legal or similarly significant effects about you solely through automated processing.

How We Share Personal Information

We may share personal information in the following circumstances:

• With workspace participants you or an authorized user selects, based on roles, permissions, transaction side, and settings chosen by the applicable Agent User, brokerage, or workspace administrator.
• With service providers, including cloud hosting, email and SMS delivery, payment processing, customer support, security and fraud prevention, analytics, and professional services.
• With third-party integrations that you or an authorized workspace administrator enables, subject to that third party’s own terms and privacy policy.
• For legal, security, and compliance reasons, including responding to lawful requests, enforcing our Terms, and protecting the rights and safety of Stoop, our users, or others.
• In connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or transition of all or part of our business.
• As aggregated or de-identified information that does not reasonably identify you.

Stoop does not sell personal information for money. Stoop also does not knowingly share personal information for cross-context behavioral advertising or targeted advertising as those terms may be defined by applicable privacy laws. If our practices change, we will update this Policy and provide any required notice and choices before engaging in the new activity.

Cookies and Similar Technologies

We and our service providers may use cookies, pixels, local storage, software-development kits, and similar technologies to:

• Keep you logged in and remember your preferences.
• Enable security and fraud prevention.
• Understand how users navigate and use the Service.
• Diagnose errors and improve performance.
• Measure the effectiveness of marketing or communications, where permitted.

You may be able to control cookies through your browser settings. Disabling some cookies may affect the availability or functionality of portions of the Service.

Email, SMS, and Other Communications

We may send transactional or service-related communications, including account notices, security alerts, invitations, task reminders, document-review requests, transaction updates, billing notices, and support communications, by email, SMS, in-app message, or other permitted methods. You may not be able to opt out of certain essential service or security communications while maintaining an account, although you may be able to choose the delivery method or manage notification preferences.

Where permitted by law, we may send marketing emails about Stoop, product updates, events, or offers. You can opt out using the unsubscribe link in the message or by contacting privacy@yourstoop.com. Message and data rates may apply to text messages, and message frequency varies based on transaction activity. To stop non-essential texts, reply STOP where supported. Agent Users and workspace administrators are responsible for obtaining any consent required to invite participants or send them communications through the Service.

AI-Assisted Features

If Stoop provides AI-assisted features—such as tools to help draft listing descriptions, messages, summaries, tasks, or workflow suggestions—these features may process the information you submit in order to generate a response.

AI-generated content may be inaccurate, incomplete, outdated, or inappropriate for a particular circumstance. Users must review, edit, verify, and approve AI-generated content before relying on, publishing, sending, or using it. Stoop will not use private transaction documents, private workspace messages, or personal information to train general-purpose AI models without clear disclosure and any consent required by law. Do not submit sensitive personal information to an AI feature unless Stoop specifically permits it.

Data Retention

We retain personal information for as long as reasonably necessary to:

• Provide and maintain the Service.
• Maintain transaction workspaces and account records.
• Comply with legal, accounting, tax, regulatory, contractual, and reporting obligations.
• Resolve disputes and enforce agreements.
• Detect, prevent, and investigate security incidents, fraud, and abuse.
• Maintain backups and business-continuity records.
• Meet the needs of Agent Users, brokerages, and other business customers, subject to applicable agreements and law.

Retention periods depend on the type of information, the purpose for which it was collected, the role of the relevant user, applicable law, and contractual requirements.

Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information. These may include access controls, role-based permissions, authentication safeguards, encryption in transit, security monitoring, vendor review, logging, and backups appropriate to the nature of the Service.

However, no method of internet transmission, electronic storage, or security control is completely secure, and we cannot guarantee absolute security. You are responsible for using a strong, unique password; protecting your devices and credentials; promptly reporting suspected unauthorized access; and independently verifying payment or wire instructions with a trusted party using independently verified contact information.

Your Privacy Choices and Rights

Depending on where you live and the nature of our processing, you may have rights to:

• Know or access the personal information we hold about you.
• Request correction of inaccurate personal information.
• Request deletion of personal information, subject to legal and operational exceptions.
• Request a portable copy of certain personal information.
• Opt out of certain processing, including sale, sharing, or targeted advertising where applicable.
• Limit certain uses or disclosures of sensitive personal information where applicable.
• Withdraw consent where we rely on consent.
• Appeal a decision regarding a privacy request where applicable.
• Not be discriminated against for exercising applicable privacy rights.

To submit a request, contact privacy@yourstoop.com with the subject line “Privacy Request.” We may need to verify your identity before completing a request. If you are a Client Invitee, we may direct your request to the applicable Agent User, brokerage, or workspace administrator when that party controls the relevant workspace information.

Additional Notice for California Residents

This section applies to California residents to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), applies to Stoop’s processing of their personal information. During the preceding 12 months, Stoop may have collected the following categories of personal information:

• Identifiers: name, email address, phone number, IP address, account username, device identifiers.
• Customer records: contact details, business information, billing details, transaction-related contact information.
• Commercial information: subscription history, payments, products or services purchased, workspace activity.
• Internet or network activity: log data, features used, browser and device information, interactions with the Service.
• Approximate geolocation: general location inferred from IP address.
• Professional or employment-related information: brokerage or company, professional role, team, licensing-related information if provided.
• Audio, visual, or electronic information: uploaded images and documents, messages, communications, support records.
• Inferences: limited inferences about preferences or product usage to personalize and improve the Service.

We collect this information from you directly, from Agent Users and workspace administrators, from your use of the Service, from service providers and connected integrations, and from publicly available sources where permitted. Stoop does not sell personal information and does not share it for cross-context behavioral advertising, so we do not provide a “Do Not Sell or Share My Personal Information” link at this time. California residents may submit requests by emailing privacy@yourstoop.com with the subject line “California Privacy Request.”

International Users

Stoop is intended for users in the United States. If you access the Service from outside the United States, you understand that personal information may be processed and stored in the United States and other countries where Stoop or its service providers operate. Those jurisdictions may have privacy laws that differ from the laws of your location.

If Stoop later actively offers the Service to users in the European Economic Area, United Kingdom, or other jurisdictions with additional requirements, we will provide an appropriate supplemental privacy notice and lawful data-transfer mechanisms as needed.

Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Do not use the Service or provide personal information through it if you are under 13.

If you believe a child under 13 has provided personal information to Stoop, contact us at privacy@yourstoop.com. We will take appropriate steps to delete the information as required by law.

Third-Party Sites and Services

The Service may contain links to third-party websites, applications, tools, integrations, or services. This Privacy Policy does not apply to those third parties. Their data practices are governed by their own privacy notices and terms.

We encourage you to read the privacy notices of any third-party service before providing information or enabling an integration.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or the Service.

If we make a material change, we will provide notice through the Service, by email, or by another reasonable method as required by law. The “Last Updated” date at the top identifies when the Policy was most recently revised. We will not use an updated policy as a substitute for obtaining consent where consent is required for a materially different use or disclosure of personal information.