Draft

Privacy Policy

Last updated: 2026-05-08. This is an MVP draft, not legal advice. A lawyer should review before broad distribution.

What this document covers

Trellistate (“we”, “us”) operates a free, public, AI-readable property listing exchange at this domain and via the documented REST API. This policy explains what we collect, how we use it, and your choices.

What we collect

  • Account data — name, email, hashed password.
  • Listing data — everything you submit when posting a listing (title, address, price, description, photos, contact details, attestation timestamps).
  • Agent registrations — agent name, developer email, website, hashed API keys.
  • Inquiry & conversation content — messages and structured payloads sent through our API.
  • Operational logs — IP address, user agent, request paths, timestamps, errors. Used for security and abuse prevention.
We do not use ad cookies. We do not sell or rent personal data.

How we use it

  • Operate the listing search and the public API.
  • Send transactional email (account verification, inquiry notifications).
  • Detect and respond to abuse (spam, fraud, prohibited content).
  • Comply with legal obligations.

Public data

Listings you mark active are intended to be public. They are served via the website, the JSON/RSS feeds, the public REST API, and to AI agents that follow the rules described in /agents.txt and the manifest at /.well-known/trellistate.json.

Address privacy

If you check Hide exact address when posting a listing, we redact the street address from the public website, the public API, and the JSON-LD structured data, and we coarsen the latitude/longitude to roughly one kilometre. The full address remains on file so we can respond to legal requests.

Data sub-processors

  • Vercel — hosting and content delivery.
  • Neon — managed Postgres database.
  • Resend — transactional email (when configured).
  • Cloudflare — image storage / spam protection (when enabled).
  • Sentry — error monitoring (when configured).
Each receives only the data needed to perform its function.

Your choices

  • You can edit, pause, or delete any listing you posted from your dashboard.
  • You can request export or deletion of your account by emailing privacy@trellistate.example.
  • You can opt out of non-essential emails at any time via the unsubscribe link in those emails.

Contact

Questions about this policy: privacy@trellistate.example.

See also: Terms of Service.

Privacy Policy — Trellistate