Privacy Policy

1. Introduction

1 OAK STUDIOS ("we," "us," or "our") operates the 1 OAK MLS Platform ("Platform"), a multi-tenant software-as-a-service platform that enables real estate professionals to display and manage MLS listing data for their clients.

This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our Platform, whether as a real estate professional ("Agent User") or as a consumer viewing listings on an agent's website ("Consumer User").

2. Information We Collect

2.1 Information You Provide

Agent Users: When you register for the Platform, we collect your name, email address, phone number, real estate license information, brokerage affiliation, and payment information.

Consumer Users: When you create an account, save searches, or contact an agent, we may collect your name, email address, phone number, and property preferences.

2.2 Information Collected Automatically

When you use the Platform, we automatically collect:

• Device information (browser type, operating system)
• Log data (IP address, access times, pages viewed)
• Usage data (search queries, listings viewed, features used)

2.3 MLS Listing Data

The Platform displays real estate listing data sourced from Multiple Listing Services (MLS) through Bridge Interactive. This data is provided by real estate brokers and agents and is governed by MLS rules and regulations. We do not control the accuracy of this data.

2.4 AI-Generated Content Data

When you use our AI content generation features, we collect and process:

• Input data you provide to generate content (agent name, brokerage, service areas, etc.)
• Generated content and any edits you make
• Usage metrics (generation count, token usage, timestamps)
• Fair Housing compliance check results and flagged terms
• Approval status and reviewer information

2.5 Visitor Activity and Lead Information

When you browse an agent's website, we record activity associated with a first-party identifier stored in your browser (see Section 5). This activity may include:

• Listings you view, save, or favorite, and searches you run
• Pages visited, referring links, and marketing campaign parameters (such as UTM tags)
• Forms you submit and inquiries you send to an agent
• Approximate location derived from your IP address

If you later submit a contact form, inquiry, or other request that identifies you, we associate your earlier browsing activity on that agent's website with the contact information you provide. This means the workspace operator (the agent or brokerage whose website you are using) can see the properties you viewed and searches you ran before you contacted them, including activity from before you identified yourself.

Lead scoring. We may calculate a numeric engagement score for a contact based solely on observed behavior on the agent's website — for example, how many listings were viewed, whether listings were saved, and how recently and often the site was visited. This score helps the agent prioritize follow-up. It is not based on race, color, religion, sex, familial status, national origin, disability, or any other protected characteristic, and it is not used to determine what properties are shown to you or the terms on which any property is offered.

AI-assisted summaries. On certain subscription tiers, workspace operators can generate written summaries or background research about a contact using our AI service providers. In that case, contact details and interaction history are sent to those providers as described in Section 4. These summaries are drafts for the agent's internal use and are not used to make housing decisions.

You may ask us or the workspace operator to delete your contact profile and associated activity history as described in Section 8.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Platform
• Process transactions and send related information
• Facilitate communication between agents and consumers
• Send technical notices, updates, and administrative messages
• Respond to your comments, questions, and support requests
• Monitor and analyze usage trends to improve user experience
• Detect, investigate, and prevent fraudulent or unauthorized activity
• Comply with legal obligations and MLS requirements

4. Information Sharing

We may share your information with:

• Workspace Operators: Agent Users who operate workspaces on the Platform receive information about Consumer Users who interact with their sites.
• Service Providers: Third parties who perform services on our behalf, including:
  • Supabase (database and authentication)
  • Vercel (hosting and deployment)
  • Typesense (search functionality)
  • Amazon CloudFront (content delivery for property photos)
  • Stripe (payment processing for Agent User subscriptions)
  • Resend (transactional and contact-form email delivery)
  • Sentry (error monitoring and diagnostics; may receive IP addresses, request details, and a recording of the page session when an error occurs)
  • Upstash (rate limiting and abuse prevention; processes IP addresses)
  • Mapbox (interactive maps; receives map requests and approximate viewport location when you use map features)
  • Google (analytics and usage measurement)
  • Meta/Facebook (advertising pixel, where a workspace operator has enabled it on their site)

  These providers process data on our behalf or, in the case of analytics and advertising providers, according to their own privacy policies. Workspace operators may add their own Google Analytics or Meta Pixel identifiers to their sites; where they do, that operator is responsible for its own use of that data.

• AI Service Providers: We share data with our AI providers, Anthropic (Claude models) and OpenAI (GPT models), in two circumstances:
  • Content generation. When an Agent User generates listing descriptions, social captions, blog posts, or similar marketing content, we send the input data needed to produce it (such as listing details, agent name, brokerage, and service areas).
  • Client insights. On certain subscription tiers, when an Agent User generates a summary or research notes about a contact, we send that contact's information and interaction history with the agent's website.

  We limit the personal information sent to AI providers to what is necessary for the requested output and strip identifiers where possible. AI providers process this data under their respective privacy policies and our data processing agreements, and we do not permit them to use it to train their models.

• MLS Organizations: As required by MLS rules and participation agreements.
• Legal Requirements: When required by law, subpoena, or other legal process.

We do not sell your personal information for money. Some analytics and advertising technologies described in Section 5 may be considered "sharing" of personal information for cross-context behavioral advertising under certain state privacy laws. You can limit these technologies through your browser's cookie controls or by contacting us atsupport@1oakmls.com.

5. Cookies and Tracking

The Platform uses cookies and similar technologies for the purposes described below. The exact technologies active on a given website depend on what the workspace operator of that site has enabled.

Essential cookies. Required for the Platform to function, including authentication tokens, session identifiers, and security and rate-limiting protections. These cannot be turned off through the Platform.

Visitor identity cookie. We set a first-party cookie, retained for up to one year, containing a randomly generated identifier. It lets us recognize a returning browser so we can associate browsing activity — listings viewed, listings favorited, and searches run — with a single visitor history. If you later submit a contact form or inquiry, we link that history to your contact record and make it available to the workspace operator, as described in Section 2.5. Clearing your browser cookies will reset this identifier.

Analytics. We use Google Analytics across Platform-hosted websites to measure traffic and usage. Workspace operators may additionally configure their own Google Analytics property for their site.

Advertising. Workspace operators may enable a Meta (Facebook) Pixel on their website. When enabled, Meta receives information about your visit and may use it for advertising measurement and targeting, including across other sites and services, in accordance with Meta's own privacy policy. This is controlled by the individual workspace operator, not by us.

Error monitoring and session replay. We use Sentry to detect and diagnose technical errors. When an error occurs, Sentry may capture a replay of the page interactions leading up to it, along with your IP address and browser details. Replays are used only for debugging, and we configure Sentry to mask text input and media where supported.

Your choices. Most browsers let you block or delete cookies through their settings; blocking essential cookies may prevent parts of the Platform from working. You can also opt out of Google Analytics using Google's browser add-on, manage advertising preferences in your Meta account settings, or contact us atsupport@1oakmls.comwith privacy requests.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS 1.2 or higher) and at rest (AES-256-GCM)
• Row-level security (RLS) to isolate workspace data
• Secure token storage with encryption for MLS credentials
• Continuous error and access monitoring, with periodic reviews of our security configuration and dependencies

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. MLS listing data is retained according to MLS rules, typically removing sold or expired listings within the timeframes required by the applicable MLS.

AI Content Retention: We retain AI-generated content, audit logs, and Fair Housing compliance records for a minimum of 3 years for compliance and legal purposes. This includes generated content, input data, approval history, and any flagged terms or compliance issues.

Upon account deletion, we will delete or anonymize your personal information within 30 days, except where retention is required by law, MLS regulations, or Fair Housing compliance requirements.

8. Your Rights and Choices

8.1 Access and Correction

You may access, update, or correct your account information at any time through your account settings or by contacting us.

8.2 Deletion

You may request deletion of your account and personal information. Note that some information may be retained as required by law or MLS regulations.

If you contacted an agent through a website on the Platform, you may also ask that agent (the workspace operator) to delete your contact profile and associated browsing activity, or contact us atsupport@1oakmls.comand we will route your request.

8.3 Data Portability

You may request a copy of your personal information in a structured, machine-readable format.

8.4 Opt-Out

You may opt out of non-essential communications by following the unsubscribe instructions in our emails or by contacting us.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how it is used
• Right to request deletion of your personal information
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us atsupport@1oakmls.com.

10. Florida Privacy Rights

Florida residents may have additional rights under Florida law. To the extent applicable Florida privacy laws provide additional rights, we will honor those rights upon verified request.

11. MLS Data Disclaimer

Real estate listing data displayed on the Platform is provided by various MLS organizations and is intended for consumers' personal, non-commercial use. The data is deemed reliable but not guaranteed. Listing information is subject to change without notice.

The display of MLS data is subject to the rules and regulations of the applicable MLS organization. All listing information should be independently verified.

12. Children's Privacy

The Platform is not intended for use by children under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will promptly delete that information.

13. International Users

The Platform is operated from the United States. If you are accessing the Platform from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date" above. Your continued use of the Platform after any changes constitutes your acceptance of the updated policy.

August 14, 2026 revision: updated the cookies and tracking disclosures (analytics, advertising pixels, visitor identity cookie, session replay), added disclosure of visitor activity tracking and lead scoring (Section 2.5), and expanded the service provider and AI provider lists.

15. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

1 OAK STUDIOS
31 NE 17th St Unit 219
Miami, FL 33132
Email:support@1oakmls.com