Privacy Policy

Notice at a glance

1. Who we are

The Boundary Stone is operated by The Boundary Stone LLC, a Texas limited liability company ("The Boundary Stone," "we," "us," "our").

Mailing address: The Boundary Stone LLC, 15535 CR 166, Graham, TX 76450

Privacy contact: privacy@theboundarystone.com

General support: helpdesk@theboundarystone.com

This Policy explains what personal data we collect through theboundarystone.com and related services (the "Services"), why, who we share it with, and the choices you have.

The Boundary Stone is not a real estate brokerage and does not provide brokerage services. We provide software used by licensed real estate professionals and by consumers working with them. Where this Policy refers to "your agent," it means the licensed professional associated with your account, who is employed or sponsored by their own brokerage and is not our employee.

2. The one thing we want you to read

Most privacy policies describe analytics. Ours describes something more specific, and you should understand it before you create an account:

We record what you search for and which listings you interact with, and we make that activity visible to the licensed real estate agent associated with your account and to that agent's brokerage.

That is not incidental. It is a core function of the Services: it is how your agent understands what you are looking for. Section 5 describes exactly what is recorded; Section 8 describes who can see it.

If you do not want your activity visible to an agent, do not create an account or accept an agent invitation. You may browse without one — Section 5.1 explains what is still recorded if you do.

3. Whose data this Policy covers

• Buyers and consumers who create an account, are invited by an agent, or browse without an account.
• Household members invited by a buyer to share access to that buyer's record.
• Agents, brokers, and office managers who subscribe to the Services.
• Prospective clients ("leads") whose details reach us from a listing portal, a web form, or an agent's contact import, and who may have no account with us.
• Licensed professionals named in listing records, whose business contact details appear in MLS data we receive under licence.

4. Personal data we collect

4.1 Information you give us

Account and profile. Name, email address, telephone number, and password credentials handled by our authentication provider. For agents and brokers we also collect mailing address, date of birth, real estate licence number, brokerage affiliation, profile photograph, and email signature. Licence number and date of birth are collected to verify professional eligibility and to distinguish licensees with similar names.

Buyer profile and preferences. Home address, budget, property criteria, timelines, and similar details you or your agent record.

Communications. Messages sent through the Services, support requests, and product feedback, including screenshots you attach.

Payment information. If you subscribe, your billing email address and subscription status. We never receive or store your card number. Payments are processed by Stripe on Stripe's systems; we retain only Stripe's customer and subscription identifiers.

4.2 Information created as you use the Services

Described in Section 5.

4.3 Information from other sources

Listing data. We receive property listing data — including the names, email addresses, telephone numbers, and brokerage affiliations of listing and co-listing agents — under licence from North Texas Real Estate Information Systems (NTREIS) through the Trestle platform operated by Cotality.

Leads from listing portals. If you submit an inquiry about a property on Zillow, Realtor.com, Homes.com, Redfin, or a similar portal, that portal may forward your inquiry to an agent's dedicated intake address on our system. We receive what the portal sends, typically your name, email address, telephone number, and message.

Agent contact imports. An agent may import contacts from their own records or another system they use.

Embedded features. Agents and brokerages may embed Boundary Stone search or lead-capture features on their own websites. Activity in those features is collected by us as described here.

4.4 Information we deliberately do not collect

• Your card or bank details.
• Raw IP addresses. We hash the network address of incoming requests with a secret value to enforce rate limits and prevent abuse. The hash cannot be reversed, and the address itself is not written to our records.
• Precise geolocation. We do not request location permission from your browser or device.
• Personal data from children under 13. If you believe a child has provided us personal data, contact privacy@theboundarystone.com and we will delete it.
• Biometric data. We collect none.

4.5 Sensitive information — please do not type it

You can search using ordinary sentences. Because of that, you may type something that reveals sensitive information — a health condition, a disability, a religion, or your family circumstances.

We do not ask for that information and we ask that you not include it. We store your searches as written, so anything you type is retained and may be visible to your agent.

If you need a home feature for a health or mobility reason, describe the feature — "single storey," "wide doorways," "roll-in shower." You will get better results, and the reason stays yours.

Separately, and regardless of privacy law, we do not use protected characteristics to select or rank properties. See Section 11.

5. What we record about your activity

5.1 Before you have an account

When you visit without signing in, we record the pages you visit and searches you run, a randomly generated session identifier linking one visit together, the time, and the session length.

This is not linked to your name, because we do not know it. If you create an account later in the same browsing session, activity from that session may be associated with your account.

5.2 Once you have an account

• Your searches, in the words you typed — stored exactly as written, with our interpretation and which listings matched or were excluded.
• The listings you view, save, favourite, and inquire about, and when.
• Saved searches, including criteria and a snapshot of results at the time.
• A snapshot of listing details and community rule findings as they stood when you interacted with them, so later conversations refer to what you actually saw.
• Session activity — pages, features, time spent.
• Communications with your agent through the Services.
• Your browser's user agent string, recorded when you accept our terms, as evidence of that acceptance.

5.3 Artificial intelligence

Some features use AI models provided by Anthropic to interpret searches, answer questions about community rules, and help agents draft communications. Your question and the document context needed to answer it are transmitted to that provider for processing. We record the volume and cost of usage. Your personal data is not used to train AI models, and our provider is engaged on terms that do not permit training on our data.

If you are an agent, broker, or office manager: when you ask the in-app assistant a question about a community, we record the wording of that question, the community it relates to, and whether we had a verified answer, alongside your account. We use this to find the questions agents ask most often and write the answers into our community guides, so the next agent does not have to ask. These records are readable by our administrators. They are not shared with other agents or brokerages, not shown to buyers, and not used to train AI models.

Questions you ask the assistant about your own clients — their notes, their activity, your schedule, who to contact — are not recorded this way. Only community questions are.

6. Why we process your data

We do not sell personal data. We do not sell sensitive personal data. We do not sell biometric data. We do not process personal data for targeted advertising, and we do not engage in profiling that produces legal or similarly significant effects.

7. Your consent, and how it is recorded

When you create an account or accept an agent's invitation, we ask you to accept our Terms of Use, this Privacy Policy, and our Buyer Activity and Tracking Disclosure. Each is recorded separately, with the version accepted and the date and time, so we can show what you agreed to and when.

You agree that we may provide these documents, and give notices required by law or by our agreements, in electronic form — by posting them in the Services or emailing the address on your account. You may withdraw that agreement by closing your account. To access electronic records you need a device with a current browser and an email account; you may request a paper copy by writing to the address in Section 1.

If we materially change how we handle your data, we will ask you to review and accept the updated terms.

8. Who your data is shared with

8.1 Your agent and their brokerage

This is the sharing that matters most. If an agent is associated with your account:

• Your agent can see your profile, saved searches, search history, listings viewed or favourited, notes, and activity over time.
• Your agent's broker and any office manager at that brokerage can see the same, through brokerage oversight tools. Texas law makes a broker responsible for supervising their sponsored agents, and this access supports that supervision.
• If your agent leaves their brokerage, records relating to you may be divided between the departing agent and the brokerage. Where an active written representation agreement exists, that agreement is with the brokerage.
• Household members you invite receive access to your record.

8.2 Service providers

Each processes personal data on our behalf under contract:

Listing photographs are served to your browser directly from Cotality's systems rather than copied onto ours, so Cotality receives a request from your browser when a photograph is displayed.

8.3 Other disclosures

We may disclose personal data where required by law, subpoena, or legal process; to protect the rights, safety, or property of any person; to investigate fraud or abuse; and in connection with a merger, acquisition, financing, or sale of assets, in which case we will notify you and this Policy continues to apply until replaced.

We do not sell your personal data and we do not share it for cross-context behavioural advertising.

9. How long we keep it

Where we must keep records for regulatory, MLS, tax, or litigation reasons, we keep them for that period even if you ask us to delete them, and we will tell you when that applies.

10. Your rights

10.1 Our position on the Texas Data Privacy and Security Act

The Texas Data Privacy and Security Act applies to businesses that are not small businesses as defined by the United States Small Business Administration. The Boundary Stone LLC is currently a small business by that definition, so most of the Act does not yet apply to us. The one provision that does apply to small businesses concerns selling sensitive personal data, and we do not sell any personal data at all.

We have chosen to offer the rights below anyway, and to honour them as though the Act applied. We do that for two reasons: it is the right way to treat people, and we expect to grow past the threshold. These are binding commitments, not aspirations — if we fail to honour them, that is a broken promise you can hold us to.

10.2 The rights we commit to

You may ask us to:

• Confirm whether we process your personal data and give you access to it;
• Correct inaccuracies;
• Delete personal data you provided or that we obtained about you;
• Provide a portable copy in a readable, transferable format;
• Opt out of processing for targeted advertising, sale of personal data, or profiling with legal or similarly significant effects. We do none of these, so there is nothing to opt out of, but the right is stated for completeness.

10.3 How to make a request

Email privacy@theboundarystone.com, or write to the postal address in Section 1. Either method works; you do not need an account to make a request.

We handle these requests manually. At our current size that is honest and it works — a person reads your request and acts on it. We tell you this so you know what to expect rather than imagining an automated portal.

We verify identity before acting, usually by confirming control of the email address on the account. We respond within 45 days, and may extend once by a further 45 days where reasonably necessary, telling you before we do.

10.4 If we say no

You may appeal by replying to our decision or emailing privacy@theboundarystone.com with "Appeal" in the subject line. We will respond within 60 days with a written explanation. If we deny your appeal, we will give you a method to submit a complaint to the Texas Attorney General.

10.5 A limit worth stating plainly

Some of what you ask us to delete may also exist in your agent's or their brokerage's records, or in an MLS system. We do not control those. We will delete what is ours and tell you honestly what is not.

11. Fair housing

We are committed to fair housing and support equal housing opportunity. Federal and Texas law prohibit discrimination in the sale or rental of housing on the basis of race, colour, religion, sex, disability, familial status, or national origin.

The Services do not use protected characteristics to select, rank, filter, or recommend properties. Where a search appears to ask us to, the Services decline and offer a neutral alternative rather than complying.

12. Security

We protect personal data using encryption in transit, access controls separating each agent's and brokerage's records from every other's, administrative interfaces restricted to specific named accounts behind an identity gate, hashed rate-limiting identifiers, and audit logging of administrative actions.

No system is perfectly secure, and we do not claim ours is. If a breach affects your personal data we will notify you and the appropriate authorities as required by law.

13. Data location

We process and store personal data in the United States. If you access the Services from elsewhere, you understand your data will be processed there.

14. Changes

If we change this Policy we will update the version and effective date above and post the revised Policy. If a change materially affects how we use your personal data, we will notify you and, where appropriate, ask you to accept it before you continue using the Services. We keep prior versions and will provide one on request.

15. Contact

Privacy questions and requests: privacy@theboundarystone.com

The Boundary Stone LLC, 15535 CR 166, Graham, TX 76450