Privacy Policy

Notice at a glance

1. Who we are

The Boundary Stone is operated by The Boundary Stone LLC, a Texas limited liability company ("The Boundary Stone," "we," "us," "our").

Mailing address: The Boundary Stone LLC, 15535 CR 166, Graham, TX 76450

Privacy contact: privacy@theboundarystone.com

General support: helpdesk@theboundarystone.com

This Policy explains what personal data we collect through theboundarystone.com and related services (the "Services"), why, who we share it with, and the choices you have.

The Boundary Stone is not a real estate brokerage and does not provide brokerage services. We provide software used by licensed real estate professionals and by consumers working with them. Where this Policy refers to "your agent," it means the licensed professional associated with your account, who is employed or sponsored by their own brokerage and is not our employee.

2. The one thing we want you to read

Most privacy policies describe analytics. Ours describes something more specific, and you should understand it before you create an account:

We record what you search for and which listings you interact with, and we make that activity visible to the licensed real estate agent associated with your account and to that agent's brokerage.

That is not incidental. It is a core function of the Services: it is how your agent understands what you are looking for. Section 5 describes exactly what is recorded; Section 8 describes who can see it.

If you do not want your activity visible to an agent, do not create an account or accept an agent invitation. You may browse without one — Section 5.1 explains what is still recorded if you do.

3. Whose data this Policy covers

• Buyers and consumers who create an account, are invited by an agent, or browse without an account.
• Household members invited by a buyer to share access to that buyer's record.
• Agents, brokers, and office managers who subscribe to the Services.
• Prospective clients ("leads") whose details reach us from a listing portal, a web form, or an agent's contact import, and who may have no account with us.
• Licensed professionals named in listing records, whose business contact details appear in MLS data we receive under licence.

4. Personal data we collect

4.1 Information you give us

Account and profile. Name, email address, telephone number, and password credentials handled by our authentication provider. For agents and brokers we also collect mailing address, date of birth, real estate licence number, brokerage affiliation, profile photograph, and email signature. Licence number and date of birth are collected to verify professional eligibility and to distinguish licensees with similar names.

Buyer profile and preferences. Home address, budget, property criteria, timelines, and similar details you or your agent record.

Communications. Messages sent through the Services, support requests, and product feedback, including screenshots you attach.

Payment information. If you subscribe, your billing email address and subscription status. We never receive or store your card number. Payments are processed by Stripe on Stripe's systems; we retain only Stripe's customer and subscription identifiers.

4.2 Information created as you use the Services

Described in Section 5.

4.3 Information from other sources

Listing data. We receive property listing data — including the names, email addresses, telephone numbers, and brokerage affiliations of listing and co-listing agents — under licence from North Texas Real Estate Information Systems (NTREIS) through the Trestle platform operated by Cotality.

Leads from listing portals. If you submit an inquiry about a property on Zillow, Realtor.com, Homes.com, Redfin, or a similar portal, that portal may forward your inquiry to an agent's dedicated intake address on our system. We receive what the portal sends, typically your name, email address, telephone number, and message.

Agent contact imports. An agent may import contacts from their own records or another system they use.

Google Calendar, if an agent connects it. An agent may choose to connect a Google account so their meetings and deadlines stay in step with Google Calendar. When they do, we create one calendar named "The Boundary Stone" in that Google account, and we receive the Google account's email address (to show which account is connected) and the title, time, description and status of events on that one calendar. We never read the agent's other Google calendars. Events on that calendar may contain whatever the agent writes in them, including client names. We also store, encrypted, the access credentials Google issues for the connection.

Embedded features. Agents and brokerages may embed Boundary Stone search or lead-capture features on their own websites. Activity in those features is collected by us as described here.

4.4 Information we deliberately do not collect

• Your card or bank details, with one exception: wiring instructions a title company sends you through the Services, which may contain account details. Section 8.4 explains how we handle them.
• Raw IP addresses. We hash the network address of incoming requests with a secret value to enforce rate limits and prevent abuse. The hash cannot be reversed, and the address itself is not written to our records.
• Precise geolocation. We do not request location permission from your browser or device.
• Personal data from children under 13. If you believe a child has provided us personal data, contact privacy@theboundarystone.com and we will delete it.
• Biometric data. We collect none.

4.5 Sensitive information — please do not type it

You can search using ordinary sentences. Because of that, you may type something that reveals sensitive information — a health condition, a disability, a religion, or your family circumstances.

We do not ask for that information and we ask that you not include it. We store your searches as written, so anything you type is retained and may be visible to your agent.

If you need a home feature for a health or mobility reason, describe the feature — "single storey," "wide doorways," "roll-in shower." You will get better results, and the reason stays yours.

Separately, and regardless of privacy law, we do not use protected characteristics to select or rank properties. See Section 11.

5. What we record about your activity

5.1 Before you have an account

When you visit without signing in, we record the pages you visit and searches you run, a randomly generated session identifier linking one visit together, the time, and the session length.

This is not linked to your name, because we do not know it. If you create an account later in the same browsing session, activity from that session may be associated with your account.

5.2 Once you have an account

• Your searches, in the words you typed — stored exactly as written, with our interpretation and which listings matched or were excluded.
• The listings you view, save, favourite, and inquire about, and when.
• Saved searches, including criteria and a snapshot of results at the time.
• A snapshot of listing details and community rule findings as they stood when you interacted with them, so later conversations refer to what you actually saw.
• Session activity — pages, features, time spent.
• Communications with your agent through the Services.
• Your browser's user agent string, recorded when you accept our terms, as evidence of that acceptance.

5.3 Artificial intelligence

Some features use AI models provided by Anthropic to interpret searches, answer questions about community rules, and help agents draft communications. Your question and the document context needed to answer it are transmitted to that provider for processing. We record the volume and cost of usage. Your personal data is not used to train AI models, and our provider is engaged on terms that do not permit training on our data.

If you are an agent, broker, or office manager: when you ask the in-app assistant a question about a community, we record the wording of that question, the community it relates to, and whether we had a verified answer, alongside your account. We use this to find the questions agents ask most often and write the answers into our community guides, so the next agent does not have to ask. These records are readable by our administrators. They are not shared with other agents or brokerages, not shown to buyers, and not used to train AI models.

Questions you ask the assistant about your own clients — their notes, their activity, your schedule, who to contact — are not recorded this way. Only community questions are.

6. Why we process your data

We do not sell personal data. We do not sell sensitive personal data. We do not sell biometric data. We do not process personal data for targeted advertising, and we do not engage in profiling that produces legal or similarly significant effects.

7. Your consent, and how it is recorded

When you create an account or accept an agent's invitation, we ask you to accept our Terms of Use, this Privacy Policy, and our Buyer Activity and Tracking Disclosure. Each is recorded separately, with the version accepted and the date and time, so we can show what you agreed to and when.

You agree that we may provide these documents, and give notices required by law or by our agreements, in electronic form — by posting them in the Services or emailing the address on your account. You may withdraw that agreement by closing your account. To access electronic records you need a device with a current browser and an email account; you may request a paper copy by writing to the address in Section 1.

If we materially change how we handle your data, we will ask you to review and accept the updated terms.

8. Who your data is shared with

8.1 Your agent and their brokerage

This is the sharing that matters most. If an agent is associated with your account:

• Your agent can see your profile, saved searches, search history, listings viewed or favourited, notes, and activity over time.
• Your agent's broker and any office manager at that brokerage can see the same, through brokerage oversight tools. Texas law makes a broker responsible for supervising their sponsored agents, and this access supports that supervision.
• If your agent leaves their brokerage, records relating to you may be divided between the departing agent and the brokerage. Where an active written representation agreement exists, that agreement is with the brokerage.
• Household members you invite receive access to your record.

8.2 Service providers

Each processes personal data on our behalf under contract:

Listing photographs are served to your browser directly from Cotality's systems rather than copied onto ours, so Cotality receives a request from your browser when a photograph is displayed.

8.3 Other disclosures

We may disclose personal data where required by law, subpoena, or legal process; to protect the rights, safety, or property of any person; to investigate fraud or abuse; and in connection with a merger, acquisition, financing, or sale of assets, in which case we will notify you and this Policy continues to apply until replaced.

8.4 Wiring instructions from a title company

If you are a buyer, seller, or lender on a transaction, the title company handling it may send you wiring instructions through the Services. We host them for the title company only to deliver them to you.

• Only that title company and the people it chooses can open them. Your agent, their brokerage, and our own staff cannot.
• They are encrypted, and viewing them requires two-step sign-in.
• They are deleted on the date the title company sets, no more than 30 days after they are sent.
• We record when they are sent and each time they are opened.
• We never send wiring details by email. An email tells you only that instructions are waiting and asks you to sign in.

We use them for no other purpose and never pass them to anyone else. Before you send money, always call the title company to confirm the account details, using a phone number you already had.

8.5 Title company staff: a record of the documents you open

If you work for a title company that uses the Services, we record each time you open or download a transaction document: who you are, which document, and when. You cannot open a document without this record being made.

• The agent who shared the document sees only that your title company received it, and when it was first opened. They do not see who at your company opened it, or how often.
• Our own staff can see the full record. We keep it so that your title company can ask us what a member of its staff opened, downloaded or uploaded, for example after that person leaves, and we may give your company that record when it asks.
• We keep it for 12 months (Section 9), and use it for no other purpose.

8.6 Google user data

We use information received from Google APIs only to provide the calendar sync the agent turned on: to copy meetings and deadlines between The Boundary Stone and the one calendar it created, and to show those events back to the agent in features that display their schedule — the AI assistant's answer when the agent asks what is on their calendar (processed by Anthropic, Section 8.2) and the agent's daily brief email (delivered by Resend, Section 8.2), each solely to produce that answer or that email for the agent. We do not use it for advertising, we do not sell it, we do not use it to train AI models, and we do not transfer it to anyone except as needed to run those features, to comply with law, or as part of a merger or sale with notice to you. People at The Boundary Stone do not read it except with the agent's permission, for security purposes, or where the law requires.

The Boundary Stone's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

8.7 Calendars and CRM systems an agent connects

If your agent connects their own calendar or CRM account to The Boundary Stone — for example Google Calendar, a calendar subscription link, Follow Up Boss or Lofty — information about your appointments, transactions and activity, which can include your name, a property address and dates, is copied into that agent's account with that service at the agent's direction. That copy is then held under that service's own terms and privacy policy. Agents can disconnect at any time; copies already made stay in the agent's account with that service.

We do not sell your personal data and we do not share it for cross-context behavioural advertising.

9. How long we keep it

Where we must keep records for regulatory, MLS, tax, or litigation reasons, we keep them for that period even if you ask us to delete them, and we will tell you when that applies.

10. Your rights

10.1 Our position on the Texas Data Privacy and Security Act

The Texas Data Privacy and Security Act applies to businesses that are not small businesses as defined by the United States Small Business Administration. The Boundary Stone LLC is currently a small business by that definition, so most of the Act does not yet apply to us. The one provision that does apply to small businesses concerns selling sensitive personal data, and we do not sell any personal data at all.

We have chosen to offer the rights below anyway, and to honour them as though the Act applied. We do that for two reasons: it is the right way to treat people, and we expect to grow past the threshold. These are binding commitments, not aspirations — if we fail to honour them, that is a broken promise you can hold us to.

10.2 The rights we commit to

You may ask us to:

• Confirm whether we process your personal data and give you access to it;
• Correct inaccuracies;
• Delete personal data you provided or that we obtained about you;
• Provide a portable copy in a readable, transferable format;
• Opt out of processing for targeted advertising, sale of personal data, or profiling with legal or similarly significant effects. We do none of these, so there is nothing to opt out of, but the right is stated for completeness.

10.3 How to make a request

If you have an account, open Settings from the menu and choose Request account deletion.

A deletion requested from Settings is carried out automatically seven days later, and Settings shows you the date. Until then you can cancel it from the same page; after that it cannot be undone. When it runs:

• We delete your login, your saved searches, your favorites, your search history and the activity we recorded as you used the Services, and we stop all email to you.
• If you have never been part of a real estate transaction through the Services, we also delete your agent's client record about you, including their notes and messages, and we tell your agent that you asked us to delete your account.
• If you have been part of one, your agent's brokerage must keep the transaction records, and the contact details in them, for four years under Texas real estate rules (22 TAC § 535.2). We keep those, and delete everything else listed above.

Two things are kept in every case: a record that you asked and what we did, so we can show the request was honoured; and your email address on our do-not-email list, so you are not contacted again.

Some requests are handled by a person rather than automatically: anything sent by email or post, any request other than deletion, and a deletion from an account that is also used to work as an agent or broker. You can email privacy@theboundarystone.com or write to the postal address in Section 1, for any kind of request. You do not need an account to make one.

We verify identity before acting, usually by confirming control of the email address on the account. We respond within 45 days, and may extend once by a further 45 days where reasonably necessary, telling you before we do.

10.4 If we say no

You may appeal by replying to our decision or emailing privacy@theboundarystone.com with "Appeal" in the subject line. We will respond within 60 days with a written explanation. If we deny your appeal, we will give you a method to submit a complaint to the Texas Attorney General.

10.5 A limit worth stating plainly

Some of what you ask us to delete may also exist in your agent's or their brokerage's records, or in an MLS system. We do not control those. We will delete what is ours and tell you honestly what is not.

11. Fair housing

We are committed to fair housing and support equal housing opportunity. Federal and Texas law prohibit discrimination in the sale or rental of housing on the basis of race, colour, religion, sex, disability, familial status, or national origin.

The Services do not use protected characteristics to select, rank, filter, or recommend properties. Where a search appears to ask us to, the Services decline and offer a neutral alternative rather than complying.

12. Security

We protect personal data using encryption in transit, access controls separating each agent's and brokerage's records from every other's, administrative interfaces restricted to specific named accounts behind an identity gate, hashed rate-limiting identifiers, and audit logging of administrative actions.

No system is perfectly secure, and we do not claim ours is. If a breach affects your personal data we will notify you and the appropriate authorities as required by law.

13. Data location

We process and store personal data in the United States. If you access the Services from elsewhere, you understand your data will be processed there.

14. Changes

If we change this Policy we will update the version and effective date above and post the revised Policy. If a change materially affects how we use your personal data, we will notify you and, where appropriate, ask you to accept it before you continue using the Services. We keep prior versions and will provide one on request.

15. Contact

Privacy questions and requests: privacy@theboundarystone.com

The Boundary Stone LLC, 15535 CR 166, Graham, TX 76450