Privacy Policy

Overview

Atelier List Inc. ("Atelier List", "we", "us") operates a private listing platform for licensed real estate agents. This policy explains what data we collect, why we collect it, and how we handle it. We collect as little as possible. We never sell your data.

Who this policy covers

This policy applies to two groups:

• Agents — licensed real estate professionals with an Atelier List account.
• Buyers — people who access a password-protected list shared by an agent. Buyers do not create accounts on Atelier List.

Data we collect

Agent account data

When you create an Atelier List account we collect:

• Name, email address, and password (hashed — we never store it in plain text)
• Brokerage name
• Mobile phone number (used for your Atelier Line SMS number)

Listing and list data

Listings, photos, notes, and lists you create are stored on our servers and are associated with your account. This content is entirely yours — see Terms for data ownership details.

SMS messages

Inbound SMS messages sent to your Atelier Line are stored so you can read them in your Inbox. Messages are associated with your account only.

Buyer access data

When a buyer unlocks a list we log the access event (timestamp, list ID) for security purposes. We do not collect buyer names, email addresses, or accounts. Buyers are identified only by the phone number they text from when they contact you through your Pocket Line.

Usage and technical data

We collect standard server logs (IP address, browser type, pages visited, timestamps) to operate and secure the service. These logs are retained for 90 days.

How we use your data

• To provide the service — displaying your listings and lists, routing SMS messages to your Inbox, authenticating your account.
• To communicate with you — account setup, support responses, and essential service notifications. No marketing emails unless you opt in.
• To secure the platform — detecting abuse, enforcing rate limits, and investigating security incidents.

We do not use your data to train AI models. We do not use your listing or buyer data for advertising.

Data sharing

We do not sell or rent your data. We share data only with:

• Service providers — hosting (Fly.io), image storage (Cloudflare R2), SMS infrastructure (Twilio). Each is bound by a data processing agreement.
• Legal obligations — if required by law, court order, or to protect the rights and safety of Atelier List or its users.

Data retention

We keep your account data for as long as your account is active. If you delete your account we remove your personal data within 5 business days. Listing data associated with your account is deleted at the same time. Anonymized aggregate statistics may be retained indefinitely.

Security

All data is encrypted in transit (TLS) and at rest. Passwords are hashed using bcrypt. List passwords are hashed before storage — we cannot recover them, only reset them. We conduct periodic security reviews and address vulnerabilities promptly.

Your rights

You may at any time:

• Access the personal data we hold about you
• Correct inaccurate data via your account Settings
• Request deletion of your account and all associated data
• Export your listing data (contact us and we'll provide a CSV)

To exercise any of these rights, email hello@pocketrealty.com.

Cookies

We use a single session cookie to keep you signed in. We do not use tracking cookies, analytics cookies, or advertising cookies. No third-party tracking scripts run on Atelier List.

Changes to this policy

If we make material changes we'll notify you by email at least 14 days before they take effect. The current version is always available at this URL.

Contact

Questions about privacy? Email hello@pocketrealty.com.