Privacy Policy

Last updated 29 October 2026

What we collect

• Waitlist details: what the waitlist form stores: your email address, the use case and expected monthly volume you choose, the time you signed up, and the address of the page you came from (your browser's referrer, if it sends one).
• Emails you ask us to send: when you ask a free calculator to email you its analysis, we keep the email address you give, the page, the numbers you entered, the home you looked up (if you looked one up), the time, and whether you ticked the optional product-updates box. Without that box ticked, we use your email address only to send the analysis you asked for (and to stop repeat sends). If you tick it, we may also send occasional product updates, each with an unsubscribe link.
• Where a new account came from: when you ask for a sign-in link for a new account, your browser sends the first page of our site you opened in that tab (since it was last reloaded) and the website that sent you there (its name only, such as google.com, never the full address). We keep them with the sign-in link for at most a day and save them on your account only if you create it, to understand which pages bring customers. No cookie or browser storage is used for this; if we don't know, nothing is recorded.
• API keys: You create keys on your dashboard after signing in. Keys are stored in hashed form and shown only once, when you create them.
• Usage records: for each API or demo request, the time, the endpoint, the kind of input you sent (link, address or property ID), the Zillow property ID found, whether it came from the cache, the result status, the credits used and how long it took. We use these to enforce limits and fix problems and, for paid plans, to bill you correctly.
• Network data: your IP address, used to rate-limit the public demo and protect the service. Demo usage records store a one-way hash of it, not the address itself.
• Payment details: payments are handled by a payment processor (Stripe). We don't see or store full card numbers.
• Site analytics: we use Vercel Web Analytics for cookieless page-view counts and a few product events. Page views are counted on every site page, including sign-in and the dashboard, with the page path only: our analytics integration removes the part of the address after “#” (where sign-in links carry their one-time code) and every query parameter except the campaign tags utm_source, utm_medium and utm_campaign. API requests aren't counted. The events are blog link clicks and steps in getting started: a sign-in link requested, an account created, a key created, a first successful API call, a checkout started or completed (with the plan or pack name), a bulk job started and a watchlist created. Blog click events contain only the article identifier, audience category and destination path. The details we attach to an event never include your email, API key or property lookup input.

Listing photos load from Zillow

Some pages, including the home page, the Zillow data lookup and the demo results, show listing photos. These images load straight from Zillow's servers (photos.zillowstatic.com), not from ours. When they load, your browser contacts Zillow, which sees your IP address and browser details, as with any image request. We ask your browser not to send the address of our page with those requests. Photo URLs returned by the API point to the same servers.

What we don't do

We don't sell your personal information, and we don't use advertising trackers. We don't send your email, key or account details to Zillow. PropertiesAPI is an independent service and is not affiliated with Zillow.

Who processes data for us

• Vercel, which hosts the website and processes cookieless web analytics. See Vercel Web Analytics privacy information.
• Our data-collection provider, which receives the Zillow link, address or property ID in your lookup so it can fetch the public page. It doesn't receive your email or key.
• Photon, a public address-search service by Komoot based on OpenStreetMap data. When you type 3 or more characters into the address search box, your browser sends that text directly to Photon to fetch matching US addresses, and Komoot sees your IP address, as with any website your browser contacts. The request carries no cookies and no referrer; your browser does tell Photon that the request comes from our website. We don't receive or store the typed text. Recent suggestions are kept only in your open browser tab, so retyping doesn't send the same text again.
• Our email provider, when we email you (for example your key, a service notice or an analysis you asked for).
• A payment processor (Stripe), for paid plans.

The current list of providers is available on request at support@propertiesapi.com.

Property data

Lookup results are data from public property pages, provided as-is. They can include listing broker names and similar details shown on those pages. We keep results in a short-lived cache so repeat lookups are faster and free.

How long we keep it

Waitlist entries until you ask us to remove them or the waitlist closes. Analysis email requests for up to 12 months, then they are deleted; ask us and we delete yours sooner. Usage records for as long as we need them for limits, abuse prevention and, billing. Account details (your email address, your API keys, stored only in hashed form, and your usage) are kept while your account is open, and then only as long as we need them for billing, tax and legal reasons.

Your rights

You can ask us for a copy of your data, to correct it, or to delete it, by emailing support@propertiesapi.com. Depending on where you live (for example under the GDPR in Europe or the CCPA in California) you may have further rights, including to object to processing and to complain to your data protection authority. We won't treat you differently for using them.

Cookies

We set one essential cookie, __Host-pa_session, only when you sign in. It keeps you signed in for up to 30 days and is HttpOnly, Secure and SameSite=Lax. We don't use advertising or analytics cookies.

Children

PropertiesAPI is a developer service for adults. As our terms say, you must be at least 18 years old to use it; it isn't meant for anyone under 18.

Changes

We'll post any changes here and, if they're material, email the people affected first.

Contact

Privacy questions: support@propertiesapi.com. See also the Terms of Service and the Acceptable Use Policy.

Zillow is a trademark of Zillow, Inc. PropertiesAPI is an independent service and is not affiliated with, endorsed by or sponsored by Zillow.