Privacy Policy
Last updated: February 26, 2026
Introduction
At flatlist, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your personal information when you use our Chrome extension and web application.
Information We Collect
Information You Provide
- Email Address: Used to create your account and send you notifications about your listings and invitations
- Listing Data: Information about apartment listings you save, including URLs, titles, descriptions, images, and prices
- Notes: Any notes you add to listings
Information Collected Automatically
- Authentication Tokens: Stored locally in your browser to keep you signed in
- Usage Data: How you interact with the extension and web app to improve our services
How We Use Your Information
- To provide and maintain our services
- To process your listings and make them searchable
- To enable collaboration features (inviting collaborators to your catalogs)
- To send you important notifications about your account and listings
- To improve our AI-powered search and recommendation features
- To detect and prevent fraud or abuse
Data Storage and Security
Your data is stored securely using Supabase, a cloud-based database service. We use industry-standard security measures including:
- Encrypted data transmission (HTTPS)
- Secure authentication using Supabase Auth
- Row-level security policies to protect your data
- Regular security audits and updates
Authentication tokens are stored locally in your browser using Chrome's secure storage API. We never store your passwords - authentication is handled entirely by Supabase.
Chrome Extension Permissions
Our Chrome extension requires the following permissions:
- Storage: To store your authentication tokens locally in your browser
- Active Tab: To access the content of the current webpage to extract listing information
- Scripting: To inject the floating save button on real estate websites
- Host Permissions: To access content from all websites (to detect real estate listings) and our web application (for authentication)
We only access webpage content on real estate listing pages. We do not access, collect, or transmit data from other websites.
Data Sharing
We do not sell, rent, or share your personal information with third parties except:
- Service Providers: We use Supabase for data storage and authentication, and Resend for email delivery
- Collaborators: If you invite collaborators to your catalog, they will have access to listings in that catalog
- Legal Requirements: When required by law or to protect our rights
Your Rights
You have the right to:
- Access your personal data
- Delete your account and all associated data
- Export your listings data
- Opt out of non-essential communications
To exercise these rights, please contact us at team@flatlist.app
Cookies and Tracking
We use cookies and similar technologies only for authentication and to maintain your session. We do not use tracking cookies or analytics tools that collect personal information without your consent.
Children's Privacy
Our service is not intended for users under the age of 18. We do not knowingly collect personal information from children.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
Contact Us
If you have any questions about this Privacy Policy, please contact us at team@flatlist.app