flatlist

Privacy Policy

Last updated: February 26, 2026

Introduction

At flatlist, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your personal information when you use our Chrome extension and web application.

Information We Collect

Information You Provide

  • Email Address: Used to create your account and send you notifications about your listings and invitations
  • Listing Data: Information about apartment listings you save, including URLs, titles, descriptions, images, and prices
  • Notes: Any notes you add to listings

Information Collected Automatically

  • Authentication Tokens: Stored locally in your browser to keep you signed in
  • Usage Data: How you interact with the extension and web app to improve our services

How We Use Your Information

  • To provide and maintain our services
  • To process your listings and make them searchable
  • To enable collaboration features (inviting collaborators to your catalogs)
  • To send you important notifications about your account and listings
  • To improve our AI-powered search and recommendation features
  • To detect and prevent fraud or abuse

Data Storage and Security

Your data is stored securely using Supabase, a cloud-based database service. We use industry-standard security measures including:

  • Encrypted data transmission (HTTPS)
  • Secure authentication using Supabase Auth
  • Row-level security policies to protect your data
  • Regular security audits and updates

Authentication tokens are stored locally in your browser using Chrome's secure storage API. We never store your passwords - authentication is handled entirely by Supabase.

Chrome Extension Permissions

Our Chrome extension requires the following permissions:

  • Storage: To store your authentication tokens locally in your browser
  • Active Tab: To access the content of the current webpage to extract listing information
  • Scripting: To inject the floating save button on real estate websites
  • Host Permissions: To access content from all websites (to detect real estate listings) and our web application (for authentication)

We only access webpage content on real estate listing pages. We do not access, collect, or transmit data from other websites.

Data Sharing

We do not sell, rent, or share your personal information with third parties except:

  • Service Providers: We use Supabase for data storage and authentication, and Resend for email delivery
  • Collaborators: If you invite collaborators to your catalog, they will have access to listings in that catalog
  • Legal Requirements: When required by law or to protect our rights

Your Rights

You have the right to:

  • Access your personal data
  • Delete your account and all associated data
  • Export your listings data
  • Opt out of non-essential communications

To exercise these rights, please contact us at team@flatlist.app

Cookies and Tracking

We use cookies and similar technologies only for authentication and to maintain your session. We do not use tracking cookies or analytics tools that collect personal information without your consent.

Children's Privacy

Our service is not intended for users under the age of 18. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy, please contact us at team@flatlist.app