Privacy Policy
What ShowPoppy™ collects, why we hold it, who it reaches, and how to ask us about it.
Draft prepared for legal review. This document describes how the product works today and has not yet been reviewed by counsel. It is not in effect until PeopleStar Inc. publishes a dated, ratified version.
Who this affects
Three groups of people appear in ShowPoppy™:
- The agent using ShowPoppy™. Our customer, who holds an account.
- Listing agents. They receive showing requests and reply. They do not hold accounts and are not required to create one.
- Buyer clients. The agent's own clients, whose tour details we hold so the agent can coordinate and share them.
What we collect
Information the agent gives us
- Property addresses and the listings placed on a tour.
- Tour dates, start times, and the scheduled order of showings.
- Listing agent names and mobile numbers, so requests can be sent and replies matched to the right property.
- Buyer client names and contact details, where the agent enters them.
- Notes and instructions the agent adds to a showing.
Information created by using the product
- The content of showing requests we send on the agent's behalf.
- Replies connected to those requests, and the status we derive from them, such as confirmed, declined, or a proposed time.
- Timestamps and delivery status for each message.
Account and sign-in
Sign-in is handled by ck1pw, a separate PeopleStar Inc. service. If an agent enables biometric sign-in, a passkey credential is stored so the browser can verify them. We do not receive or store fingerprints or face data. That stays on the device.
What we do not do
- We do not run analytics, advertising pixels, or third-party tracking on this website.
- We do not sell personal information.
- We do not use buyer or listing agent contact details to market to them.
- We do not process messages that are unrelated to an active buyer tour.
Cookies
The ShowPoppy™ application sets one essential cookie, a PHP session cookie, so you stay signed in while you work. It is not used for advertising or analytics. This marketing website sets no cookies of its own.
This site does load fonts from Google Fonts, which means Google receives your IP address in order to serve the font files. No cookie is set by that request.
Who else sees the data
We use a small number of outside services to make the product work. Each receives only what that function needs.
| Service | Used for | What it receives |
|---|---|---|
| Messages, on the connected device | Sending showing requests and receiving replies | Mobile numbers and message content |
| Cotality | Property and listing lookup | Property addresses and listing identifiers |
| Google Maps | Geocoding and route ordering | Property addresses |
| Google Gemini | Drafting message text and interpreting replies | Tour details and reply text tied to an active tour |
| Rebrandly | Shortening links inside messages | The destination link |
| OpenStreetMap Nominatim | Address lookup | Property addresses |
| Google Fonts | Serving typefaces on this site | Your IP address |
| DigitalOcean | Hosting the application and database | All stored data, at rest on the server |
Each of these acts on our instructions for the purpose listed. If you need a formal list of subprocessors for a brokerage or enterprise review, contact us and say so.
Links we send to other people
Listing agents receive a private response page, and buyer clients may receive a tour page. Both are reachable through a unique link rather than a login. Anyone holding the link can open the page, so treat those links as private.
How long we keep it
Tour records, messages, and their statuses are retained while the agent's account is active, so the agent keeps a record of what was asked and answered. We have not yet set a fixed retention schedule. Establishing one is on our roadmap, and until it is published, an agent may ask us to delete specific tours or their whole account.
Your choices
- Ask what we hold about you.
- Ask us to correct something that is wrong.
- Ask us to delete a tour, a client record, or an entire account.
- Ask for a copy of an account's data.
Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act. Tell us what you need and we will work out how to meet it.
Children
ShowPoppy™ is a tool for real estate professionals. It is not directed to children and we do not knowingly collect their information.
Security
Sign-in is gated by ck1pw, biometric sign-in uses passkeys, and pages shared outside the account use unique tokenized links. We have not completed an independent security audit and we make no certification claim here. To report a suspected issue, see Responsible Disclosure.
Changes
When this policy changes materially, we will update the date on this page and tell account holders.
Contact
Questions about this policy, or a request about your data, go through the support form. Choose Privacy and data as the subject and tell us what you need.