CRE Traded
Privacy policy · version 2026-08-25

Your data should help you—not surprise you.

This policy explains the data used to run property search, professional workspaces, Buy Box matching, alerts, and account services.

EffectiveAugust 25, 2026
Pre-launch legal review: this operational policy reflects the current product design, but company identity, required regional notices, retention schedules, and processor contracts must be reviewed by qualified counsel before public registration opens.

Scope and roles

This policy covers CRE Traded websites, accounts, listing workspaces, notifications, support, and related services. A brokerage or property company may separately control information it receives when you contact it; review that organization's privacy practices too.

Information we collect

  • Account and identity data: name, email, authentication identifiers, account role, contact details, legal-policy acceptances, and professional application or license-review information.
  • Search and requirement data: searches, map areas, saved properties, collections, Buy Boxes, tenant requirements, match feedback, alert cadence, and delivery preferences.
  • Marketplace activity: inquiries, tour requests, messages or notes you submit, document-access events, listing saves, and notification state.
  • Professional workspace data: listings, spaces, contacts, team memberships, leads, uploaded media or documents, moderation history, and feed metadata.
  • Device and security data: request identifiers, IP-derived abuse-prevention keys, browser details, timestamps, referrals, audit events, and delivery or webhook events.
  • Optional analytics data: when you allow analytics on a device, Google Analytics may receive page URLs and titles, referrers, browser and device details, approximate geography, and interaction events. CRE Traded does not intentionally send names, email addresses, form contents, Buy Box notes, or account identifiers to Google Analytics.
  • Support data: messages, attachments you intentionally provide, and steps taken to resolve the request.

How we use information

  • Provide accounts, live-map search, matching, alerts, collections, tours, inquiries, and professional workspaces.
  • Rank and explain matches, prevent duplicate alerts, respect feedback, and maintain listing freshness.
  • Generate an optional AI-assisted explanation from saved structured match evidence and current published listing facts. The deterministic matching rules remain authoritative.
  • Route information you intentionally submit to a listing team or workspace.
  • Detect abuse, secure accounts and files, keep audit trails, troubleshoot, and measure service reliability.
  • When you allow optional analytics, measure acquisition channels, page use, and product interactions so we can improve the marketplace.
  • Meet legal obligations, enforce platform rules, and respond to rights or support requests.

When information is shared

We share only what is needed for the selected service:

  • Listing teams and brokerages receive details you intentionally include in an inquiry, tour, document-access request, or professional workflow.
  • Infrastructure providers process data for hosting, databases/authentication, maps, security checks, AI-assisted match explanations, email delivery, and optional analytics. Current product integrations include Supabase, Vercel, Vercel AI Gateway and its selected model provider, MapLibre/OpenFreeMap, Cloudflare Turnstile, Resend, and Google Analytics when you allow it. For an AI match explanation, CRE Traded sends structured match evidence and published listing facts, not free-form Buy Box notes, feedback notes, messages, or contact details.
  • Legal and safety recipients may receive information when reasonably necessary to comply with valid process, protect users, investigate abuse, or defend rights.
  • Business transfers may involve data subject to confidentiality and continued notice if the operator is reorganized, financed, acquired, or sold.

CRE Traded does not currently sell personal information or use personal information for cross-context behavioral advertising. If that changes, this policy and the Privacy Choices page will be updated before the practice begins.

Retention and deletion

We retain data while an account or listing workflow is active and for a limited period afterward based on operational, security, dispute, and legal needs. Retention differs by category; immutable audit, fraud-prevention, transaction, and legal records may need to outlast account access. The final production schedule requires counsel approval.

Signed-in users can export account data and submit or cancel a deletion request in the Account Privacy Center. A request is reviewed before execution so the response can identify any information that must be retained or de-identified.

Your choices and rights

  • Change Buy Box email and in-account alert settings, pause a requirement, or unsubscribe from Buy Box emails.
  • Correct profile or listing information through account and workspace tools.
  • Request access, correction, export, or deletion through the privacy center or by emailing privacy@cretraded.com.
  • Allow or reject optional analytics and manage optional browser storage through Privacy Choices. Essential authentication and security storage cannot be disabled while signed in.

Applicable rights vary by residence and law. We may need to verify identity and authority before fulfilling a request, and authorized agents may be asked for proof of authorization.

Security and transfers

CRE Traded uses access controls, private storage, short-lived signed links, row-level database policies, rate limits, and auditable moderation controls. No system is perfectly secure. Do not place government identifiers, account passwords, or unnecessary sensitive information in listing notes or support messages.

Providers may process data in the United States or other locations where they operate. Production contracts and transfer safeguards must be confirmed before international expansion.

Age limits

The marketplace is intended for adults and business users, not children. Accounts are limited to people age 18 or older. Contact us if you believe a child supplied personal information.

Changes and contact

Material changes will receive a new version and, when appropriate, an account notice or renewed acceptance. Questions and privacy requests can be sent to privacy@cretraded.com.

General security guidance is available from the Federal Trade Commission .