Privacy Policy

1. Scope

This Policy applies to personal information collected through our website, calculators, guides, account dashboards, professional ("Pro") onboarding, contact and callback forms, and email communications. It does not apply to information you provide directly to a real-estate agent, mortgage lender, or other third party off our platform — their handling of your information is governed by their own privacy practices.

2. Information we collect

We collect the following categories of personal information:

• Identifiers & contact info — name, email address, phone number (when you provide it), authentication credentials, IP address, and approximate geolocation derived from IP (country / region / city).
• Inquiry / buyer-profile details — Texas county and region selection, target price range, loan type or program of interest, first-time buyer or veteran status, free-text notes about your situation, and any documents you choose to upload (e.g., pre-approval letters).
• Pro / professional info — business name, TREC license type and number, service areas, biography, photo, and license verification documents.
• Disclosure & consent records — the timestamp, IP address, and approximate geolocation for each acknowledgment of our Terms, Disclosures, TCPA contact consent, and similar legal notices, retained for audit and compliance.
• Payment information — handled exclusively by Stripe, our payment processor. We store only the subscription status, plan, last four digits of the card, and Stripe customer ID. We never see or store your full card number.
• Usage & device data — pages viewed, tools used, referring URL, browser type and version, operating system, device type, and session timestamps, collected via our own logs and first-party analytics.
• Communications — the content of messages you send through our contact, callback, and lead-message forms, and our replies.

We do not knowingly collect Social Security numbers, full bank-account numbers, government ID images, biometric data, or precise GPS location. If you submit such information to us by mistake, please notify us immediately and we will delete it.

3. How we use your information

We use personal information only for the following purposes:

• To create and operate your account, authenticate you, and provide the requested educational tools, calculators, and dashboards;
• To introduce buyers who request a callback to a Texas-licensed real-estate professional in the requested county via our capped round-robin rotation;
• To respond to inquiries you send through our contact and callback forms;
• To process Pro subscription billing through Stripe and verify Pro license status with TREC;
• To send transactional emails (account, billing, security, requested information) and, with separately captured consent, occasional product announcements (you can opt out of marketing email at any time);
• To detect, investigate, and prevent fraud, abuse, RESPA violations, and security incidents, and to enforce our Terms;
• To comply with legal obligations, court orders, and lawful government requests; and
• To improve and secure the Service, in aggregated or de-identified form wherever possible.

4. Legal bases (where applicable)

Where required by law, we rely on the following legal bases: performance of a contract (operating your account, processing subscriptions); consent (TCPA contact consent, marketing email, optional cookies); legitimate interests (security, fraud prevention, product improvement); and legal obligation (tax, accounting, responding to lawful requests).

5. How we share your information

We share personal information only as described below. We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under U.S. state privacy laws.

• Matched professional. When you submit a callback or contact request, your name, email, phone (if provided), county, and free-text message are shared with the single Texas-licensed Pro matched to your request so they can follow up with you. That Pro becomes an independent controller of the information you provided to them.
• Service providers (processors). Hosting, database, and authentication: Supabase. Payments: Stripe. Email delivery: Resend. Content delivery and security: Cloudflare. Each operates under a written data processing agreement and may only use your information to perform services for us.
• License verification. We submit license numbers Pros provide to TREC for public-record verification.
• Legal & safety. We may disclose information to comply with law, valid legal process, or government request; to enforce our Terms and Disclosures; to investigate fraud, RESPA violations, or security incidents; or to protect the rights, property, or safety of any person.
• Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred subject to this Policy or an equivalent successor policy.

6. Cookies & tracking

We use a small number of first-party cookies and local-storage entries that are strictly necessary for authentication, session state, CSRF protection, and remembering your acknowledged disclosures. We do not use third-party advertising cookies, ad-network pixels, or cross-site behavioral tracking. We do not currently respond to browser "Do Not Track" signals because no industry standard exists, but we honor opt-out preference signals required by applicable state law (e.g., Global Privacy Control where required).

7. Your privacy rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Delete your account and associated personal information;
• Export your data in a portable, machine-readable format;
• Opt out of marketing emails (transactional emails about your account and inquiries cannot be opted out of while your account is active);
• Withdraw TCPA contact consent at any time by replying STOP to any SMS or emailing info@bluebonnethomesavings.com; and
• Appeal a denial of any privacy request.

You may exercise these rights from your dashboard or by emailing info@bluebonnethomesavings.com with the subject line "Privacy Request." We will verify your identity using your account email and respond within 45 days (extendable by 45 additional days where permitted). We will not discriminate against you for exercising any privacy right.

Texas residents: The Texas Data Privacy and Security Act gives you additional rights to access, correct, delete, port, and opt out of targeted advertising, sales, and certain profiling. You may appeal a denial by replying to our response or emailing the address above with "Appeal" in the subject line. If your appeal is denied, you may contact the Texas Attorney General at texasattorneygeneral.gov.

California, Virginia, Colorado, and other state residents: You have substantially the same rights described above under your respective state privacy laws. We do not sell personal information or process it for targeted advertising.

8. Data retention

We retain personal information only as long as needed for the purposes described in this Policy:

• Active account data: while your account is open and for up to 24 months after deletion (for fraud and dispute resolution);
• Disclosure / consent acknowledgments and subscription records: 7 years (audit and tax requirements);
• Transactional email logs: 18 months;
• Aggregated, de-identified analytics: indefinitely.

9. Security

We use TLS in transit, encryption at rest, row-level security in the database, least-privilege access controls, audit logging, multi-factor authentication for administrative accounts, and routine third-party dependency scanning. No system is 100% secure; you can help by using a unique password and enabling any account-protection features we offer. Report a suspected security issue to admin@bluebonnethomesavings.com.

10. Children

The Service is directed to adults considering a Texas home purchase and is not directed to children under 18. We do not knowingly collect personal information from children under 13 (or under 16 where applicable). If you believe a child has provided us personal information, contact us and we will delete it.

11. International users

The Service is operated from the United States and intended for U.S. residents, primarily Texas. If you access the Service from outside the U.S., you understand and consent to the transfer and processing of your information in the United States, which may not provide the same level of data protection as your jurisdiction.

12. Third-party links

The Service contains links to third-party websites (e.g., TREC, HUD, TSAHC, TDHCA). We are not responsible for the content or privacy practices of those sites. Review their privacy notices before providing them with personal information.

13. Changes to this Policy

We may update this Policy from time to time. Material changes will be posted with a new "Updated" date and, where appropriate, communicated to you by email or in-product notice. Continued use of the Service after the effective date constitutes acceptance of the updated Policy.

14. Contact us

Privacy questions, requests, or complaints: info@bluebonnethomesavings.com or our contact page. Mailing address: BluebonnetBuyer Home Savings, LLC, 1910 Pacific Ave, Suite 2000-1688, Dallas, TX 75201.