← SF HousingPrivacy Policy
Effective July 29, 2026
This policy explains what sf-housing.xyz (the “Service”), operated by the operator of sf-housing.xyz, collects about you, why, who else sees it, and how to get it deleted. It applies to the website and to our text-message alerts.
The short version. You can browse listings without giving us anything. If you want text alerts, we need your Google account (to sign you in) and your mobile number (to text you). We do not sell your data, we do not share your phone number with landlords or advertisers, and you can have everything deleted by emailing hello@10xperps.xyz.
1. What we collect
| Data | When | Why |
|---|---|---|
| Nothing identifying | Browsing listings | Browsing requires no account. |
| Google account ID, email address, name, profile photo | You sign in with Google | To identify your account and attach your saved searches and phone number to it. |
| Mobile phone number | You arm a text alert | To send you the alerts you asked for. Nothing else. |
| Saved search criteria (neighborhood, beds, price) | You save a search | To match new listings and decide when to text you. |
| Which listings we already texted you about | Automatically | So you are never texted twice about the same listing. |
| Subscription status | You subscribe | To know whether your alerts are active. Card details go to Stripe, never to us. |
| Standard server logs (IP address, user agent, timestamps) | Automatically | Security, abuse prevention, and debugging. Kept short-term. |
2. What we do NOT do
- We do not sell your personal information, and we never have.
- We do not share your phone number with landlords, listers, advertisers, data brokers, or any other user.
- We do not use your data to train machine-learning models.
- We do not run third-party advertising or tracking pixels on the Service.
- We do not send you marketing texts — only the listing alerts you armed.
3. Google sign-in data
We use Google Sign-In only to authenticate you. We request the minimum scopes needed for that: your basic profile and email address. We do not request, receive, or store access to your Gmail, Drive, Calendar, Contacts, or any other Google service. We do not transfer Google user data to anyone except the infrastructure providers listed below acting on our behalf, and we do not use it for advertising. You can revoke our access at any time at myaccount.google.com/permissions; doing so also stops alerts.
4. Who we share data with
Only service providers that operate the Service for us, each limited to what it needs:
| Provider | What it handles |
|---|---|
| Vercel | Website hosting and server logs |
| Supabase | Database storing your account, phone number, and saved searches |
| Sign-in (identity verification only) | |
| Stripe | Subscription payments. Stripe receives your card details directly; we never see or store them. |
| Our SMS delivery provider | Receives your phone number and the alert text in order to deliver it |
We may also disclose information if legally required (valid subpoena, court order, or law), or to protect the Service or someone's safety. Listing data itself comes from public postings on Zillow, Apartments.com, and Craigslist; we send nothing about you to those sites.
5. How long we keep it
- Account, phone number, saved searches: until you delete them or ask us to.
- Alert history (which listings you were texted): kept while your account exists, so you are not re-texted the same listing.
- Server logs: short-term, on our hosting provider's normal retention schedule.
- Payment records: retained by Stripe, and by us in summary form, as long as tax and accounting law requires.
6. Deleting your data
Email hello@10xperps.xyz from your account's email address and ask us to delete your account. We will delete your account, phone number, saved searches, and alert history. Replying STOP to any text stops alerts immediately; that is separate from deletion, so email us if you want the data gone too.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete, or obtain a copy of your personal information, and to not be discriminated against for exercising those rights. California residents have these rights under the CCPA/CPRA. We do not sell personal information or share it for cross-context behavioral advertising, so there is nothing to opt out of on that front. To exercise any right, email hello@10xperps.xyz.
8. Security
Data is transmitted over HTTPS and stored with our hosting and database providers under their access controls. No system is perfectly secure; we cannot guarantee absolute security. If we discover a breach affecting your personal information, we will notify affected users as required by law.
9. Cookies
We use a single session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies. Some preferences (such as filters and favorites) are stored locally in your own browser and never sent to us.
10. Children
The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, email us and we will delete it.
11. Changes
We may update this policy. The “Effective” date above changes when we do. If a change materially affects how we handle your data, we will make that clear on the Service.