Privacy notice

1. The Kinds of Information We Collect.

Information You Provide Us or That We Collect About You. We collect information that you provide to us and other content, images and information when you access our Services, including when you complete webforms on www.mainstay.io; create an account with us; communicate with us about our Services via comments, direct message, telephone, or e-mail; or respond to one of our surveys.

Categories of personal information that you may provide to us or that we may collect include:

• Your name and email address;
• Your telephone number;
• Your account log-in details (e.g. email/username, password);
• Homes you view through our Services;
• Billing information (e.g. billing name and address and credit/debit card information).
• Reviews or comments you leave on our Services or on other public websites or services associated with us, such as social networking platforms.

Information We Collect from Your Device. We may collect the following information, which may or may not constitute personal information, from the device that you use to access our Site or the Services:

• Device attributes such as the operating system, hardware and software versions, battery level, signal strength, bandwidth, available storage space, browser type, app and file names and types, and plugins;
• Information about operations and behaviors performed on the device, such as mouse movements (which can help distinguish humans from bots) or whether a window is in the foreground or background, as well as recording clicks, mouse movements, scrolls, keystrokes, and other information about your browsing session;
• Identifiers unique to you, your device, or your account(s), such as device IDs, advertising IDs, and other similar static ID numbers such as those from apps or accounts you use;
• Information you allow us to receive through device settings you turn on, such as access to your GPS location;
• Network and connection information such as the name of your mobile operator or ISP, language, time zone, mobile phone number, and IP address; and
• Data from cookies, tags, pixels, web beacons, and log files stored on your device, including cookie IDs, page views, how often you visit our Services, and links you click on, as well as recording clicks, mouse movements, scrolls, keystrokes, and other information about your browsing session.

Our Services do not respond to Do Not Track signals.

2. How We Use This Information

To Provide Our Services. We use the information that we collect about you to deliver our Services. We may make use of technological advances, including but not limited to artificial intelligence (AI) and/or machine learning (ML), in order to build, personalize, and improve our Services.

To Advertise Our Services. We may use information collected about you to provide you with relevant information about additional Services that the Company offers. Specifically, we may use information about how you interact with our Services, combined with information you provide us and information we collect from other sources, to serve you relevant advertising.

You may have additional choices available to you with regards to some online behavioral advertising cookies. Please visit the Digital Advertising Alliance at https://optout.aboutads.info or the Network Advertising Initiative at https://optout.networkadvertising.org for more information.

We may also allow third-party cookies on our website to assist in enhancing the website. For example, we allow Google to provide us with analytics on our website traffic. For more information about how to opt-out of Google Analytics, you can visit: https://tools.google.com/dlpage/gaoptout. For other privacy choices made available by Google, you can visit: https://policies.google.com/technologies/ads.

To Do Market Research. We are constantly striving to improve our customer experience. We conduct research into all aspects of the home buying and selling process to try to identify ways to make it better. We may use partner companies to conduct surveys of willing participants who offer suggestions as to how we might improve our Services. We also aggregate and analyze consumer information that we collect through our Services and from conversations with our customer service representatives to identify trends, which inform how we change and grow.

To Support Information Security and Debugging. We may use information about you and your use of the Services to detect security incidents, protect against malicious, fraudulent, or illegal activity, and improve the security of our Services. We may also use this information to debug our Services to identify and repair errors that impair existing intended functionality.

In Connection with a Dispute. We may use personal information to prosecute or defend against claims in court and other dispute resolution forums.

Uses of Device Information. We generally use this information for your convenience and to improve our Services. For instance, we may use it to: (i) remember your personal information so that you do not have to re-enter it; (ii) provide you with customized content and information, including advertising; (iii) monitor the effectiveness of our Services; (iv) monitor aggregate metrics such as total number of visitors, traffic, and usage patterns; or (v) diagnose or fix technology problems.

3. Why and How We Disclose Your Information

At Your Direction. We may disclose your information when you specifically direct us to do so.

With Service Providers. We may disclose your information with service providers, including, but not limited to, payment processors, technology and infrastructure providers, digital communications services, commercial data and market research analysts, consumer report providers, auditors and accountants, physical site security providers, IT security and bug-fix partners, artificial intelligence (AI) and/or machine learning (ML) providers, customer service providers, other partners, and other providers who perform services for and on our behalf.

With Law Enforcement, Courts, or Government Agencies. We may disclose your information as necessary to respond to legal process or to regulatory authorities (e.g., pursuant to a subpoena, warrant, investigative demand from law enforcement, regulators or others, or national or international security letters); to investigate, prevent, or take action regarding suspected or actual illegal activities (including fraud or stalking), and security or technical issues; to respond to or participate in commercial disputes (e.g., lawsuits or investigations); or to protect against fraud, claims, or other liability or harm to you, us, or others.

4. Selling or Sharing Your Data

The Company has not sold or shared (as those terms are defined under applicable law) your personal information in the past 12 months. The Company has no actual knowledge that it has sold any personal information of consumers under 16 years of age.

5. How We Protect Your Information

Safeguards. We use commercially reasonable physical, electronic, administrative, and procedural safeguards to preserve the integrity, confidentiality, and security of all personal information collected through the Site and the Services. However, no security measure, system, or control is infallible. Therefore, like all businesses, we cannot guarantee that our Site or Services are invulnerable to attack or misuse.

Your Role. You have a major role in the security and privacy of your own information. For example, you should not provide us with personal information that we do not request. Additionally, you are responsible for controlling access to any personal computing device through which your information may be stored or accessed. You are also responsible for safeguarding any passwords or other log-in credentials that may be used to access your information. We recommend that you log out of any account when you are done using it.

Third Parties. Please remember to review the privacy settings and security policies of third-party sites and services that you use. We are not responsible for the privacy or security measures of any third party.

Incident Response. In the event that the security of any personal information under our control is compromised, we will take reasonable steps to investigate and mitigate the situation, including, when appropriate, notifying those individuals whose information may have been compromised and taking other steps in accordance with applicable laws and regulations.

6. Opting Out of Our Communications

If you are interested in no longer being contacted by the Company, we want to facilitate that. You may click on the unsubscribe links in our marketing emails and request removal from our mailer list at [email protected].

7. Supplemental State Notice (for California, Colorado, Connecticut, Oregon, Texas, Utah, and Virginia residents)

Our Collection of Personal Information. We may collect the following categories of personal information:

• Personal identifiers, such as your name and email address
• Internet or other electronic activity information, such as browsing history and information related to your interaction with an internet website application
• Geolocation data, such as physical location and your account log-in

Categories of sources from which we collect these categories of personal information about you:

We collect the categories of personal information listed above from the types and categories of sources described above in Section 1 of this Privacy Policy.

Categories of third parties to which we may disclose these categories of personal information:

We may disclose the categories of personal information listed above to the categories of third parties described above in Section 2 of this Privacy Policy.

We have disclosed these categories of personal information above for a range of operational purposes, including for business purposes such as:

• Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards.
• Helping to ensure security and integrity to the extent the use of personal information is reasonably necessary and proportionate for these purposes.
• Debugging to identify and repair errors that impair existing intended functionality.
• Performing services on behalf of the business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, providing analytic services, providing storage, or providing similar services on behalf of the business.
• Undertaking internal research for technological development and demonstration.
• Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device.

We do not sell or share (as those terms are defined under applicable state law) your personal information or sensitive personal information. We have no actual knowledge that we have sold any personal information of consumers under 16 years of age. We also do not use your personal information or sensitive personal information for purposes of targeted advertising or for profiling in furtherance of decisions that produce legal or similarly significant effects (as those terms are defined under applicable state law).

Your State Specific Rights.In addition to Company’s general privacy policies, users that are residents of California, Colorado, Connecticut, Utah, or Virginia may have specific rights. They include:

• The right to request that we disclose what personal information we collect, use, and share about you during the preceding 12 months free of charge, unless subject to a legal exception.
• The right to opt-out of sale or sharing to third parties of your personal information, or targeted advertising.
• The right to request that we correct inaccurate personal information.
• The right to request that we delete personal information collected or maintained by us about you, unless subject to a legal exception.
• The right to know what personal information or sensitive personal information is sold or shared and to whom.
• The right to limit use and disclosure of sensitive personal information.
• The right to designate an authorized agent to make a request under state law on your behalf.
• The right to be notified that we collect personal information about you, and the purposes for which the information will be used.

Non-Discrimination. We will not discriminate against you for exercising your state specific privacy rights. Unless permitted by law, we will not:

• Deny you goods or services;
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
• Provide you a different level of quality of goods or services; or
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Retention of Your Information. We retain the personal information and sensitive personal information we collect as described in this Privacy Policy for as long as you use our Services or as necessary to fulfill the purpose(s) for which it was collected, provide our Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws.

How to Make a Privacy Request. You may exercise any of your rights outlined above by emailing [email protected].

Only you or a duly authorized agent (if permitted by state law) may make a request on your behalf. If you are an authorized agent making a request on behalf of a resident of a state where it is permitted, please email us at [email protected]. To process your request, our team may require identity verification. In some instances, we may decline to honor your request where an exception under law applies.

You have the right to make a free request twice during any twelve-month period. The request must:

• Provide sufficient information for us to reasonably verify that you are the person, or an authorized representative of the person, about whom we collected the personal information or sensitive personal information; and
• Describe your request with sufficient detail for us to properly understand, evaluate, and respond to the request.

Submitting a request does not require you to create an account with us. However, for your safety and the safety of your information, we cannot fulfill a request to provide or delete personal information or sensitive personal information if we cannot verify your identity or authority to make the request and confirm that the personal information or sensitive personal information relates to you or an individual for whom you are an authorized agent. We may require additional verification before deleting or disclosing particularly sensitive information. We will only use the verification information you provide for the purpose of verifying your identity or authority to make the request.

We do not charge you a fee to process or respond to your verifiable consumer request, unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

You may have the right to appeal our decision with regard to a request. You can do so by contacting us at [email protected].

8. Updates and Questions

This policy is updated regularly. We will promptly make any changes available here. Changes will be effective as soon as the updated policy is posted unless otherwise stated. If you have a question about this policy you may contact us at [email protected].

This policy was last modified on August 1, 2024.