Privacy Policy
Last updated: May 2026
1. Introduction
Openhouso ("we," "us," "our") respects your privacy. This policy explains what data we collect, how we use it, and your rights. Openhouso is operated by Vyrabyte LLC, headquartered in Tampa, Florida, and serves licensed real estate agents and consumers across all 50 United States and the District of Columbia.
2. Information We Collect
Agent Accounts
When you create an account, we collect: full name, email address, phone number, brokerage name, real estate license number, state, and county. You may optionally provide a profile photo and additional business details.
Buyer Sign-Ins
When a buyer signs in at an open house via the QR code, we collect: full name, phone number, email address (optional), whether they are currently represented by a real estate agent, their agent's name (if represented), optional feedback about the property, and optional vendor opt-in consent. Buyers do not need an account to sign in.
Vendor Accounts
When a vendor registers, we collect: company name, service type, email, phone, website, business description, license/registration numbers, and service counties.
Usage Data
We collect standard usage data including pages visited, browser type, approximate geographic location (via IP address), and device information through Google Analytics and Vercel Analytics. IP-based geolocation is used to auto-detect your area for a better browsing experience; we do not store raw IP addresses beyond standard server logs.
3. How We Use Your Data
- Agent data: To operate your account, facilitate open house coverage matching, send notifications, and generate seller reports.
- Buyer sign-in data: To notify the host agent of new leads in real time via email and SMS, to generate seller reports for the listing agent, and to display leads in the host's dashboard. Buyer data is shared with vendors ONLY when the buyer explicitly opts in.
- Vendor data: To display your listing in the vendor directory, facilitate sponsorships, and share opted-in buyer leads.
- Usage data: To improve Platform performance, fix bugs, understand feature usage, and auto-detect your geographic area.
4. Consent and Opt-In
Buyer data is consent-based. When a buyer signs in at an open house:
- Their name, email, and phone are shared with the host agent and listing agent for that specific open house — this is disclosed on the sign-in form.
- Vendor sponsors are displayed with an opt-in checkbox. The checkbox is never pre-checked. Buyer data is shared with a vendor only if the buyer actively checks the box.
- The sign-in form includes a disclosure statement: "I understand the host agent at this open house represents the seller."
5. Who Sees Your Data
Buyer sign-in data is shared only with: (a) the host agent who hosted that specific open house; (b) the listing agent who posted the open house; and (c) any vendor sponsor the buyer explicitly opted in to. We do not sell, rent, or trade personal information to third parties for marketing purposes. We do not share buyer data with any party the buyer has not consented to.
6. Data Storage and Security
Data is stored in Supabase (hosted on AWS in the US-East-1 region) with row-level security enabled on every table. Authentication uses industry-standard bcrypt password hashing and JWT tokens. All data in transit is encrypted via TLS. We implement reasonable administrative, technical, and physical security measures but cannot guarantee absolute security of any information transmitted over the internet.
7. Third-Party Services
We use the following third-party services that may process your data:
- Supabase: Database and authentication (AWS US-East-1)
- Vercel: Application hosting, analytics, and geolocation
- Resend: Transactional email delivery
- Twilio: SMS notifications
- Stripe: Payment processing for vendor subscriptions
- Google Analytics: Anonymous usage tracking
- Cloudflare: DNS, CDN, and bot protection (Turnstile)
8. Data Retention
Agent and vendor account data is retained for the lifetime of your account and deleted within 30 days of account closure upon request. Buyer sign-in data is retained for 24 months from the date of the open house event and then automatically deleted. Usage analytics data is retained per Google Analytics standards (up to 26 months). Payment records are retained as required by applicable tax and financial regulations.
9. Your Rights
Regardless of your state of residence, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data (subject to legal retention requirements)
- Export your data in a portable format
- Opt out of non-essential data sharing
To exercise any of these rights, contact us at info@openhouso.com. We will respond within 30 days.
10. California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: You may request the categories and specific pieces of personal information we have collected about you.
- Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
- Right to Opt Out of Sale: We do not sell personal information. If this changes, we will provide a "Do Not Sell My Personal Information" link.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
To submit a CCPA request, email info@openhouso.com with the subject "CCPA Request."
11. Other State Privacy Laws
Residents of Colorado, Connecticut, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia may have additional privacy rights under their respective state laws. We honor all applicable state privacy rights. Contact us to exercise your rights under your state's law.
12. Cookies
We use essential cookies for authentication session management (required for the Platform to function). We use analytics cookies (Google Analytics, Vercel Analytics) that can be blocked by your browser without affecting Platform functionality. We do not use advertising or tracking cookies.
13. Children's Privacy
Openhouso is not intended for individuals under the age of 18. We do not knowingly collect data from minors. If we learn that we have collected personal information from a child under 13, we will delete it promptly in accordance with COPPA.
14. International Users
Openhouso is designed for use within the United States. If you access the Platform from outside the US, you do so at your own risk and are responsible for compliance with local laws. Your data will be processed and stored in the United States.
15. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users and posted prominently on the Platform. The "Last updated" date at the top reflects the most recent revision.
16. Platform Operator — Vyrabyte
Openhouso is operated by Vyrabyte, a technology and marketing company based in Tampa Bay, Florida. Vyrabyte is the data controller and platform operator for purposes of this Privacy Policy. Vyrabyte is not a real estate brokerage and does not process personal data for real estate transaction purposes. For privacy inquiries, contact privacy@openhouso.com.
17. Contact
For privacy questions, data requests, or to exercise your rights under any applicable privacy law, contact us at privacy@openhouso.com or info@openhouso.com.