Privacy Policy

Last updated: February 11, 2026

Trolto ("we," "our," or "us") operates the website www.trolto.com and the Trolto real estate marketing platform (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

Account Information

When you create an account, we collect your email address and password. During onboarding, we may also collect:

• First and last name

• Phone number

• Professional role (e.g., real estate agent, broker)

• Real estate license number (DRE number)

• Headshot and brand logo images

• Instagram business account connections

Property & Content Data

When you use our platform to create marketing materials, we collect property details you provide, including addresses, listing descriptions, photos, videos, and any content generated through our tools.

Lead & Contact Data

Our platform may capture leads on your behalf from listing websites and agent pages you create. This data may include the lead's name, email address, phone number, and message. Leads captured through your listing websites are automatically added to your contacts within the platform.

Usage & Analytics Data

We automatically collect certain information when you visit our website or use our Service, including:

• IP address and browser user agent

• Pages visited, time spent, and referral source

• Device type and operating system

• Session and visitor identifiers

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service

• Process transactions and manage your subscription

• Generate marketing content (videos, listing websites, social media posts) on your behalf

• Capture and organize leads from your marketing materials

• Send you service-related communications and updates

• Analyze usage patterns to improve our platform

• Measure the effectiveness of our advertising campaigns

3. Third-Party Services

We use the following third-party services to operate and improve our platform. Each service may receive certain data as described below:

Supabase — Cloud database and authentication. Stores your account data, content, and analytics securely.

Stripe — Payment processing. Handles your billing information and subscription payments. We do not store your credit card details directly.

OpenAI — AI content generation. Property descriptions and marketing copy you generate may be processed through OpenAI's API.

Google Analytics — Website analytics. Collects anonymized browsing data to help us understand how visitors use our site.

Meta (Facebook) Pixel — Advertising analytics. Tracks conversions from our advertising campaigns.

Google Maps — Location services for property address lookups.

4. Cookies & Tracking Technologies

We use cookies, local storage, and similar technologies to operate our Service and measure advertising performance:

Essential cookies — Required for authentication and core platform functionality.

Analytics cookies — Google Analytics cookies to understand site usage patterns.

Advertising cookies — Meta Pixel cookies (_fbc, _fbp) and Google Ads cookies for conversion tracking and audience measurement.

Local storage — Used to store session identifiers, visitor IDs for analytics, and temporary editor state.

5. Data Security

We implement appropriate technical and organizational measures to protect your information. All data is stored in secure cloud infrastructure with row-level security policies ensuring you can only access your own data. Passwords are hashed and never stored in plain text. Payment information is handled exclusively by Stripe, a PCI-DSS compliant payment processor.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

7. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• Access — Request a copy of the personal data we hold about you

• Correction — Request that we correct inaccurate or incomplete data

• Deletion — Request that we delete your personal data

• Portability — Request your data in a portable format

• Opt-out — Opt out of marketing communications at any time

To exercise any of these rights, please contact us at support@trolto.com.

8. California Privacy Rights

If you are a California resident, you have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources from which your information is collected, the business purpose for collecting your information, and the categories of third parties with whom we share your information. You also have the right to request deletion of your personal information and to opt out of the sale of your personal information. We do not sell your personal information.

9. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child, we will take steps to delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Trolto

Email: support@trolto.com

Website: www.trolto.com