Privacy Policy

Last updated October 29, 2026

Mattingly Media LLC operates Tavi's apps and software services. This policy explains the information handled through those services and our public website. Contact ceo@mattinglymedia.com with privacy questions or requests.

1. Information we handle

• Account and sign-in: email address, name, optional provider profile image, account identifiers, verification information and sign-in-provider information, including protected authorization tokens used for sign-in and removing provider access. Email/password authentication is handled through Supabase Auth; Google or Apple supplies the identity information used when you choose that sign-in method.
• Sale and contact information: property address, property details, names, emails and phone numbers you or another authorized participant provide, questionnaire answers, sale progress, requests and shared updates. Another Seller or authorized professional may provide your information to involve you in a sale.
• Files and signatures: selected photos, videos, documents, tour links, their filenames and technical metadata, signed documents, signing events and audit evidence. Original uploaded files may retain embedded metadata, including location information already present in a photo or video.
• Device and security information: installation identifier, notification token and permission status, platform, app and operating-system version, device label, session information, IP address, browser/user-agent information and security-event timestamps.
• Support and communications: messages and reply contact details you provide, account or sale context, invitation and service email delivery information, and records needed to respond to you.

The Seller app uses your selected files and notification permission for the relevant features. Entering a property address processes that property's location; it does not require access to your phone's GPS. Signing in with Google does not connect your Gmail inbox.

2. How we use information

We use information to verify and protect accounts; determine property service eligibility; connect authorized people to the correct sale; save and synchronize answers, files and progress; prepare and execute requested documents; send account, invitation, signing and service communications; provide device notifications when permitted; respond to support; prevent misuse; and meet legal and recordkeeping obligations.

Shared questionnaires are visible to and editable by connected Sellers. Each person's signatures remain their own. Public listing material is used and distributed through the listing workflow you authorize, separately from private account information.

3. Who receives information

• Authorized sale participants and staff: connected Sellers, assigned real estate professionals and Tavi staff receive information appropriate to their role in the sale or support request.
• Hosting and authentication providers: Cloudflare hosts application services, workflow state and file storage; Supabase provides authentication and database services. Apple and Google process the information needed for their selected sign-in and device-notification services.
• Signing, email and address services: BoldSign processes document packets, signer names/emails, form values and signing evidence. Email delivery providers receive addressees and message content needed to send service emails. Google Places processes property-address searches and location information.
• Brokerage and listing services: the licensed brokerage and professionals identified in your separate agreements receive the transaction records they need. Authorized listing content may be shared with the listing and marketing destinations used for your sale.
• Legal requirements: information may be disclosed when required by law, a valid legal process, or to protect legal rights and address misuse.

Mattingly Media LLC operates the software. A brokerage identified in your sale agreements, including LPT Realty, LLC where applicable, has its own professional and recordkeeping responsibilities. Its separate privacy notices may also apply to information it holds.

4. Device and website storage

The apps keep sign-in state, appearance preferences, drafts and cached sale or document information on your device so their features can work. The web app uses browser storage for sign-in and the purpose of an interrupted account flow. Signing out and deleting your account have different effects; account deletion removes account-specific local data when the app next confirms completed deletion on that device. Copies on a device that is offline or has not reopened the app may remain until it reconnects and checks. You can also remove local app data through your device settings.

Our websites and selected providers may use necessary browser storage and receive ordinary connection information. The marketing website also loads presentation resources, including Google Fonts. Cloudflare Web Analytics measures website visits and page performance using browser, device and request information so we can understand and improve the site. Your browser and device settings control storage and permissions. Third-party sites and services you open have their own policies.

5. Retention and required transaction records

We retain ordinary account and service information while needed to provide the requested service. When an account is deleted, we remove the sign-in account and associated personal account information that does not need to remain for a legal obligation or a legitimate, specific retention purpose.

After deletion, minimal technical retirement records remain in our existing application storage to prevent delayed requests from recreating deleted personal data or reconnecting a removed account. These records use derived account identifiers or an account-retired flag rather than email addresses, credentials, messages or uploaded file contents. We retain only the minimum information needed for that protective purpose.

Required transaction files, executed agreements, disclosures, signed PDFs and evidence of who signed may need to remain with the responsible brokerage even after account deletion. For Kentucky transactions, 201 KAR 11:121 requires the principal broker to preserve required transaction records confidentially for five years after the transaction closes or fails. Other applicable recordkeeping requirements or an actual legal hold may require a different or longer period.

Short-lived operational logs are kept separately for security and troubleshooting. Under our current launch configuration, authentication and database API logs expire after one day, and application-server diagnostic logs expire within seven days. These logs do not keep your deleted account active. Our current authentication/database plan does not include scheduled project backups. Any provider-managed recovery or security copies follow the provider's retention cycle rather than being individually rewritten when a live record is deleted. An actual legal hold may require specific evidence to remain longer.

This transaction-record requirement is not a five-year retention rule for every profile, unused draft, upload or support message. We limit retained information to the records and purposes that justify keeping it, restrict access, and remove it when that justification ends. Deleting one account does not delete another person's account or their required shared transaction records.

6. Account deletion

1. Open Settings → Delete account in Tavi, or use taviagent.com/delete-account from any browser.
2. Sign in to the existing account and confirm the account displayed. If needed, use the existing password-recovery or provider sign-in method.
3. Submit the request. The receipt shows that deletion was requested, its reference and the expected completion date. We process it within seven days and email you when account removal is complete.

Removal ends access through that account and removes personal account data that need not be retained. We address the applicable sign-in-provider access and service-provider copies as part of fulfillment. Required transaction and signing evidence remains subject to the retention rules above. Account deletion does not cancel a sale, revoke a completed signature, or terminate a separate agreement.

If you cannot access your account or need help with a privacy request, contact ceo@mattinglymedia.com. We may ask for information necessary to verify the request and protect another person's records.

7. Your choices and requests

You can manage notification permission in your phone's settings, choose which files to upload, and use the supported sign-in and password-recovery controls. To request access to, correction of or deletion of personal information, or exercise a right available under applicable privacy law, email ceo@mattinglymedia.com. We will verify and respond as applicable to your request and the records involved.

Tavi is designed for people managing real estate transactions, rather than for children. Contact us if you believe a child has provided information through the service.

8. Protection, processing locations and changes

We use authenticated access, role and sale permissions, protected credentials and encrypted network connections to help protect information. No service can guarantee absolute security. Tavi and its providers may process information in the United States and other countries where they operate.

We may update this policy as the service or requirements change. The updated date appears above, and we provide notice of material changes as required by law. Privacy contact: ceo@mattinglymedia.com, Mattingly Media LLC.