Privacy policy

Netanel Real Estate is a real estate brokerage licensed in Maryland and the District of Columbia, owned by broker Aya Netanel, at 17604 Parkridge Dr, Gaithersburg, MD 20878. When this policy says “we” or “us,” it means Netanel Real Estate.

It covers netanelrealestate.com and everything on it: our listing pages, Second Opinion, Start my listing, the private showing pages (Visite), the client workspace, and our listing phone line. Visite and some of the site’s tools are software made by Rainbow Lily Studio, Aya’s software company. The information in them stays in Netanel Real Estate’s own systems.

If you sign a listing or buyer agreement with us, that agreement applies too.

What you send us

• Contact, home value and savings forms: your name and phone, your email on most of them, and what you tell us, such as the home’s address, your timeline, a price, or your message.
• Second Opinion: the analysis runs in your own browser. We receive nothing unless you press Send. Then we receive your name, email, phone if you add one, and the report you chose to send.
• Start my listing: the home’s address and expected price, the package you chose, your name, email and mobile number, and your note. To help prevent fraud, we compare the name you give with the owner on public property records and keep only whether they match.
• Showing and disclosure requests: your name, email and phone. Agents also give their brokerage and license details; buyers can tell us whether they’re pre-approved. After a showing, agents can leave feedback for the seller. When a disclosure package is downloaded, we note it.
• Identity check, if you start a listing online: we ask you to verify your identity with Stripe Identity. On your phone you photograph a government ID and take a selfie; Stripe checks that the ID is genuine and compares your face with its photo (a biometric check), and asks for your consent first. Stripe keeps the photos and what it reads from the ID. We receive whether the check passed and whether the name on the ID matches the name you gave. If you’d rather not, Aya can check your ID another way.
• Rental applications: if you apply for a home we list with Rental Support, your name, email and phone, the application you upload, and a credit report you ordered yourself if you add one. We ask you not to include your Social Security number, and our site turns away a PDF where it finds one. Only Aya sees your application; the landlord gets her summary, not your files.
• Offers sent through our site: the agent’s name, contact details, brokerage and license, the offer’s terms, and the documents the agent uploads, such as the signed contract and the pre-approval or proof of funds.
• Free account on a home’s page (to see Glinda’s cost breakdowns): your name, email, phone if you add one, and the home you were looking at. We email you a link, and opening it keeps the breakdowns open in that browser.
• Emails, texts, calls and voicemails you send us.

If you’re our client

In your private workspace: your sign-in email, the details of your home (including the listing information for Bright MLS), the photos, videos and documents you upload, your messages with Aya, and your payment records.

Card payments

Card payments are made on Stripe’s secure page. We never see or store your card number. We keep the amount, the date, whether it went through, and Stripe’s reference number for it.

What’s collected automatically

• How many times each listing page was viewed each day, as a total. Nothing about who viewed it.
• Visit counts from Vercel Web Analytics: which page was viewed (its address, without anything after the “?”), the site that sent you, your country and region, and your device and browser type. It uses no cookies; a visitor is a scrambled code that resets every day, so visits can’t be tied to you or followed across days or other websites.
• On some forms, to stop spam and abuse: a scrambled, one-way code made from your internet (IP) address, never the address itself.
• Our web host and database provider keep short-lived technical logs, such as IP address and browser type, to run the site and protect it from attacks.

That’s all. We don’t use ad pixels, and we don’t track you across other websites.

• To answer you and to help you buy, sell or rent a home: preparing and marketing a listing, scheduling showings, and getting to settlement.
• To send you what you asked for, such as a home value, a report, a disclosure package, a sign-in link or a receipt.
• To follow up about your inquiry. Reply “unsubscribe” to any follow-up email and they stop.
• To meet our duties as a licensed brokerage, keep the records the law requires, and protect against fraud, spam and misuse.

We don’t use your information for anything else, and we don’t build advertising profiles.

AI helps us work faster and keep our fees low. Aya personally handles all advice, pricing and negotiation.

• Our office assistants help sort the office’s email, texts and website inquiries, keep files on track, and draft replies and reminders for Aya. They can also read what’s in client workspaces, such as messages, documents, offer terms and showing feedback, without names or contact details.
• Before a message goes to an AI service, email addresses, phone numbers and account numbers are replaced with placeholders such as “[Client 1]”, and so are the names and companies of people already in our records. So are the details that point to your home: its street address however it’s written, the street on its own, its ZIP code, its MLS, tax and parcel numbers, and links to its page on our site or others. Our record numbers are replaced too, with codes that change every time, so separate requests can’t be matched up. The real details are put back only on our side. When it’s running, a privacy helper on our own computer, or on a private cloud computer we rent when ours is off, looks for other names too. The city and the home’s features (like bedrooms or the price) can still go along, because the work needs them.
• When our research assistant looks up a home’s public records (recent sales, records, history, what’s nearby), it works in a separate session that sees only the address, the home’s physical facts (like bedrooms and year built) and the question. Nothing about you, your plans or why it was asked goes with the address, and searching the web happens only in that separate session.
• Emails, texts and website messages about personal matters, such as health, a divorce, a death in the family, money trouble, safety or legal trouble, are held for Aya and not sent to an AI service.
• In the client workspace, AI tools help write listing descriptions and summaries of your file, answer questions about it, edit and virtually stage photos (virtually staged photos are always labeled), and read inspection reports. They receive the home’s details and what you type for that task, with the address, your name and the other details above replaced.
• Inspection reports and old listing sheets are read as text only. Before an AI service reads one, our server takes out the address, names, phone numbers, emails, and report, MLS, tax and parcel numbers, so what it reads doesn’t name the home or the people in it. The photos in a report are never sent. Photos of pages aren’t accepted, because they can’t be cleaned first.
• Glinda’s studio sends a room photo you add to OpenAI only when you ask for a renovation concept and confirm. Your browser removes the photo’s location data first, and you can blur anything personal in it (mail, family photos, an alarm keypad) on your own device before it’s sent. No address goes with it, and an address, phone number or email typed in your design notes is taken out.
• Glinda’s Wand on our listing pages shows a room of a home in other styles, made by AI from that home’s listing photos, only when the seller agreed. The pictures are made on our own computer, on the private cloud computer we rent when ours is off, or with OpenAI. They’re labeled as made with AI, and Aya checks each one before it shows.
• The AI services we use are Anthropic (Claude) and OpenAI, under business terms that don’t allow them to use our information to train their AI models.

• We text you only if you agreed to it: by giving your number on a form that says we may text you, by asking us to, or by texting us first. Our texts are about your inquiry, your home, your showing or your transaction. We don’t send marketing texts.
• Message frequency varies. Message and data rates may apply. Reply STOP at any time to stop texts, START to start them again, or HELP for help.
• No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not shared with any third parties.
• Our listing line is the phone number on our listings. Calls aren’t recorded. If you leave a voicemail, Twilio, our phone company, records and transcribes it, and it’s emailed with your number to Aya, or to the seller if the seller takes the calls for that home. Our call logs keep only the last four digits of your number. Texts to the line are kept like any other text to our office.

We never sell your information or share it with other businesses for their own use. We share it only:

• To do what you asked. A showing request, with your contact details, goes to the seller of that home and their broker, so they can confirm the time, and so does any feedback you leave after the showing. A call or voicemail to the listing line goes to the seller if the seller takes the calls for that home. A disclosure request goes to the listing broker. An offer goes only to the listing broker and the seller, and is never shown to other buyers or their agents.
• To complete your sale or purchase, as you direct: the other side’s agent, the title or settlement company, your lender, inspectors, appraisers, and the homeowners or condo association.
• When we list your home. Its details, photos and description go to Bright MLS, and from there to public listing websites. That’s the point of listing, and we go over what will appear before it goes live.
• With the companies that work for us (listed below), only so they can do that work.
• When the law requires it, such as a subpoena or a regulator’s request, or to protect against fraud or keep someone safe.
• If the business changes hands, with the new owner, under this policy’s promises.

The companies that work for us

Vercel

Hosts this website, and counts visits without cookies (Vercel Web Analytics).

Supabase

Our database, private file storage, and the client workspace sign-in, including sign-in emails.

Google Workspace

Our office email.

Resend

Sends our other emails, such as workspace invitations, showing confirmations and disclosure packages.

Postmark

Receives email for our office assistants.

Twilio

Our texts and the listing phone line, including voicemail recording and transcription.

Stripe

Card payments: Stripe receives your email address (for the receipt), the home’s street address, your package and the amount. Also the ID check for listings started online (Stripe Identity).

Anthropic and OpenAI

The AI services described in How we use AI.

RunPod

A private cloud computer for our privacy helper and for Glinda’s Wand pictures, used when our own computer is off.

DocuSign

Electronic signatures on agreements and disclosures.

ARELLO

Checks an agent’s license number, state and last name against state license records.

Maryland SDAT and DC property records

Public records services. They receive a home’s address, to help fill in its listing details and check who owns it.

U.S. Census Bureau and Zoneomics

Look up a home’s location and zoning from its address, for the client workspace.

Google Maps Platform

Works out the driving distance from our office to a listed home, from the home’s address only, to plan lockbox visits.

Google Fonts

The fonts on our pages. Your browser loads them from Google, which sees your IP address.

• The public pages set no cookies and carry no ad trackers. Visit counts (Vercel Web Analytics) use no cookies or browser storage.
• If you open the link for a free account, one cookie keeps Glinda’s cost breakdowns open in that browser for six months. It holds only a random code. Clearing your browser’s cookies for this site removes it.
• Signing in to the client workspace sets cookies that keep you signed in, and one that remembers whether the side menu is open.
• Some tools save things in your own browser, such as your Second Opinion draft so you don’t lose your work, or a note that you’ve already seen a tip. They stay on your device. Clearing your browser’s data for this site removes them.
• Listing pages may include videos from YouTube (in its privacy-enhanced mode) or Vimeo (with do-not-track on), and 3D tours from Matterport. Those companies may set their own cookies when they load.
• Because we don’t track you, there’s nothing for Do Not Track or Global Privacy Control to switch off. We already work the way they ask.

• Transaction files, such as agreements, disclosures, offers and payment records: as long as Maryland and DC real estate rules require brokers to keep them.
• Showing requests and their history: deleted 30 days after we close the home’s showing page, once it sells or comes off the market. A summary, including agents’ feedback, stays with the seller’s records.
• Disclosure package links we email you stop working after 14 days.
• Rental applications: deleted 90 days after they arrive, sooner if you ask us.
• Free account links stop working after 7 days if they aren’t opened. Once opened, they work in that browser for six months. Your account details are kept like any other inquiry, until you ask us to delete them.
• ID check photos stay with Stripe. Ask us and we’ll have Stripe delete them, unless the law requires us to keep a record of the check.
• Voicemails stay in our phone account until we delete them. The listening links in our own emails stop working after 60 days.
• Inquiries and messages: as long as we need them to help you and to keep our records. You can ask us to delete them at any time.
• A record of what our assistants sent to AI services, with names and contact details already replaced by placeholders, so we can check that the privacy filter works: 30 days.
• Spam protection on our website forms: scrambled codes made from your internet address and from your email or phone, kept apart from your message and never stored with the address, email or phone themselves. They only limit repeated sends, and they’re deleted after two days.

Wherever you live, you can ask us to:

• send you a copy of the information we have about you;
• correct anything that’s wrong;
• delete it, except what the law requires us to keep, such as transaction records;
• stop emails (reply “unsubscribe”) or texts (reply STOP).

Email office@netanelrealestate.com or call (301) 775-0175. We may ask a question to make sure it’s you. We answer within 45 days, usually much sooner, and asking never changes how we treat you.

• Every page and connection is encrypted.
• A client workspace opens only when Aya invites you or when you start a listing on our site. You sign in with one-time links, and its files are stored privately.
• Only Aya, the people this policy describes (such as the seller, for a showing request), and the services that work for us can reach your information.
• No system is perfectly secure. If you notice anything wrong, please tell us right away.

Wire fraud warning: Netanel Real Estate will never send you wiring instructions by email or text. Before you wire any money, call your title company at a phone number you already know to confirm the instructions.

Our services are for adults. We don’t knowingly collect information from anyone under 18. If you think a child has sent us information, contact us and we’ll delete it.

When we change this policy, we update the date at the top. If a change affects information we already have, we tell our clients before it takes effect.

Back to the home page