This policy explains how HD Premier, Inc. handles personal information on onestopagent.com, in the One Stop Agent platform, and on the agent websites we host. For lead enquiries, the agent or brokerage receiving the enquiry decides how the lead is used; we process it to operate their site and chosen delivery connections.
Clauses 01–03Collection and use
What we collect
- Accounts and requests. Name, email, brokerage, license number, role, plan, market, account preferences, authentication identifier, and the details you submit when asking to start service or get support.
- Websites and listings. Brand settings, domains, copy, photographs, documents, drafts, published pages, listing facts, areas served, and any listing email or attachment you send to the platform.
- Enquiries. A visitor may provide a name, email, phone number, message, showing date, open-house response, and the page or campaign that led to the form. These details are visible to the relevant agent or brokerage and go to the delivery connections they enable.
- Billing and operations. Plan, subscription status, seat count, external billing identifiers, account actions, and an audit history. Stripe handles payment-card details when billing is enabled; we do not store a full card number.
- Limited technical records. Consent choice, aggregate page counts,
short-lived hashed-IP rate-limit keys, and operational or error logs. Public
agent-site counts store day, page path, and
weborqrsource—not a visitor identity.
How we use it
We use this information to open and secure accounts; build, host, publish and measure sites; create and review listing drafts; deliver enquiries; administer billing and MLS authorization; provide support; prevent abuse; diagnose errors; and meet legal, tax, security, and compliance obligations. When an AI drafting feature is enabled, the listing or site content needed for that draft may be sent to the configured model provider. A person must review the result before publication.
What we do not do
- No sale of personal information.
- No use of personal information for HD Premier’s own cross-context behavioral advertising.
- No advertising pixels or third-party marketing trackers on the marketing site.
- No use of leads or customer content to advertise One Stop Agent to someone else.
These statements describe HD Premier’s own use of information. A Meta Pixel that an account owner chooses to enable on a branded agent or property site is separate: Meta receives activity for that account owner’s measurement or advertising settings, as described below.
Clauses 04–06Storage and providers
Cookies and measurement
On onestopagent.com, one first-party cookie, osa-consent, records your
analytics choice for 1 year. Google Analytics 4 and, when configured, PostHog load
only after you accept; the default is declined, and declining does not change
how the site works. These providers may then set analytics cookies for page
measurement on the One Stop Agent marketing site.
The authenticated studio and signed preview or review flows use necessary
authentication and security cookies or tokens. They are not advertising
cookies. Public agent sites also keep aggregate, cookie-free page counts by
day, path, and web or qr source. Those counts include automated crawlers
and do not identify a person.
An account owner may enable Google Analytics 4 or the Meta Pixel on a branded agent or property site. Even when configured, the platform keeps both providers unloaded until that site’s visitor affirmatively chooses Allow analytics. After consent, the provider can receive page, browser, and device activity under its terms. Declining leaves the site available without either provider. A visitor can reopen Privacy choices on the site to change the stored choice.
Global Privacy Control overrides a prior local acceptance and keeps optional analytics off. The analytics control and provider scripts never render on an unbranded MLS version or in a verified Studio preview. Account owners remain responsible for any additional notice, consent, or opt-out duties that apply to their own use of a provider.
An agent site can also connect to Google Maps, YouTube, Vimeo, or Matterport when a visitor opens a map, hosted film, or tour. The account owner is responsible for any additional notice or consent those features require.
The analytics choice on a branded agent or property site is stored only in that
browser’s local storage as osa-tenant-analytics-consent-v1. It is not sent to
One Stop Agent as an account or lead record, and remains until the visitor
changes it or clears site storage.
Your consent preference — as set by this site
Who processes data
We disclose information only as needed to operate the service:
- to the agent, brokerage, team members, and lead destinations that the account owner enables, including email, webhook, Follow Up Boss, or kvCORE delivery;
- to infrastructure and delivery providers such as AWS for hosting, storage, content delivery, and email;
- to configured providers for authentication, billing, consented analytics, server-side error reporting, AI drafting, e-signature, domains, or MLS data. The product supports Clerk, Stripe, PostHog, Sentry, Anthropic, Dropbox Sign, and CoreLogic Trestle for those respective functions;
- to Google or Meta when an account owner enables its analytics identifier, and to Google Maps, YouTube, Vimeo, or Matterport when a site visitor opens an included map, hosted film, or tour;
- to authorities or another party when law requires it, to protect people or the service, or as part of a merger, financing, or sale with appropriate safeguards.
Service providers we select receive only the information needed for their function and are governed by agreements with us. Destinations, analytics, and media features selected by an account owner also operate under that owner’s settings and the third party’s terms. Sentry is configured not to attach request bodies, cookies, headers, or IP addresses to server error events.
Retention
Retention follows the record and why it exists:
- account, site, listing, lead, billing, and authorization records remain while needed to provide the account, complete the 30-day content-export period, or meet contractual, dispute, fraud, tax, and legal obligations;
- the marketing-site consent cookie lasts 1 year; a tenant site’s local analytics choice remains until the visitor changes it or clears site storage; and a hashed-IP lead rate-limit key expires after 1 minute;
- raw inbound listing email objects expire after 90 days; raw MLS payloads, when that service is active, archive after 90 days and expire after 3 years;
- structured application logs are retained for 30 days. Backups and provider copies may remain for their ordinary recovery and deletion cycles.
When a verified deletion request applies, we delete or de-identify the covered information unless we must retain it for one of the reasons above. Aggregated records that no longer identify a person may be retained.
Clauses 07–12Rights and governance
Your choices and rights
Depending on where you live, you may ask to know or access, correct, delete, or receive a portable copy of personal information, and to appeal a denied request. You may also opt out of a sale or sharing for targeted advertising. HD Premier does not sell personal information or use it for its own cross-context behavioral advertising. If your request concerns an account owner’s configured Meta Pixel, identify the branded site so we can route the request and contact that agent or brokerage as well. We do not discriminate for exercising a privacy right.
Use the operator contact below. Describe the request and the account, site, or enquiry involved. We verify requests using the email or account information already associated with the record and may ask for only the additional information reasonably needed to confirm identity and authority. An authorized agent may submit a request with proof of authority. If your request concerns an enquiry sent to a real estate agent, contacting that agent directly is usually the fastest route; you may also contact us.
California notice
This section also serves as our California notice at collection.
In the preceding 12 months, the categories we may have collected are identifiers; customer, professional, and commercial information; internet or network activity described above; communications and customer content; and inferences limited to drafts or recommendations requested through product features. Sources are you, your organization, visitors who submit forms, authorized MLS or integration providers, and service providers involved in a request.
We use and disclose those categories for the business purposes and to the recipient categories stated in this policy. HD Premier has not sold personal information or shared it for its own cross-context behavioral advertising. An account owner’s configured Meta Pixel is governed by the scoped explanation above. We do not use sensitive personal information to infer characteristics. California residents can exercise the access, correction, deletion, portability, opt-out, authorized-agent, and non-discrimination rights described above.
Security and location
The service uses access controls, tenant-level database isolation, encryption in transit, encrypted storage, private infrastructure, and audit records. No system is perfectly secure. Core application infrastructure is configured in the United States; a provider may process information in another location under its own contract and safeguards.
Children
The service is for real estate professionals and people contacting them, not children under 13. We do not knowingly collect personal information from a child under 13. Use the operator contact below if you believe a child submitted information.
Changes
We post changes here, move the effective date above when wording changes, and email account holders about material changes.
Version history
Version privacy-2026-09-02 is the first version identified in this public
record. No earlier public version is represented here. Future wording changes
will receive a new effective date and remain listed in this section. No counsel
review is claimed for this version.