Legal

Privacy Policy

Effective date: 21 July 2026 Last updated: 5 November 2026 Version: 2.22, replaces version 2.21 dated 4 November 2026

This Privacy Policy explains how Attarha Homes ("we", "us", "our") collects, uses, and shares information when you visit attarha.homes (the "Site") or contact us through it.

Why this version differs substantially from the previous one. The Site was rebuilt in July 2026 and moved off Wix onto our own infrastructure. The previous policy described Wix Forms, the Wix Privacy Centre, Google Analytics, and the Meta Pixel. None of those are used by the current Site. It also stated that we collect IP addresses, which we do not. This version describes what the Site actually does.

1. Information you give us

We collect what you choose to submit through a form on the Site:

name, email address, and (if you provide it) phone number
whether you are considering buying, selling, or both
a property address, if you enter one
how you heard about us, and any message you write
your answers to the buyer or seller questionnaire, if you complete one
an address you type into the address report tool, together with the coordinates it resolved to and the kind of device you used (phone, tablet or computer, never your browser's details). The full report needs a free account: if you are signed in, the lookup is linked to your account; if you are not, we record the address without anything that identifies you and ask you to sign up or log in, and if you then do, that lookup is linked to your account. We keep these to understand which areas people are researching and so our team can help with the addresses you are considering. We never store your IP address. We delete them after 90 days. Signed in, you can see the addresses you checked under My Account › Check Environment and remove any of them from that list; a removed address is no longer shown to you, but our record of the lookup is kept until the same 90-day deletion.

If you create an account, we also keep what you give us for it: your name, a display name, your email address, and your password (stored only as a one-way hash; nobody, including us, can read it back). Anything else on your profile is optional and only there if you add it: a photo, phone number, city, state, country, postal code, street address, LinkedIn address, a short biography, and your light or dark theme choice. None of it is public: the Site has no public member profiles, so your account details are visible only to you and to us. For security we also note when you signed in and the type of browser you used (its "user agent"), but not your IP address.

Our team may also make an account for you, for example when you are already our client: it holds only your name, email address and any contact details you gave us, and has no password until you choose one from the invitation we email you (or with "Forgot password"). If you do not want it, tell us and we will delete it.

If you sign up for market updates (the form at the bottom of every page), we keep your email address and, if you give it, your first name. Nothing is sent until you press the button in the confirmation email we send you. To stop that form being abused we also keep, for 90 days, a one-way code derived from your network address, never the address itself.

Notifications. If you have an account, the Site shows you notices in your account: a welcome, a warning when your password changes, word that a home value you asked for is ready, and (if you leave it switched on) new articles. You choose which ones you get under My Account › Notification Preferences.

We also record the consent you gave: the exact wording shown to you, the version of that wording, and the date and time. We keep this so that we can show what you agreed to, and so you can hold us to it.

2. Information collected automatically

We set cookies only if you ask us to. If you never use the "Cookie choices" link and never log in, we set none: visit every page on this site and your browser will hold nothing from us. Every cookie and storage item, with its lifetime, is listed in our Cookie Policy.

homes_consent is written only when you use the "Cookie choices" link in the footer to turn third-party services on or off, and all it holds is that choice.
When you log in or create an account, we set the cookies that keep you signed in: homes.session-token (your encrypted session), homes.csrf-token and homes.callback-url (which protect the sign-in itself), and homes_member, which only records that this browser has signed in here. They are strictly necessary for the account to work, they track nothing, and logging out removes the session.
homes_search_of is set only for a signed-in member with whom someone shared their home search, when they choose whose search to show, and holds only that choice.

Google sets its own cookies on the address report and the listings map. The search box on the address report uses Google to suggest addresses as you type. That means what you have typed is sent to Google, your IP address is visible to Google, and Google may set its own cookies in your browser. The "Map" view on our listings is a Google map, so opening it likewise shows Google your IP address and the area you are looking at, and lets Google set cookies. A video in a blog post comes from YouTube, which sets no cookie until you press play. These are the only places on the Site where that happens, and you can switch all of them off, see §3.

Our own site statistics, without cookies. We count visits ourselves so we know which pages are useful. For each page view we record the page (without anything after a "?"), the site you came from (its name only, e.g. google.com), the rough device type from your screen width, your browser's language, and, if you are signed in, your account. We set no cookie for this and store no IP address. A visitor is represented by a code computed from the network address and browser type that changes every day, so the same person cannot be followed from one day to the next, and the address itself is never written down. These statistics are not shared with anyone and not used for advertising. You can switch them off under "Cookie choices", and a Global Privacy Control signal switches them off automatically (§8).

Links with a tracking code. Some links we publish carry a short code (for example ?tc=spring-open-house) so we can tell which flyer, post or email brought people here. When you arrive through one, or from another website, we record the code, the page, the site you came from and the rough device type, with a random number that is new on every visit. No cookie is set, and nothing connects that visit to your later ones.

We do not run advertising trackers. There is no Google Analytics, no Meta Pixel, no advertising network, and no third-party tag manager on this Site. Nothing here follows you between sites or builds a profile of you.

We do not store your IP address. Our servers process your IP address transiently in order to deliver the page to you and to rate-limit form submissions, as any web server must. It is not written to our database and not retained in application records.

Browser storage. If you switch the Site between light and dark mode, tick steps in a guide, arrange the towns in the neighborhood comparison (their order and which are checked), or choose a layout, filters or a sort order on our listings, or choose how Recommended Properties is shown, that preference is stored in your own browser using local storage. If Google refuses to suggest addresses, the address field also notes that for the rest of your browser tab, so it does not ask again. None of this leaves your device and we cannot read it.

If you are signed in, your last layout, filters and sort order on the listings page are also saved to your account, so they come back on any device you sign in on. We use them only to show you that page the way you left it; they are deleted with your account.

Recommended Properties (folders). If you have an account, our team may save homes for you in folders under My Account › Recommended Properties, each with a note written for you, and may put documents there for you to download (for example a seller's disclosures or a comparison of recent sales). Only you, our team and any partner you invite (see "Your partner" below) can see them; the documents are stored on our own servers and are never shared through a public link. They are deleted with your account, and you can ask us to remove any of them at any time.

Your saved budget. If you save a budget (in My Account › Affordability or from the affordability calculator), we keep it on your account: your down payment, household income (and, if you itemise it, each kind, such as salary, a partner's salary, dividends and interest or stock market profit, with any tax rate you set yourself, your retirement, HSA or FSA and health care contributions, and your filing status), rent, monthly debts (and, if you itemise them, each kind: mortgage, home equity, auto, personal and student loans, credit cards, alimony and child support, others), your monthly living expenses (and, if you itemise them, each kind, such as utilities, health care, car insurance, transportation, subscriptions, restaurants, vacation, personal care and savings), whether a lender pre-approved you and for how much, and the loan term and rate. We use it only to show you what the homes we put aside for you would cost you; only you, our team and any partner you invite can see it, and you can delete it at any time under My Account › Affordability. A deleted budget no longer appears in your account; we keep a copy of it, with when it was deleted, until your account is deleted. If you are not signed in, the calculator's numbers wait in your browser tab while you sign up and are not sent to us until you are.

My Home Search. If you fill in My Account › My Home Search, we keep your answers on your account (what you are looking for, your budget and timing, your partner's name and contact details if you add them, and your priorities). We fill in what your account already knows to save you typing. Each step is kept on your account when you press Next. The first time you save the whole search, your answers reach us the way the buyer questionnaire does, with the consent you give there; each later save, and each step saved after that, updates what we have. Only you, our team and any partner you invite can see them. You can delete your saved search at any time; what already reached us stays with us, like any form you send.

Your partner. You can invite someone to share your home search: My Home Search, your Recommended Properties and your Affordability budget. We keep the email address you enter and send that person one email with a link (it works for 14 days). Nothing is shared until they accept, signed in with that email address. You choose whether they can only see it or can also change your My Home Search and budget, and you can change that or remove them at any time; they can also leave. They never see your personal info, password, My Files, Check Environment, My Properties or notifications.

Your home's value. If you ask us for the value of a home (Tools › Home value), we save the address as you type it before asking you to sign up, and link it to your account when you do; an address saved by someone who never signs up is not used. We look the address up with the US Census Bureau to find where it is. To value it we may send the address, and nothing about you, to RentCast, a property-data service, which returns an estimated value, an estimated rent and the house's public record (size, year built, recorded sales); we keep those figures and never the owner's name from that record. We combine them with the Federal Housing Finance Agency's public house price index to show how the value has moved. Only you and our team see it. You can remove a home from My Account › My Properties at any time; it is deleted with your account.

Files you upload. If you have an account, you can upload files for us under My Account › My Files (PDF, ZIP, 7z, ARC or pictures, each with a short note if you like). Only you and our team can see, download or print them; they are stored on our own servers, never shared through a public link, and are not opened or used for anything but helping you. You can delete any of them at any time (we keep a record that a file was uploaded or deleted, not the file); they are also deleted with your account. Please do not upload what the "Security" section asks you not to send.

Our web server keeps short-lived operational logs for security and troubleshooting. We are working to minimise what those contain.

3. Third parties the Site contacts

We keep these deliberately few, and we list them all:

Third party	What happens	Why
Our hosting provider	Serves the Site and processes traffic	Hosting
Wikimedia Commons, FRED (Federal Reserve Bank of St. Louis), Zillow, Realtor.com, BART	We fetch photographs, mortgage rates, town market figures (typical home value, days on market) and train commute times server-side, on a schedule. Nothing about you is sent and your browser never contacts them.	Content, rate, market and commute data
The MLS photo server	Our server fetches listing photos and passes them on, so your browser never contacts it.	Listing photos
Resend (email delivery, once our email sending is switched on)	Our server hands Resend each email we send you (the address, the message, and the name we address it to).	Delivering account, enquiry and market-update emails
US Census Bureau, FEMA, USGS, US Forest Service, EPA, HUD	When you use the address report tool (or ask for a home's value, Census only), we send that address to the Census Bureau to convert it into coordinates, then send those coordinates to the other agencies to retrieve the hazard data. All of this happens server-side, your browser never contacts them, and none of them is told your IP address or anything else about you. The map image is fetched by our server too, for the same reason, and so is the small map on each listing page.	The address report at `/tools/home-info`, and the small map on a listing
RentCast (property data), Federal Housing Finance Agency (house price index)	When a member asks for the value of a home and RentCast is in use, our server sends RentCast that address (never your name, email or IP address) and receives an estimated value, rent and the house's public record. The FHFA index is public data our server downloads. Your browser contacts neither.	Valuing a member's home (Tools › Home value)
Google, Facebook, Apple (sign-in, only if you choose it)	If you click "Continue with Google", "Facebook" or "Apple", your browser goes to that company to sign in, and it tells us who you are: an account identifier, your name, and your email address (Apple and Facebook let you withhold it). Nothing is sent to them unless you click one of those buttons.	Signing in without a separate password
Google (address autocomplete and validation)	On the address report's search box only, your browser contacts Google directly as you type, which discloses your IP address and the partial address to Google and lets Google set cookies. You can switch this off, see below.	Suggesting addresses so you do not have to type one in full
Google (listings map)	When you choose the "Map" view on the listings page, your browser loads the map from Google, which discloses your IP address and the area shown to Google and lets Google set cookies. You can switch this off, see below; the list and grid views do not contact Google. A listing page's "open in Google Maps" link contacts Google only when you click it.	Showing where our listings are
YouTube (Google; a video in a blog post)	When a blog post has a video, your browser loads YouTube's player from its privacy-enhanced domain (youtube-nocookie.com, which sets no cookie until you press play) and, on phones, the video's preview picture from i.ytimg.com; both disclose your IP address and the video to Google. You can switch this off, see below; you then see a link that opens the video on youtube.com only if you click it. Everything else on the blog (pictures, narrations, PDFs) comes from our own servers.	Showing the post's video

Switching off address autocomplete, the listings map and blog videos. Use the "Cookie choices" link at the bottom of any page. Switching it off stops your browser contacting Google and YouTube from your next page view onwards. The search box keeps working, you type the address in full, and the report is exactly the same, because the address is looked up through the US Census Bureau either way, not through Google. The listings page shows a note in place of the map; the list and grid views are unchanged. A blog post shows a "Watch the video on YouTube" link in place of the player.

If your browser sends a Global Privacy Control signal we treat that as switching it off, and you do not need to do anything.

Two things we want to be straight about. First, cookies Google has already set belong to Google, not to us, so we cannot delete them for you, your browser's privacy settings can. Second, we name Google here because Google is who we use today; if we ever change provider we will update this table, and the purpose above is what governs either way.

External links. The Site links out to an MLS search partner, and to sites such as GreatSchools, Zillow, and East Bay Regional Parks that we cite as sources. Once you follow a link, that site's own privacy policy governs, not ours. We have no control over and take no responsibility for their practices.

4. How we use information

to answer your enquiry and provide what you asked for
to contact you about buying or selling, where you have consented
to keep a record of consent
to send the market updates you asked for, and (members) the notifications you chose
to understand which pages are useful, through the statistics described in §2
to protect the Site from spam and abuse

We do not sell or share personal information as those terms are defined by the California Consumer Privacy Act. We do not disclose personal information for cross-context behavioural advertising.

5. Who we disclose information to

Only where necessary, and never for money:

to service providers who help operate the Site (hosting, and, once enabled, email delivery through Resend), under contract and only for that purpose
to our brokerage, RE/MAX Accord, where required for a transaction or by regulation
where required by law or legal process
to protect rights and safety
to someone you ask us to connect you with, such as a lender, at your direction
to a partner you invite to your home search: your My Home Search answers, Recommended Properties and budget, and only after they accept

6. Communications

If you give us your phone number and consent, we may call or text you. Message and data rates may apply. Reply STOP to opt out of texts.

Marketing email is opt-in. We send market updates only to people who confirmed the sign-up form or switched "Market updates and tips by email" on in their account, and to people we know personally who have agreed to hear from us. Every message carries an unsubscribe link, the switch in your account turns it off at any time, and you can also email us and we will remove you. If an address bounces or a message is reported as spam, we stop emailing it automatically. Emails about your own account (confirming your address, resetting your password) are not marketing and are sent regardless.

7. Retention

We keep enquiry and questionnaire records while there is an active or reasonably foreseeable relationship, and afterwards only as long as needed for legal, tax, or regulatory purposes. California real estate record-keeping rules require certain transaction records to be retained for three years.

Consent records are kept for as long as we retain the associated contact record, because deleting the proof of consent would remove our ability to demonstrate that we had it.

Accounts are kept for as long as the account exists. You can change anything on your profile yourself, and you can ask us to delete the account at any time (see §8); we then remove your profile and sign-in details, keeping only the enquiry and consent records described above.

Site statistics: the individual page-view records are deleted after 90 days; we keep only daily totals (how many visits, which pages), which contain nothing about any one person.

Newsletter: sign-up requests (including the network code described in §1) are deleted after 90 days. A confirmed subscription is kept until you unsubscribe or ask us to delete it.

Address report lookups are deleted after 90 days. That is a hard limit, applied automatically, not a target. Nothing about the tool requires us to keep them longer, so we do not.

8. Your California privacy rights

California residents have the right to know what personal information we hold, to delete it, to correct it, and to not be discriminated against for exercising those rights. Because we do not sell or share personal information, there is nothing to opt out of, but you may still ask us to confirm that.

To make a request, email support@ateam.homes. How to delete your account, and what you can delete yourself, is set out in our Data Deletion Instructions. We will verify your identity before acting, and respond within the time the law allows. You may use an authorised agent.

Global Privacy Control. If your browser sends a GPC signal, we treat it as a valid opt-out request. We neither sell nor share personal information, so there is no sale to opt out of, but the signal does two concrete things, automatically and without you having to click anything: it switches off the Google address autocomplete and the Google listings map described in §3, and it switches off our own site statistics described in §2.

We do not respond to legacy "Do Not Track" headers, which have no agreed standard. GPC is the signal California law recognises.

9. Changes we know are coming

We would rather tell you in advance than update quietly:

WhatsApp. We may use WhatsApp to alert our own team when an enquiry arrives. If we do, the alert carries your name and the kind of enquiry, goes only to us, and is sent through a messaging provider we will name here before it starts. We will never message you on WhatsApp unless you separately ask us to.

10. Children

The Site is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, email us and we will delete it.

11. Security

We take reasonable technical and organisational measures to protect personal information. No website or transmission is completely secure. Please do not send sensitive information, Social Security numbers, financial account details, or identity documents, through a web form or as an uploaded file. If a transaction needs those, we will arrange a secure method.

12. Contact

Email: support@ateam.homes · Phone/text: 925-316-3616