Data Protection

What we hold

• Your account. Username, a hashed password, and the profile that becomes the letterhead on your reports: name, brokerage, licence number, phone, email and photograph.
• Your work. The reports you build, the criteria you ran them with, the prose you edited, the photographs you uploaded, and the property files you keep.
• Your client links. Each one is a frozen snapshot of a report, plus the timestamp and criteria it was frozen at.
• Operational records. Server logs, and a monthly counter of how many distinct subject properties you have run, which is what the plan limit is measured against.

We do not build a profile of the clients you send reports to. A client link has no account behind it and no sign-in, so opening one tells us nothing about who opened it.

MLS data is licensed, not ours

Comparable sales, listing status, prices, dates and photographs come from CRMLS through the Trestle Web API under licence, and county assessor facts come from public record. That content is governed by the licence and by your own MLS rules. It stays inside the report product, and neither you nor we may export it in bulk or feed it into another system.

Where it lives

On a dedicated Linux host in the United States, in files owned by the application, outside the deployment path so a release cannot remove them. Nothing about a report is stored on a phone.

How long it is kept

• Reports and files: for as long as your account is open.
• Client links: permanent on Signature and Executive. A new Agent link carries 90 days. Any link created before the September 2026 pricing change stays permanent, because a pricing change should not break a document already in a client's hands.
• Sessions: expire on their own, and sign-out ends them immediately.

Who else is involved

• Cotality Trestle / CRMLS for MLS data.
• The county assessor's public parcel service for off-market property facts.
• Poppy ID at OfficePoppy for suite sign-in and licence verification.
• The payment processor for subscriptions. Card details never reach ReportPoppy.
• The branded short-link service for client links handed out on the agent's own domain.

ReportPoppy does not sell or share personal information, and there is no advertising network anywhere in the product.

Getting it back, or getting rid of it

Any report can be exported as a PDF from inside the app, which is the fastest way to keep a copy of a specific piece of work. For an export of your account's data, or for deletion, write to us and we will do it.

Deleting an account makes its reports and files inaccessible. Tell us before you close one if you need anything preserved, and note that client links already in circulation are governed by the link terms above.