Legal

Privacy Policy

How MyDibz collects, uses, and protects your information.

MyDibz is operated by RJW Creative Ventures LLC, a Texas limited liability company.

Effective date: October 1, 2026 · Last updated: October 1, 2026

1. Scope and Who We Are

1.1 This Privacy Policy explains what information MyDibz collects, how we use it, where it is stored, who we share it with, and the choices available to you. It applies to the MyDibz web application and related services (the "Service"), operated by RJW Creative Ventures LLC ("we," "us," "our").

1.2 The Service is a professional tool for licensed real estate agents, brokers, and builders. It is not directed to consumers or minors. See Section 11 (Children).

1.3 This policy describes the Service as it actually operates. Where the Service does not do something (for example, it does not run third-party advertising or analytics trackers, does not sell personal information, and does not ingest data from any MLS), this policy says so.

2. Information We Collect

2.1 Information you give us when you create and maintain an account

Name (first and last name);
Email address (your sign-in identity and the address we use for account and notification email);
Password — stored only as a salted one-way hash; we never store your plaintext password;
State and real estate license number (registration requires a license number);
Brokerage name, where you provide it;
License details associated with your verification (license type, status, and expiration as returned by the verification source, and when and how the license was verified — for example, automatically against official license data, or through manual operator review);
Your notification preferences and your choice of whether to be remembered on a device;
Your acceptance record — that you agreed to the Terms of Use and acknowledged this Privacy Policy, together with the version numbers of the documents you accepted and the time of acceptance;
Your 18+ attestation — that you attested at sign-up that you are at least 18 years old, together with the version of the attestation text and the date you attested. The Service does not collect or store your date of birth, does not request government identification, and does not run a third-party age check;
Correspondence and support content you send us.

2.2 Professional profile information (optional)

If you complete your agent profile: brokerage, phone number, service area, biography, website, and social media links, plus an optional profile photo. You control whether your profile is publicly visible and separately whether your phone number and email address are shown.

2.3 Listing and property information you contribute

For listings you are authorized to manage: property address, city, state, ZIP, MLS number (where you provide one), listing brokerage, listing agent name, listing agent email address and phone number where provided, listing expiration date, and property status.

2.4 Compensation and builder incentive information you contribute

For resale compensation offers: compensation type, compensation amount, whether it is negotiable, conditions or notes, effective date, expiration date, status, and authorization status. For new-construction / builder incentive (BTSA) offers: builder name, community, property inventory, incentive type and amount or percentage, promotion and restriction notes, effective and expiration dates, builder authorization information (builder name and contact name, email, and phone where provided), and builder representative name, phone, and email where provided.

Please note: information you enter in a contribution — including contact details for a listing agent or builder representative — is stored with that record and may be shown to other users in the marketplace view of the offer, or used to send an invitation email as described in Section 5.4. Do not enter a person's contact details unless you are authorized to do so.

2.5 Images you upload

Optional images for an offer that you upload and certify you own or are permitted to use. Images are processed and stored as a display version with embedded metadata (including EXIF and GPS location) stripped — see Section 8.4. The original uploaded file is not retained.

2.6 Premium utility data

Property watches, "notify me" requests, showing lists and their items, builder incentive search activity, and the notification records generated for you. These are private to your account.

2.7 Notification and email records

The content of notifications sent to you (in-app and by email) and a log of notification emails sent to you, which includes the deduplication key used to avoid sending you the same notification repeatedly within a short window.

2.8 Subscription and payment-related information

If you start a Premium subscription: subscription status, plan (monthly or annual), amount and currency, the current billing period start and end, whether cancellation is scheduled at period end, and the payment processor's customer and subscription identifiers for your account. Your payment card details are collected and handled by our payment processor, Stripe; MyDibz does not receive or store your full card number. See Section 5.2.

2.9 Requests you send to other agents and audit records

If you ask the Service to invite the listing party of a property to publish compensation information: the property identifier and label you supplied, any listing-agent email address you provided or confirmed, the status of the request, and when and how many times an invitation was sent for that property. If you submit a license for manual review, we keep the identity snapshot you submitted and the decision record.

We also keep append-only audit records of certain actions — license verification decisions and operator decisions on authorization claims, changes to compensation and builder incentive records (including what changed, when, and by whom), password-reset and account-recovery activity, and subscription lifecycle events. These records support verification, moderation, security, and dispute resolution.

2.10 Session, device, and security information

Session information to keep you signed in: a session identifier and its server-side hash, its expiry, and when it was created. See Section 6.
Security and abuse-prevention data, such as rate-limit counters associated with requests (for example, sign-in attempts and invitation sends).

We do not run third-party advertising, tracking, or analytics services in the Service, and we do not use advertising cookies or cross-site trackers.

2.11 Deal tracker and saved calculations are stored in your browser, not on our servers

The deal tracker (saved deals and their statuses) and your saved commission calculator records are stored locally in your own browser's local storage, on your device. They are not transmitted to or stored on MyDibz servers. They stay on that device and browser; clearing your browser storage removes them, and they do not transfer if you sign in from a different device or browser. See Section 6.3 for the complete list of what the Service keeps in browser storage.

3. How We Use Information

We use the information described above to:

create and secure your account, sign you in, and keep you signed in;
verify your email address and your real estate license, including manual operator review where automatic verification is unavailable;
provide the Service's features: the compensation calculator, the deal tracker (locally in your browser), your listings and offers, the compensation lookup, builder incentive search, watches, notify-me requests, showing lists, and the notification inbox;
determine your verification status, authorizations, and entitlement to Premium features;
publish authorized compensation and builder incentive information to users entitled to see it;
send you the email you ask for or that the Service requires: verification emails, password-reset emails, sign-in-email reminders, subscription activation, payment and cancellation notices, notification emails you have enabled, and invitations you ask the Service to send;
operate subscriptions and billing, and record subscription state;
enforce our rules: prevent fraud, spam, scraping, abuse, and unauthorized access; apply request caps; review claims and moderate contributed content;
maintain audit trails for verification, moderation, security, and dispute resolution;
record your acceptance of the Terms of Use and this Privacy Policy and your 18+ attestation, and carry out account closure when you ask us to;
maintain, troubleshoot, secure, and improve the Service, including in aggregated or de-identified form that does not identify you.

We do not use your information for third-party advertising, and we do not sell it.

4. Information That Is Visible to Others

4.1 Published offers. The marketplace view of an active, authorized (or verified) and unexpired offer shows the property identity (address, and MLS number and brokerage where provided) and, to a user with Premium access, the compensation or incentive information you entered. For a signed-in user without Premium access, the protected compensation fields — amount, type, negotiability, conditions, and effective date — are removed on our servers before any response is sent; the caller receives only the fact that an offer exists and the property details.

4.2 Verified identities. Your verified status and the identity linked to an offer (for example, the name of the user who submitted or last updated an offer, and their verification status) may be shown with an offer to users entitled to see the offer, so that compensation information can be attributed. Masked (partially obscured) license information may be displayed with an offer's history.

4.3 Professional profile. Your agent profile and photo are visible only if you have turned public visibility on, and your phone and email are shown only if you separately enable each one.

4.4 Watches, lists, and notification requests are private. Dibz Watch entries, showing lists and their items, "notify me" requests, and your notification inbox are visible to your account only.

4.5 Invitations you send. When you ask the Service to invite the listing party of a property to publish compensation information, the email identifies the property and states that a buyer's agent using MyDibz requested compensation information for it. It does not disclose your name or email address. See Section 5.4.

5. How We Share Information

5.1 We do not sell your personal information, and we do not share it for others' advertising or marketing purposes. We share information only as described in this Section, with service providers who process it for us, or where the law requires it.

5.2 Payment processing — Stripe. Premium subscriptions are processed by Stripe, Inc. and its affiliates ("Stripe"), a third-party payment processor. When you start a subscription you are taken to Stripe's hosted checkout, and Stripe collects your payment-card details and processes the charge. MyDibz never receives or stores your full card number. Stripe sends us subscription and billing status information (for example, whether the subscription is active, the plan, the amount and currency, and the current period end) so that we can provide Premium access and send billing-related email. Stripe handles payment information under its own terms, including its privacy policy, published at https://stripe.com/privacy. Paid subscriptions may not be available at all times; where billing is not enabled, no subscription can be started and no payment is taken.

5.3 Email delivery — our email service provider. Verification, password-reset, sign-in-reminder, subscription, invitation, and notification emails are sent through a third-party transactional email provider. To deliver an email, we transmit the recipient's email address and the content of that email to the provider. The recipient address is shared solely to deliver the message. The provider is used for delivery only; we do not use it to build marketing lists. If you are the recipient of an invitation email because someone asked the Service to invite you to publish compensation information, your address came either from an authorized listing-side record or from the requesting user, and the email tells you the request was made and that you can ignore it.

5.4 Invitation emails to listing parties. Invitation email contains the property label, the fact that a buyer's agent requested compensation information, a statement that publishing is free, the compliance statement that compensation information on MyDibz is independently entered and is not an MLS offer of compensation, and an opt-out (unsubscribe) header. It does not contain the requesting user's identity. The Service also caps how many invitations may be sent for the same property.

5.5 Infrastructure, database, and hosting providers. The Service runs on cloud hosting and a managed database service that store the data described in this policy on our behalf.

5.6 Internal access for verification and moderation. Authorized operators (including the platform owner, whose access is enforced on the server) can access account, verification, authorization, listing, offer, and moderation records in order to verify license and authorization claims, review and moderate contributed content, respond to support requests, investigate abuse, and administer the Service. Operator decisions on claims are recorded in an append-only audit log.

5.7 Legal and safety. We may disclose information if we believe it is required by law, subpoena, or legal process; to enforce our Terms of Use; to respond to claims that content violates the rights of others; to protect the rights, property, or safety of MyDibz, our users, or the public; or in connection with a merger, acquisition, financing, reorganization, or sale of assets (in which case we will require the recipient to honor this policy or provide notice of a change).

5.8 No third parties for advertising or analytics. We do not disclose personal information to advertising networks, data brokers, or analytics trackers, because the Service does not use them.

5.9 Data we do not have. We do not receive scraped or ingested MLS compensation data, because the Service does not obtain compensation or incentive data that way. Compensation and incentive information in the Service comes from users who enter it for their own listings and offers. We therefore cannot disclose "MLS compensation data" — there is none in the system.

6. Cookies, Sessions, and Local Storage

6.1 Signing in without "Remember me". When you sign in normally, the Service issues you a session token. That token is held in your browser (in the browser's local storage for that device) and sent with your requests so the server can identify your session; the server stores only a one-way hash of the token, never the token itself. Sessions expire after a fixed period (currently 30 days) and end immediately when you sign out, which also deletes the session on the server.

6.2 "Remember me". If you check "Remember me" when signing in, your session persists longer (currently up to 365 days). In that case the session token is delivered in a cookie that is HttpOnly (so page scripts cannot read it), Secure (sent only over HTTPS), and SameSite=Lax, and it is not written to browser local storage. Choosing "Remember me" means the session stays valid on that device until it expires or you sign out.

6.3 Local storage on your device. The Service uses your browser's local storage for data that stays on your device and is not sent to our servers:

your deal tracker entries (saved deals and their statuses);
your saved commission calculator records;
your "remember me" preference (whether you chose it last time); and
in the ordinary sign-in flow (when "Remember me" is not selected), your session token and basic account details, so the app can keep you signed in on that device.

If you select "Remember me", the session token is not placed in local storage — it is delivered in the HttpOnly, Secure, SameSite=Lax cookie described in Section 6.2. The Service does not use browser session storage for account data, and it does not use local storage for advertising, analytics, or cross-site tracking.

6.4 No advertising or third-party tracking cookies. The Service does not set advertising or cross-site tracking cookies, and it does not run third-party advertising or analytics scripts.

6.5 Controlling cookies and storage. You can clear cookies and local storage in your browser settings. Doing so will sign you out and, on that device, erase locally stored deal tracker and saved calculator data. Blocking the session cookie will prevent you from staying signed in.

7. Security

We use administrative, technical, and organizational safeguards designed to protect the information we hold. These include, as implemented today:

7.1 Passwords are hashed. Passwords are stored using a one-way salted hash. We never store your plaintext password, and we cannot recover it — a forgotten password must be reset.

7.2 Session tokens are hashed on the server. The server stores only a hash of each session token and of each password-reset and email-verification token. Reset and verification tokens are single-use and time-limited, and completing a reset invalidates outstanding reset tokens for the account.

7.3 Server-side authorization. Access to data and to Premium features is enforced on the server, not merely hidden in the interface. Requests are authorized against the server's own records, and a call that comes from outside the interface without the required account, authorization, or Premium entitlement is refused.

7.4 Protection against record tampering. Records are addressed by opaque server-generated identifiers, and the server verifies that the requesting user is the authorized owner of a record before returning or changing it, so one account cannot reach another account's private records by changing an identifier.

7.5 Image metadata is stripped. Uploaded images are re-encoded before storage, which strips embedded metadata such as camera information and GPS location; only the processed display version is stored. Uploads must be certified as owned or permitted by the uploader, and image access is authorized on the server like any other offer data.

7.6 Limited data collection. As described in Section 2, the Service does not run third-party advertising or analytics trackers, and locally stored deal tracker data is not sent to us.

7.7 No method is perfect. No system is completely secure. We cannot guarantee that information will never be accessed, disclosed, altered, or destroyed despite our safeguards. Please use a strong, unique password, keep it confidential, and tell us promptly if you suspect unauthorized activity on your account.

8. Storage, Location, and Retention

8.1 Where data is stored. Account, verification, listing, offer, builder incentive, image, notification, subscription-status, and audit data are stored in a managed cloud database operated for us by a hosting/database provider. Email delivery is performed by our email service provider, and payments are processed by Stripe.

8.2 Retention — how it actually works. The Service does not apply fixed, automatic time-based deletion schedules to most records. In general:

Records you create persist in our database until you remove them through the controls the Service provides, or until we remove them as needed to operate the Service, to comply with law, or in connection with moderation and account termination.
Where the Service gives you a delete control, using it deletes or deactivates that record as described in Section 9. For example, permanently deleting an offer you manage deletes the offer record itself from our database; the append-only audit entries about changes to that offer are preserved, with their link to the deleted offer cleared, because they are the verification and moderation history of the system. Withdrawing or closing an offer is different: it is a status change and the record stays in the database, no longer presented as current.
Certain records are intentionally kept as append-only audit history (verification decisions, authorization decisions, compensation and incentive change history, password-reset and recovery activity, and subscription lifecycle events) and are not deleted on user request, because they are used for verification integrity, security, and dispute resolution.
Notifications and notification email records are kept so the Service can show your inbox and avoid sending duplicate notifications within a short window.
Subscription and billing-status records are kept for as long as needed to administer your subscription, to honor your access through the period you paid for, and for accounting and audit purposes. Payment card details are held by Stripe, not by us.
Expired, withdrawn, and closed offers are retained in the database but are not presented publicly as current.
Session records are removed when a session expires or when you sign out.
Account closure. When you close your account (Section 9.4), the account row itself is kept and flagged as closed, with the closure date, and the password is replaced by a value that can never authenticate. Deleted at closure: your professional profile and profile photo, the images you uploaded on your offers, your Dibz Watch entries, your "notify me" requests, your showing lists and their items, your notification inbox and the notification-email log, your notification preferences, the property-information requests you sent, outstanding password-reset records, and every signed-in session. Kept but deactivated at closure: your compensation and builder incentive (BTSA) offer rows (withdrawn — a status change, so the rows stay) and your listing and builder authorization rows (revoked), because the append-only audit records that reference them must stay coherent. Also kept: your acceptance of the Terms of Use and this Privacy Policy, your 18+ attestation, and an append-only record of the closure itself.

8.3 Backups and copies. For reliability and security, data may exist in provider backups and logs for a limited operational period. Removing a record will not necessarily remove it immediately from backups, but it will be deleted in the ordinary course as backups rotate.

8.4 Images specifically. Only the processed display version is stored (WebP, long edge no more than 1280 pixels), with metadata such as EXIF and GPS location stripped. The original upload is not retained. One image is kept per offer; uploading again replaces it.

8.5 Location of processing. The Service is offered to users in the United States. We operate in the United States and use United States service providers, and the data described in this policy is stored and processed in the United States. The Service is not directed to users in the European Union or the United Kingdom, and this policy makes no commitments under those jurisdictions' data-protection frameworks.

9. Your Choices and Controls

9.1 What you can do yourself in the Service today:

Update your profile — edit your professional profile information, your public-visibility setting, and whether your phone and email are shown; upload or remove your profile photo.
Manage your listings and offers — create, update, extend, close/withdraw, or permanently delete an offer you manage, subject to the authorization the Service requires. You can remove or replace an offer's image. Withdrawing or closing is a status change: the record stays in our database but is not presented as current. A permanent delete removes the offer record itself from our database, while the append-only audit history of changes to it is kept, with its reference to the deleted offer cleared.
Remove private utility items — remove a Dibz Watch, cancel a "notify me" request, delete a showing list or remove items from it, and remove or delete list items.
Manage notifications — turn notification categories and the email channel on or off in your notification preferences, and mark inbox items read.
Verify your email — request a new verification email from your account area.
Reset a forgotten password — request a single-use, time-limited password-reset email.
Recover your sign-in email — if you do not remember which email you signed up with, use the account-recovery flow, which identifies the account by license number and state; the reminder email is sent only to the account's own address and is never displayed in the Service.
Cancel Premium — via your billing settings, which keeps access through the end of the period you already paid for.
Close / Delete My Account — close your account yourself from your account settings; see Section 9.4.

9.2 What you cannot currently do yourself — and how it is handled:

Change your sign-in email address: the Service does not offer a self-service way to change the email on an account. Email support@mydibz.com and we will handle it as a support request; we may verify the request before making the change.
Export all of your data: the Service does not currently provide a self-service data export. You can ask us at support@mydibz.com, or at privacy@mydibz.com for a privacy request.

9.3 Questions, requests, and complaints. You may contact RJW Creative Ventures LLC about your information, to request correction or removal, or to raise a privacy question or complaint:

Privacy and data requests: privacy@mydibz.com
General and support: support@mydibz.com

9.4 Closing your account ("Close / Delete My Account"). You can close your account yourself from your account settings. It is permanent and cannot be undone, and it runs only after you type CLOSE to confirm — a confirmation the Service verifies on its servers, not just in the interface. When your account is closed:

Deleted: your professional profile and profile photo; the images you uploaded on your offers; your Dibz Watch entries; your "notify me" requests; your showing lists and their items; your notification inbox and the log of notification emails sent to you; your notification preferences; the property-information requests you sent to other agents; any outstanding password-reset records; and every signed-in session (you are signed out on all devices). Your password is replaced with a value that cannot authenticate.
Kept, but no longer discoverable: your published compensation and builder incentive (BTSA) offers are withdrawn immediately, so they are no longer returned in Compensation Lookup, the Builder Bonus Radar, or any other discovery surface; your listing and builder authorizations are revoked. Those offer and authorization records are not deleted — they are kept in a deactivated state because the append-only audit records that reference them must stay coherent.
Kept as records we must retain: your closed account row (flagged closed, with the date), your acceptance of the Terms of Use and this Privacy Policy, your 18+ attestation, and an append-only record of the closure itself.
Premium: if live billing is in place and you have an active subscription, it is cancelled so that it does not renew, and access continues through the period you already paid for (Terms of Use, Section 7.4).

No retention period is stated for the retained records, because none has been set (Section 8.2).

9.5 Do-not-track and opt-out signals. The Service does not track users across third-party websites, and it does not collect personal information for advertising, so there is nothing to opt out of in that respect.

10. Changes to This Privacy Policy

10.1 We may update this Privacy Policy from time to time. When we publish a new version we will update the version number and the effective date at the top of this document, and we will provide notice in the Service as appropriate.

10.2 Material changes only require re-acknowledgment. If we make a material change to this policy — a change that materially alters what we collect or how we use or share it — we will give notice and present the new version for your acknowledgment, and we may ask you to re-acknowledge it at a future sign-in. Non-material changes (clarifications, corrections, formatting, or updated contact details) take effect when published and do not require you to re-acknowledge anything.

11. Children

11.1 The Service is for real estate professionals who are at least 18 years old. Registration requires you to attest that you are at least 18. The Service enforces that attestation on its servers — a registration whose payload does not carry it is refused — and records the attestation, the version of the attestation text, and the date of attestation against your account.

11.2 This is an attestation, not an age check: the Service does not collect or store your date of birth, does not ask for government identification, and does not perform a third-party age verification.

11.3 The Service is not for children, and we do not knowingly collect information from anyone under 18. If we learn that a person under 18 has created an account, we will close it and delete the information as described in Section 9.4.

12. California and Other State Privacy Notices

12.1 We do not sell personal information and we do not share it for cross-context behavioral advertising.

13. Contact

For privacy questions, requests, or complaints, contact RJW Creative Ventures LLC:

Privacy and data requests: privacy@mydibz.com
General and support: support@mydibz.com