Legal

Privacy Policy

Last updated October 13, 2026

Homestead & Co LLC respects your privacy. This policy describes what information we collect, how we use it, and how we protect it — on this website and across our services. We use advertising tags for targeted advertising; you can opt out at Your privacy choices, and our privacy rights section explains how to access, correct, or delete your data.

1. Information we collect

We collect information you provide directly when you interact with our services, including but not limited to: your name, email address, phone number, mailing address, property addresses you ask us about, real estate transaction details, and identification documents you choose to upload.

We also automatically collect technical information when you use our websites and portal, including IP address, browser type, device identifiers, and timestamps of your activity, for security and audit purposes.

2. Website analytics, advertising, and tracking

This website uses a small first-party script to understand how you found us. When you arrive, it notes how you got here — campaign parameters in the address bar (such as UTM tags and advertising click identifiers), the page you landed on, and the referring website — and gives your browser a random visitor ID, kept in your browser’s local storage and in a first-party cookie our own server sets. Your first visit, and each later visit that arrives from a new source, is recorded on our own servers. Links in our marketing emails carry a code that tells us which email, and which recipient, the click came from.

We also record on our own servers, under that visitor ID, what you do on this website: every page and home you view (including the search filters on the page), how long you spend on each page and how far you scroll, how often you visit, when you use the payment calculator (we keep a price range, not the exact figure), when you share a listing, and when you add an open house to your calendar. With each page we record the device you used — its type (phone, tablet, or computer), operating system, browser, screen size, language, and time zone — your IP address, and your approximate location (city and state) as derived from it on our own servers, using IP geolocation by DB-IP (licensed under CC BY 4.0) — your IP address is not sent to anyone to do this. We keep this history for as long as we keep your record, so that if you later contact us or create an account, the agent helping you knows which homes you have been looking at.

Device fingerprint and shared networks. Unless you have opted out of targeted advertising (below), the script also reads characteristics of your browser and device — how it draws text and graphics, its graphics processor, which fonts are installed, its number of processor cores and memory, and its screen — and combines them into a device fingerprint. We use the fingerprint to recognize your browser again even after its visitor ID has been cleared, and we use the fingerprint and your network address to identify devices that probably belong to the same person or household (for example, a phone and a computer on the same home Wi-Fi). We treat those matches as possibilities for our team to consider, not as confirmed links. If you have opted out of targeted advertising, or your browser sends a Global Privacy Control signal, we do not create a device fingerprint and we do not match your devices by network.

If you later send us an inquiry, request a home valuation, apply to join the brokerage, enroll in a course, or arrive through one of our email links, we connect those visit records to your contact record and keep that history as part of it, so we know which channels brought you to us and which homes interest you. If you do this from more than one device (for example, your phone and your computer), we connect each device’s history to the same record. We may also ask you how you heard about us. We use this information to help you with your home search, to decide which homes, emails, and offers to show you, and to measure and improve our marketing. It is not shared with or sold to third parties, and it is not used for targeted advertising if you have opted out on our privacy choices page or your browser sends a Global Privacy Control signal. Clearing your browser’s site data and cookies resets the visitor ID, but it may not stop us recognizing your browser by its device fingerprint; to have your history deleted, ask us as described under Your privacy rights below.

We also use, or may use, the following third-party measurement and advertising tools on this website:

• Google Analytics (GA4) — anonymous usage measurement (pages viewed, traffic sources, approximate location, device type) that helps us understand how the site is used.
• Google Ads conversion tag — records when a visit that started from one of our Google ads leads to an inquiry, so we can measure advertising effectiveness, and may support remarketing audiences.
• Meta (Facebook/Instagram) Pixel — the equivalent measurement and remarketing tag for our Meta advertising.

These tools may set cookies or use similar technologies and receive your IP address and page activity. We do not send them your name, email, phone number, or the contents of your inquiries. You can limit ad personalization through Google Ads Settings, Meta’s ad preferences, browser tracking-protection features, or by blocking cookies for this site.

3. How we use information

We use the information we collect to provide real estate services, fulfill transactions, respond to your inquiries and valuation requests, communicate with clients and agents, comply with legal and regulatory requirements (including Oklahoma Real Estate Commission rules), and improve our services. We do not use your information for unrelated marketing purposes.

4. Sharing

We share information with third parties only as necessary to deliver our services — for example, with title companies, lenders, transaction coordinators, and electronic-signature providers who are contractually obligated to handle the data in accordance with applicable law. We do not sell your personal information.

5. Data retention

Real estate transaction records, including signed documents, are retained for the period required by Oklahoma real estate and federal recordkeeping rules. You may request a copy of records pertaining to your transaction at any time.

6. Security

We use industry-standard administrative, physical, and technical safeguards to protect information we hold, including encryption in transit and at rest, role-based access controls, and audit logging.

7. Your privacy rights

Targeted advertising and how to opt out.

We process personal data for targeted advertising: the Meta Pixel and the Google Ads tag described in section 2 let us show our ads to people who visited our websites when they are on other websites and apps. You can opt out at any time at Your privacy choices, linked at the bottom of every page. We also treat a Global Privacy Control signal from your browser as an opt-out. We do not sell personal data.

Categories of personal data we process.

• Identifiers and contact information — name, email, phone number, mailing address.
• Property and transaction information — homes you ask about, valuations you request, offers, contracts, and signed documents.
• Identity documents — for example a driver’s license you upload for verification, which can reveal citizenship status.
• Communications — emails, text messages, and calls with us, including recordings of calls.
• Online activity — pages viewed (and how long, how often, and from which devices), listings saved, how you found us (campaign parameters, advertising click identifiers, and the email or link you arrived through, kept as a history under a random visitor ID), device and browser information, IP address, and a device fingerprint (unless you opt out of targeted advertising).
• Inferences — for example how actively you appear to be shopping, used to decide how we follow up.

We use this data for the purposes in section 3: to provide real estate services, complete transactions, respond to your requests, communicate with you, market our services (including targeted advertising, which you can opt out of), measure our marketing, keep our services secure, and meet legal and Oklahoma Real Estate Commission recordkeeping requirements.

Who we share it with.

We share personal data with service providers that process it on our behalf (customer relationship management, telephone and text messaging, email delivery, electronic signature, cloud hosting, and payment processing); with the other parties to your transaction at your request (title companies, lenders, inspectors, and cooperating brokerages); with our affiliated companies, HCO Leasing and Liberty Link Group, when you ask for their services; and with advertising platforms (Meta and Google), which receive the browsing data described in section 2 — never your name, email, phone number, or the contents of your inquiries.

Your rights.

Depending on where you live, and in any event for Oklahoma residents, you have the right to:

• confirm whether we process your personal data and access it;
• correct inaccurate personal data;
• delete personal data you provided to us or that we obtained about you;
• obtain a portable copy of personal data you provided to us; and
• opt out of targeted advertising, of the sale of personal data, and of profiling used for decisions that produce legal or similarly significant effects.

A parent or legal guardian may make these requests for a child under 13. We will not deny you service, charge you a different price, or give you a different quality of service because you exercised these rights. We may keep information the law requires us to keep — for example, real estate transaction records and signed documents we must retain under Oklahoma Real Estate Commission rules, and records of your consent to receive text messages — and we will tell you what we kept and why.

How to make a request.

Use our privacy request form, email [email protected] with the subject “Privacy request,” call us at (405) 509-0541, or write to us at the address in section 12. You do not need an account. Tell us which right you want to exercise and how to reach you. To protect your information, we verify requests to access, correct, or delete data — usually by confirming you control the email address or phone number we have on file, and for copies of documents or recordings, by a second check. Opt-out requests do not need verification.

We respond within 45 days of receiving your request. If we need more time, we will tell you within those 45 days, explain why, and respond within a further 45 days. Requests are free up to twice in any 12-month period.

How to appeal.

If we decline to act on your request, we will explain why and how to appeal. To appeal, use the appeal link in our decision email, reply to it, or contact us the same way you made the request, with “Privacy appeal” in the subject. A person who did not make the original decision will review it, and we will respond in writing within 60 days of receiving your appeal. If we deny your appeal, you may submit a complaint to the Oklahoma Attorney General, and our response will tell you how.

8. SMS / text message communications

Homestead & Co LLC may send text messages to phone numbers that have explicitly opted in to receive them. The categories of SMS programs are described in our Terms of Service and on our SMS Terms page.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All categories listed exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Information we collect when you opt in to SMS.

When you provide your mobile phone number and opt in to one of our SMS programs, we collect: your phone number, the date and time of opt-in, the source of opt-in (e.g. agent application form, client transaction form, employee onboarding), your IP address at the time of opt-in, and a record of the consent language you agreed to. We retain this information for the duration of your participation in the program plus the period required by federal and state recordkeeping rules.

How we use the information.

We use your mobile number solely to deliver the SMS messages you opted in to receive — for example, transaction status updates, document signing links, identification verification requests, employee onboarding instructions, internal team announcements, or appointment reminders. We do not use your mobile number for unrelated marketing.

Sharing.

We use Twilio, Inc. as our SMS service provider. Your phone number is shared with Twilio strictly for the purpose of delivering the messages you’ve opted in to receive. Twilio is contractually required to handle this data in accordance with applicable telecom and privacy laws. We do not sell, rent, or share your phone number or SMS opt-in data with any other third party for marketing, advertising, or promotional purposes.

Message frequency.

Frequency varies by program. Transaction-related messages are sent only when an event triggers them (e.g. a document is ready to sign, an ID upload is requested). Internal team and onboarding messages are sent only as operationally needed.

Opt-out.

You can opt out of any SMS program at any time by replying STOP to any message you receive. After opting out, you will receive a single confirmation message and no further messages from that program. To rejoin, reply START. For help, reply HELP or contact us at the phone number or email below.

Cost.

Message and data rates may apply. Standard messaging rates from your carrier apply to all messages sent and received.

9. Google account data (calendar connection)

Agents and staff who use our agent portal may choose to connect their Google account so the portal can place real estate appointments — closings, inspections, walk-throughs, showings, listing appointments, and recruiting interviews — on their own Google Calendar and invite the other people involved. Connecting is optional; the portal works without it. This section applies only to portal users who connect a Google account, and only to the Google data described here.

What Google data we access.

When you connect your Google account we request a single Google permission, Google Calendar (https://www.googleapis.com/auth/calendar). We use it to read your free/busy availability so we can warn you before we book over something, and to create, update, and cancel the calendar events that you — or a brokerage colleague acting on your behalf, such as a transaction coordinator — create in the portal. We do not request access to your Gmail, your Google Drive files, your Google Contacts, or your location.

Why we access it.

Only to provide the calendar features you see in the portal: warning you about a conflict before an event is booked, putting the event on your calendar, and letting Google send the invitation to the attendees you selected. We do not use Google user data for any other purpose.

How it is stored.

Your Google authorization tokens are encrypted with Google Cloud Key Management Service and stored in a server-only database collection that no browser session can read — not yours, and not an administrator’s. Only our backend can decrypt them, and only to carry out a calendar action initiated in the portal. Our own record of an event stores who created it, whose calendar it is on, the start time, and the transaction or contact it relates to; it does not store the contents of the rest of your calendar.

What we never do with it.

We do not sell Google user data. We do not use it for advertising, or to build advertising or credit profiles. We do not use it to develop, improve, or train generalized artificial intelligence or machine learning models. We do not transfer it to others except as needed to provide the features described here, or where the law requires it. No human reads your Google calendar data except with your permission, for a security investigation, or where the law requires it.

Limited Use.

Homestead & Co LLC’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How to disconnect.

You can disconnect at any time, in either place. In the portal, open Settings → Profile and click Disconnect on the Google Calendar card — this revokes our access with Google and deletes the stored tokens. Or, in your own Google Account, open myaccount.google.com/connections (Security → Your connections to third-party apps & services), select Homestead & Co LLC, and remove access. Either route stops all future calendar reads and writes immediately. Events already on your calendar remain there and are yours to keep or delete in Google Calendar.

Retention and deletion.

We keep your Google tokens only while your connection is active. They are deleted when you disconnect, and revoked and deleted as part of offboarding when your portal account is deactivated or you leave the brokerage. Tokens we stop using also expire on Google’s own schedule.

10. Facebook and Instagram Account Data (Social Post Tracking)

Agents and staff who use our portal may choose to connect a Facebook Page they manage, or an Instagram professional (Creator or Business) account, so the portal can confirm the social media posts they make as part of their daily lead generation and, if they ask, help them publish posts. Connecting is optional; agents who do not connect record their posts themselves.

What Meta data we access.

We request only: the list of Facebook Pages you manage and those Pages’ posts; your Instagram professional account’s username and posts; and, only if you turn on posting help, permission to publish posts you approve to that Page or Instagram account. We do not access your personal Facebook profile, your friends, your messages, or information about your followers.

What we keep.

For each of your posts we keep the date it was posted, the platform, and its link. We do not store the text, photos, comments, or likes. Your Meta access tokens are encrypted with Google Cloud Key Management Service and kept in a server-only database collection that no browser session can read.

How we use it.

Only to count your posting days on your daily lead-flow scorecard and the Social posts report — which you, your team leader, and your brokerage’s administrators can see — and to publish the posts you approve. We do not sell Meta data, use it for advertising, or use it to train artificial intelligence models, and we do not share it outside the brokerage except where the law requires.

How to disconnect and have it deleted.

In the portal, open Settings → Profile and click Disconnect on the Social accounts card — that deletes the connection and your tokens at once. Or remove our app in Facebook (Settings & privacy → Settings → Apps and websites, or Business integrations) or in Instagram (Settings and activity → Website permissions → Apps and websites). When you remove it there, Meta notifies us and we automatically delete your connection and tokens, and Meta shows you a confirmation code you can use to check the deletion’s status. You can also ask us to delete it using the contact details below. We also delete your connection and tokens when your portal account is deactivated or you leave the brokerage. Posting days already counted stay in your scorecard history as dates only.

11. Children

Our services are not directed to children under 13 and we do not knowingly collect information from children under 13.

12. Changes

We may update this Privacy Policy from time to time. The “last updated” date above will reflect any changes. Material changes will be communicated to active clients and agents.

13. Contact

For questions about this policy or our SMS practices, contact us at: