Privacy Policy

Stark Flow & Stark Company Realtors websites · Effective September 27, 2026

This Privacy Policy explains what information Stark Company Realtors ("Stark," "we," "us") collects through Stark Flow — our real estate customer relationship management (CRM) application at stark-flow.com — and through the public agent and company websites we operate on stark-flow.com and starkhomes.com and their subdomains (together, the "Services"), how we use that information, who we share it with, and how you can ask us to delete it.

• 1. Who uses the Services
• 2. Information we collect
• 3. How and why we use information
• 4. Facebook & Instagram (Meta) integration
• 5. Google account integration
• 6. How we share information
• 7. Text messages (SMS)
• 8. Cookies and similar technologies
• 9. How long we keep information
• 10. Your choices & how to request deletion
• 11. Security
• 12. Children
• 13. Changes to this policy
• 14. Contact us

1. Who uses the Services

The Services are used by three kinds of people, and this policy covers all of them:

• Agents and staff of Stark Company Realtors who sign in to the Stark Flow CRM.
• Clients, leads and contacts whose information our agents keep in the CRM.
• Visitors to our public company and agent websites, including people who create a buyer account, save searches, or submit a contact or lead form.

2. Information we collect

Information you give us

• Account information — name, email address, phone number, office, profile photo, biography, license and MLS identifiers, and the credentials you use to sign in.
• Contact and client records that agents enter or import — names, email addresses, phone numbers, mailing addresses, notes, tags, relationships, transaction and property details, documents, and communications history.
• Forms and inquiries submitted on our websites — name, email, phone, message, the property you asked about, and buyer preferences.
• Buyer accounts on agent websites — email address, saved searches, favorite listings and alert preferences.
• Marketing content you create — designs, templates, campaigns, captions and images.

Information from connected accounts (with your permission)

• Facebook and Instagram — when an agent connects their business accounts we receive their Facebook name and user ID, the Facebook Pages they manage (Page ID, name, category and picture), the Instagram Business account linked to a Page (ID and username), and access tokens that let Stark Flow publish to those Pages and accounts. See section 4.
• Contacts saved on an agent’s phone — the Stark Flow mobile app can upload the names, phone numbers and email addresses in an agent’s own address book, so someone already in their phone becomes a CRM contact without retyping. It is off until the agent turns it on, it repeats in the background while it stays on, and switching it off stops it. These contacts go only into that agent’s own CRM records. No mobile information is sold, and none is shared with third parties or affiliates for marketing or promotional purposes.
• Google Workspace — when an agent connects Google we access Gmail, Calendar, Contacts and Tasks as described in section 5.
• Calls and text messages placed through Stark Flow — when an agent calls or texts you from their Stark Flow business number we record the time, duration, delivery status and message content, so the agent has the history of your conversation. We do not read or collect messages sent from an agent's personal phone.
• Transaction management (SkySlope) — transaction, form and signature data for an agent's own files.

Information we collect automatically

• Usage and device information — pages viewed, actions taken, browser type and version, operating system, screen size, IP address, approximate location derived from IP, referring URLs, and timestamps.
• Server logs and diagnostics — requests to our servers, error reports, and (when you submit an in-app bug report) a screenshot and recent console errors.
• Email engagement — whether emails we send are opened and which links are clicked, via tracking pixels and tracked links.
• Cookies and similar technologies described in section 8.

Information from other sources

• Multiple Listing Service (MLS) data — property listings, photos, prices, statuses, open houses and the listing and buyer agents of record, which we display on our websites and use inside the CRM.
• Public and third-party data such as property records, social profile lookups an agent requests, and geocoding of addresses.

3. How and why we use information

We process information for the following purposes:

• To provide the Services — operate the CRM, agent and company websites, buyer portals, search alerts and the companion mobile app; display listings; store and organise agents' contacts, tasks, calendars and transactions.
• To communicate — send transactional emails (account, password, invitations, lead notifications), listing alerts you subscribe to, and marketing emails or campaigns from the agent you work with. You can unsubscribe from marketing email at any time using the link in the email.
• To publish content you ask us to publish — post listing announcements to an agent's connected Facebook Page and Instagram account according to the rules the agent configures; send eCampaigns; render marketing designs.
• To recognise you when you return — keep you signed in, remember preferences and saved searches.
• To generate content and insights — our AI assistant may process listing data, market statistics and the text an agent provides to draft marketing copy, reports and summaries.
• To maintain, secure and improve the Services — monitor performance, debug problems, prevent abuse and fraud, and understand how features are used.
• To comply with law and enforce our terms, and to meet real estate record-keeping obligations.

We do not sell personal information, and we do not use information obtained from Meta or Google to build advertising profiles or to serve third-party advertising.

4. Facebook & Instagram (Meta) integration

• What we access. Using Facebook Login we request permission to see the Pages you manage, read basic engagement information, publish posts to those Pages, and read and publish to the Instagram Business account linked to a Page (Meta permissions: pages_show_list, pages_read_engagement, pages_manage_posts, instagram_basic, instagram_content_publish, business_management).
• What we store. Your Facebook name and user ID, the list of Pages you manage with their names, IDs and pictures, the linked Instagram account ID and username, and the access tokens Meta issues to us. Tokens are stored encrypted. We also keep a log of the posts Stark Flow published for you (the caption, image, and the Facebook or Instagram post ID) so you can review, retry or remove them.
• What we do with it. We use this access only to publish the posts you configure (for example "Just Listed", "Open House", "Price Reduction" or "Just Sold" announcements about your listings), to delete Facebook posts when you have turned on automatic deletion, and to show you connection status. We do not read your personal Facebook profile, friends, messages or private content, and we do not post anything you have not enabled.
• Your control. You can turn off any category, or disconnect Facebook and Instagram entirely, at any time from Marketing → Social Integration in Stark Flow. Disconnecting revokes our access with Meta and deletes the stored tokens. You can also remove Stark Flow from your Facebook account under Settings & Privacy → Settings → Business Integrations (or Apps and Websites), which immediately stops all posting. Posts already published stay on your Page or account until you delete them there.
• Data deletion. See section 10 for how to ask us to delete the information we received from Meta.

5. Google account integration

If an agent chooses to connect a Google account, Stark Flow accesses only the Google services the agent selects: Gmail (to show emails exchanged with a contact and to send email on the agent's behalf), Google Calendar (to show and create appointments), Google Contacts (to import contacts) and Google Tasks. Stark Flow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to provide these features to the agent who connected the account and is never used for advertising. Agents can disconnect Google at any time from Settings → Integrations in Stark Flow, or from their Google Account permissions.

6. How we share information

We share information only as needed to run the Services:

• Within Stark Company Realtors. Contact and transaction records are visible to the agent who owns them and, depending on role, to office managers and administrators.
• Service providers that process data for us under contract, including cloud hosting and databases (Vercel, Supabase), telephony and text messaging (Twilio), email delivery (Resend), social publishing (Meta Platforms), Google (for connected Google accounts), transaction management and e-signature (SkySlope), design rendering (Polotno), AI text generation (OpenAI), and MLS data providers. These providers may only use the data to provide their service to us.
• Public display. Information an agent chooses to publish — such as their profile, testimonials, listings and social posts — is public by design.
• Legal and safety. When required by law, subpoena or regulatory obligation, or to protect the rights, property or safety of Stark, our users or others.
• Business transfers. If Stark Company Realtors is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction.

We do not sell your personal information, and we do not share it with third parties or affiliates for their own marketing.

7. Text messages (SMS)

If you give us your telephone number on one of our forms and agree to be contacted, a licensed Stark Company Realtors agent may send you text messages about your inquiry — to answer a question, arrange a property showing, or update you on a transaction in progress. These are one-to-one messages between you and your agent, not bulk marketing campaigns.

Message frequency varies and depends on your conversation with your agent. Message and data rates may apply. Reply STOP to any message to opt out at any time, or reply HELP for assistance. Opting out of text messages does not stop your agent contacting you by phone or email about a transaction already underway.

Text messages are carried by our telephony provider, Twilio, which processes them solely to deliver the message on our behalf. Messages between you and your agent are stored in our CRM so that whoever is handling your file has the history of the conversation.

8. Cookies and similar technologies

Stark Flow uses a session cookie to keep signed-in users authenticated, and local browser storage to remember preferences such as views and filters. Our public websites and emails use tracking pixels and tracked links to measure delivery and engagement. We do not use third-party advertising cookies. You can clear or block cookies in your browser settings; the CRM will not work without its session cookie.

9. How long we keep information

We keep account and CRM records for as long as the account is active and as long as needed for the purposes above, including real estate record-keeping requirements that apply to brokerages. Access tokens for connected accounts are deleted when you disconnect the account. Server logs and diagnostics are kept for a limited period. When information is no longer needed we delete or anonymise it.

10. Your choices & how to request deletion of your data

• Facebook / Instagram data. Disconnecting in Marketing → Social Integration deletes your stored tokens, Page list and Instagram account details immediately. If you removed the Stark Flow app from within Facebook, email us as above and we will delete any remaining Meta data and the post log.
• Google data. Disconnecting in Settings → Integrations deletes stored Google tokens; email us to have any cached Google data removed.
• Buyer accounts and alerts. Use the unsubscribe link in any alert email, or email us to close your buyer account.
• Access and correction. Agents can view and edit their own profile in Stark Flow. Clients and contacts may email us to ask what information we hold about them and to have it corrected.
• Marketing email. Every marketing email includes an unsubscribe link. Transactional messages (for example password resets or alerts you asked for) are still sent while your account is open.

11. Security

We use industry-standard safeguards to protect information, including encrypted connections (HTTPS), encrypted storage of third-party access tokens and credentials, role-based access inside the CRM, and hosting providers with independently audited security programs. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Children

The Services are intended for adults and are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. The effective date at the top shows when it was last revised, and the current version is always available at stark-flow.com/privacy. If we make material changes we will notify signed-in users in the application or by email.

14. Contact us

Stark Company Realtors
A trade name of Stark Real Estate Operations, LLC
2980 Arapaho Drive
Madison, WI 53719
Phone: (608) 256-9011
Email: info@starkhomes.com