Privacy Policy

Who we are

HeyListed (operated by Elevenx2 LLC) is a marketing and client-marketing tool for real estate agents, teams and brokerages. Contact: mccoy@elevenx2.com.

What we collect

From business owners and staff: your email address (to sign you in), business details you provide (name, offers, local facts), and photos you send to your HeyListed number or upload.

From clients: only what a client submits on a business's sign-up page or at a showing — typically an email address, first name, and sometimes a phone number — together with their consent to receive marketing email from that business.

Automatically: basic usage events (for example, that a sign-up page was visited) so businesses can see how their marketing performs. We do not run third-party ad trackers.

Link tracking and one cookie: links in a business's posts, emails and newsletter end in a short code (for example ?h=ab12cd34). When a client opens one, we record the visit on our own servers and set a single first-party cookie, hb_v, a random ID, in that client's browser for 30 days. If the same client then asks about buying, selling or a home value within 30 days, the business sees which post or email led to it, so it can tell which marketing pays. The cookie holds no name or contact details, is only set when a client arrives through a tracked link, is not shared with anyone else, and is not used for ads or to follow clients to other sites. Clearing your browser's cookies removes it.

How we use it

To draft and send marketing on a business's behalf (social posts for their approval, and emails to clients who agreed to receive them), to analyze photos so drafts match them, and to show businesses their results. Client lists belong to the business that collected them. We never sell personal information, and we never email clients who haven't consented or who have unsubscribed.

Social account connections

If a business connects a social account (such as a Facebook Page, Instagram professional account, Google Business Profile, or YouTube channel), we store the access credentials those platforms issue and use them for one purpose: publishing content the business has explicitly approved, to the accounts they chose. We do not read private messages, friends lists, or anything beyond what publishing requires. Disconnecting an account in HeyListed revokes our access.

Your Gmail, Outlook and calendar

If you connect your Gmail or Google Calendar, HeyListed uses your Google email address to show which account is connected and to put it in the From line of emails you choose to send from it, uses Gmail's send permission only to send the emails you write and choose to send from it, and uses Calendar's event permission only to add events you ask for. We do not read your email or calendar. Your Google tokens are stored encrypted and used only for these actions. We do not share Google user data with anyone else, use it for advertising, or use it to train AI models. HeyListed's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. Outlook and Microsoft calendars are handled the same way. You can disconnect at any time in Connect other apps, which also asks Google to remove the permission, or at myaccount.google.com/permissions.

Who processes data for us

We use trusted service providers to run HeyListed: Vercel (hosting), Supabase (database and sign-in), Resend (email delivery), Anthropic (AI drafting and photo description), and Telnyx (text messaging). Each receives only what it needs to do its job.

Your choices

Clients: every marketing email includes a one-tap unsubscribe that works immediately.

Everyone: you can ask us what we hold about you, ask us to correct it, or ask us to delete it (see below). California residents have these rights under the CCPA; we honor them for everyone.

Delete your data

Email mccoy@elevenx2.comwith the subject “Delete my data” from the address you want removed, and we will delete your personal information within 30 days and confirm by reply. If you connected a social account, you can also remove HeyListedfrom that platform's app settings at any time, which revokes our access immediately.

Security & retention

Data is encrypted in transit, access is restricted to the business it belongs to, and we keep personal information only as long as an account or client relationship is active (or as the law requires). Questions? Email us — a person reads it.