Privacy Policy

Last updated July 18, 2026

Plain-language summary: Tourpad, operated by Pixelleaf Studios LLC, helps real-estate agents collect open-house sign-ins and send follow-ups. We hold two kinds of information — the agent's own account details, and the details open-house visitors give an agent at the door. We use that information to run the product for the agent, we don't sell it, and we don't use visitor leads for our own marketing. You can export or delete your data at any time.

This Privacy Policy explains how Pixelleaf Studios LLC, a New Jersey limited liability company (“Pixelleaf,” “we,” “us”), which operates Tourpad, collects, uses, and shares information when you use tourpad.app and related services (the “Service”). By using the Service you agree to this Policy.

1. Two roles, and why they matter

Tourpad serves listing agents. When you sign up as an agent, we are the controller of your account information. When a visitor signs the guest book at an agent's open house, the agent is the controller of that visitor's information and Tourpad is the processor acting on the agent's behalf. In practice: the agent decides what to ask, obtains any consent required, and owns the resulting leads; we store and process them so the agent can use the Service.

2. Information we collect

From agents (account holders)

Account: name, email, password (stored only as a salted hash), and — for Google sign-in — your Google email, name, and profile photo.
Profile & brand: title, brokerage, phone, mailing address, photo, logo, brand color, links, email signature, and anything you write in your profile.
Listings: property details, photos, documents you upload, and open-house schedules.
Billing: plan and subscription status. Card payments are handled by Stripe — we never see or store full card numbers, only the last four digits and Stripe's identifiers.
Usage & device: log data such as IP address, browser type, and pages viewed, used to operate and secure the Service.

From open-house visitors

The information a visitor enters in an agent's sign-in form — typically name, email, phone, buyer preferences (such as budget, desired areas, and bedrooms/bathrooms), and answers to the agent's questions — plus the open house they attended, any questions they ask, and whether they consented to be contacted.
Whether a follow-up email was opened or a link in it was clicked, so the agent can gauge interest.

Property data

When an agent requests it for a listing, we retrieve property information for that address from a third-party public-records provider (RentCast) and cache it. This is data about the property. Any owner-identifying fields (such as owner name or mailing address) are never displayed on the public listing microsite or shared with visitors; they are retained only in our records.

3. How we use information

To provide the Service: create accounts, host sign-in pages and listing microsites, store leads, and send the follow-up and update emails an agent chooses to send.
To generate AI-assisted drafts and answers (see Section 4).
To send transactional and service email from Tourpad — for example, your verification code, account notices, an open-house recap, and (if you opt in) a daily digest of new visitor questions.
To process subscriptions and payments through Stripe.
To secure the Service, prevent abuse, and comply with law.
We do not sell personal information, and we do not use visitor leads for our own marketing.

4. AI-assisted features

On paid plans, Tourpad uses AI to draft follow-up emails and to draft answers to visitor questions. To do this, relevant content — the visitor's question, the listing's details, documents the agent uploaded (such as disclosures), and public property records — may be sent to a third-party AI provider (for example, Google) to generate the draft. We send only the content needed for the task, and our providers are contractually restricted from using it to train their models. AI output is always presented to the agent as a draft; a human agent reviews and decides whether to send it.

5. Sharing and service providers

We share information only with providers that help us run the Service, under contracts that limit their use of it:

Supabase — database hosting.
Cloudflare — file storage (photos and documents) and content delivery.
Vercel — application hosting.
Stripe — subscription billing and payments.
ZeptoMail (Zoho) and Resend — delivery of email we send, including follow-ups sent on an agent's behalf and transactional messages such as verification codes.
Google — optional Google sign-in, Maps, and AI models used for drafting and question answering.
RentCast — third-party public-records property data.

Follow-up emails an agent sends are delivered through Tourpad's email infrastructure on the agent's behalf (showing the agent's name, with replies routed to the agent), or from a Google account the agent connects. We may also disclose information if required by law or to protect rights and safety, and in connection with a merger, acquisition, or sale of assets (subject to this Policy).

6. Email and your choices

Every marketing or follow-up email an agent sends to a visitor includes an unsubscribe link and the sender's postal address, as required by anti-spam law, and where supported a one-click unsubscribe header. Unsubscribing stops future non-transactional emails to that person. Transactional and service messages (like a verification code) are not marketing and are sent only when you take an action that needs one; agents can turn off the optional question digest in their profile.

7. Cookies

We use a single, essential cookie to keep you signed in. We do not use advertising or cross-site tracking cookies. Disabling the session cookie will prevent you from logging in.

8. Data retention

We keep account and lead information for as long as an agent's account is active. Cached property records are retained to avoid repeated lookups. Agents can export all of their leads as a CSV at any time, on any plan, and can delete listings or their account. When an account is deleted, we remove its data within a reasonable period, except where we must retain limited records (for example, billing records) to comply with law.

9. Security

Passwords and verification codes are stored only as salted hashes. Data is encrypted in transit (HTTPS). No system is perfectly secure, but we work to protect information using industry-standard measures. If you believe you've found a vulnerability, email security@tourpad.app.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to certain processing. Agents can exercise most of these directly in the app. Open-house visitors should contact the agent who collected their information, since that agent controls it; we will support the agent in responding. To make a request to us, email privacy@tourpad.app.

11. Children

The Service is for real-estate professionals and is not directed to children under 16. We do not knowingly collect information from children.

12. International users

The Service is operated from the United States. If you use it from elsewhere, you consent to the processing of your information in the United States.

13. Changes

We may update this Policy. If we make material changes, we'll update the date above and, where appropriate, notify you. Continued use of the Service after a change means you accept the updated Policy.

14. Contact

Tourpad is operated by Pixelleaf Studios LLC. Privacy questions: privacy@tourpad.app. General support: support@tourpad.app.

Questions? Email privacy@tourpad.app.