Privacy Policy
Last updated: 2026-05-10
This Privacy Policy applies to Rebato, Inc. (operator of ushomerebate.com).
This Privacy Policy explains how Rebato, Inc. (operator of ushomerebate.com) (“we,” “us,” or “our”), collects, uses, shares, and protects personal information of users of our websites, mobile applications, and related real estate services (the “Services”). The Services are operated on the Rebato platform serving consumers and licensed real estate professionals in the United States. This Policy applies to information collected through our public marketplace, our in-house brokerage, our iBuyer program, and our for-sale-by-owner (FSBO) tools.
1. Information We Collect
1.1 Account Information
When you create an account, we collect your name, email address, telephone number, and password (stored as a salted bcrypt hash). For licensed real estate professionals, we additionally collect license number, sponsoring brokerage, state of licensure, and related credentials. For buyers proceeding to a transaction, we collect billing address and, where applicable, mailing address and government-issued identification required for identity verification.
1.2 Search and Activity Data
We log your search queries, saved searches, viewed listings, scheduled tours, and interactions with agents and listings. We use this information to power features such as saved-search alerts, recommendations, and to maintain a tamper-evident, hash-chained compliance event log used for regulatory audit purposes.
1.3 Buyer Broker Agreement and Transaction Data
If you sign a Buyer Broker Agreement (“BBA”) or another transaction document, we collect the executed document, the parties named, the term, the agreed compensation, and any disclosures required by state law or the National Association of REALTORS® settlement. We also collect offer terms, counter-offer terms, inspection results, and closing documents associated with your transaction.
1.4 Payment and Financial Information
Payments are processed by our payment partners (currently Stripe and, where applicable, Plaid for bank verification). We do not store full payment-card numbers on our servers. Card information is tokenized by the payment processor; we retain only the token, the last four digits, the brand, and the expiration date for receipts and refunds.
1.5 Cookies and Similar Technologies
We use first-party cookies for authentication, locale preference, and basic analytics. Third-party cookies, where used, are described in our cookie banner and may be disabled through your browser settings or, where required, our cookie-preference center.
1.6 Device and Log Data
We automatically collect IP address, user-agent, device identifiers, referrer URL, and timestamps for security, fraud prevention, and rate limiting.
2. How We Use Personal Information
- Operate the Services. Provide listings, search, account features, and map functionality.
- Match buyers and sellers with agents. Connect users with licensed agents under sponsorship of a registered brokerage.
- Compliance and audit. Maintain transaction records, license verification, BBA execution, agency disclosures, and rebate or activity-fee calculations for regulatory inspection.
- Anti-fraud and security. Detect and prevent unauthorized access, impersonation, and abuse.
- Communication. Send transaction notifications, saved-search alerts, and, with your consent, marketing communications.
- Legal obligations. Comply with subpoenas, court orders, and applicable federal and state laws.
3. How We Share Personal Information
3.1 MLS Partners and Real Estate Professionals
With your consent or at your direction (for example, when you request a showing), we share contact information with the listing agent, the listing brokerage, and our partner Multiple Listing Services (“MLS”). MLS feeds operate under Real Estate Standards Organization (“RESO”) Web API agreements; data sharing follows the rules of each MLS.
3.2 In-house Agents
Our in-house agents and the brokerages that sponsor them in each state may receive your information when you engage them under a BBA, listing agreement, or referral.
3.3 Lenders, Title and Escrow
For transactions, and only with your consent, we may share information with mortgage lenders, title companies, and escrow providers required to close the transaction. Disclosures to lenders comply with the Real Estate Settlement Procedures Act (“RESPA”) and Truth in Lending Act (“TILA”).
3.4 Service Providers
We use vetted vendors for hosting, payments, document signing, email delivery, customer support, and analytics. These providers are contractually bound to use personal information only as instructed.
3.5 Legal and Safety
We may disclose information when required by law or where we believe disclosure is necessary to protect rights, property, or safety.
3.6 Business Transfers
If Rebato, Inc. is involved in a merger, acquisition, or sale of assets, personal information may be transferred subject to standard confidentiality protections and notice.
We do not sell personal information for monetary consideration. Some sharing for cross-context behavioral advertising may qualify as a “sale” or “sharing” under California, Colorado, or other state privacy laws; if so, we provide an opt-out below.
4. State Privacy Rights (CCPA, CPRA, and Similar Laws)
Depending on your state of residence, you may have the right to (a) know what personal information we hold about you, (b) request deletion of personal information we maintain, (c) request correction of inaccurate personal information, (d) request portability of your data in a machine-readable format, and (e) opt out of the sale or sharing of personal information for cross-context behavioral advertising. These rights are subject to legal exceptions, including records we must retain for compliance purposes (such as the compliance event log) and active or recently closed transactions.
To exercise a right, email privacy@ushomerebate.com. We will verify your identity before responding and will respond within the timeframes required by your state’s law (generally 45 days). You may also designate an authorized agent to act on your behalf.
5. Cookies and Tracking
Our cookie banner allows you to accept, reject, or customize non-essential cookies. Essential cookies (authentication, locale, fraud prevention) cannot be disabled because they are required for the Services to function. Where required, we honor Global Privacy Control (“GPC”) signals as an opt-out of sale or sharing.
6. Data Retention
We retain account information for as long as your account is active and for a reasonable period thereafter. Transaction records, BBA executions, agency disclosures, license verifications, and audit logs are retained as required by federal and state real estate regulations, generally for at least seven (7) years from the close of the transaction. Compliance event log entries are append-only and are mirrored to write-once-read-many (“WORM”) storage as part of our nightly export.
7. Security
We employ administrative, technical, and physical safeguards designed to protect personal information, including TLS in transit, encryption at rest for sensitive fields, role based access control, and regular security review. No method of transmission or storage is perfectly secure; we cannot guarantee absolute security.
8. Children
The Services are not directed to individuals under eighteen (18) years of age, and we do not knowingly collect personal information from children under thirteen (13) within the meaning of the Children’s Online Privacy Protection Act (“COPPA”). If you believe a child has provided personal information to us, please contact us and we will delete the information.
9. Changes to This Policy
We may update this Policy. Material changes will be highlighted at the top of this page for at least thirty (30) days. The “Last updated” date above reflects the most recent revision.
10. Contact and Data Protection Officer
Rebato, Inc. (operator of ushomerebate.com)
Attn: Data Protection Officer
Email: privacy@ushomerebate.com
Compliance email: compliance@ushomerebate.com
Questions? Contact compliance@ushomerebate.com