NAH Management Privacy Policy

Effective Date: May 23, 2026
Last Updated: May 23, 2026

1. INTRODUCTION

This Privacy Policy describes how North American Home Management LLC, a Florida limited liability company, doing business as NAH Management ("NAH Management", "we", "us", "our"), collects, uses, discloses, and protects information when you use nahmanagement.com and any related services (collectively, the "Platform"). NAH Management is a licensed Florida real estate brokerage, license number CQ1074507, Qualifying Broker Albert Wessels, license number BK3656447. This Privacy Policy is incorporated by reference into the Platform Terms of Use. By using the Platform, you consent to the practices described in this Privacy Policy.

2. INFORMATION WE COLLECT

2.1 Information You Provide Directly

  • Identity and Contact Information: name, email address, telephone number, mailing address, contact preferences.
  • Property Preferences: data submitted through the Preference Genome quiz, including price range, bedroom and bathroom requirements, square footage, target neighborhoods, lifestyle factors (walkability, lake access, gated community), must-have features (pool, garage, waterfront, home office), timing, and free-text notes.
  • Seller Submission Data: property address, property type, bedrooms, bathrooms, square footage, year built, description, photos, asking price expectation, and timeline.
  • Inquiry Content: messages you send through contact forms.
  • Identity Verification Tokens: email verification tokens and (when SMS verification is enabled) SMS verification codes.
  • Future Categories: electronic signature data, payment information processed through PCI-compliant third-party processors.

2.2 Information Collected Automatically

  • Device and Connection Data: IP address, browser type and version, operating system, device identifiers, screen resolution.
  • Usage Data: pages viewed, time spent on pages, click and scroll patterns, search queries, session duration.
  • Cookie and Tracking Data: information collected through cookies, local storage, session storage, and similar tracking technologies.
  • Referral Source: the page or source that referred you to the Platform.
  • Authentication Tokens: session tokens and verification tokens used to maintain authenticated state.

2.3 Information from Third Parties

  • MLS Data: property listing information licensed from Stellar MLS through MLS Grid. This is information about properties, not directly about you.
  • Google Maps Platform: geocoding, routing, and place data.
  • Public Records: where relevant to property research.
  • Marketing Partners: aggregate analytics data through Apollo.io and similar services.

3. COOKIES AND TRACKING TECHNOLOGIES

3.1 Essential Cookies and Storage

Required for core Platform functionality including session management, authentication, security (including CSRF protection), and tier-gating. These cannot be disabled without impairing Platform operation.

3.2 Functional Storage

Quiz state persistence in browser sessionStorage and similar mechanisms used to preserve your progress across multi-step forms.

3.3 Analytics

We use Google Tag Manager, Umami Analytics, and Apollo visitor tracking to understand aggregate Platform usage. Analytics data is used in aggregate and de-identified form for service improvement.

3.4 Do Not Track

We honor Do Not Track ("DNT") signals where technically feasible. DNT does not prevent essential tracking required for Platform operation.

3.5 Cookie Controls

You may manage cookie preferences through your browser settings. Blocking essential cookies will impair Platform functionality.

4. HOW WE USE INFORMATION

We use information for the following purposes:

  • Service Delivery: matching properties to your stated preferences, displaying listings, routing inquiries, scheduling communications, providing the TenantMatch experience.
  • Identity Verification and Security: validating email addresses, preventing fraud, securing the Platform.
  • Personalization: tailoring match results and content within Fair Housing constraints (limited to property and location attributes).
  • Communications: sending transactional messages (verification, confirmations), informational messages (matches, updates), and with separate consent, marketing communications.
  • Legal Compliance: complying with obligations under Florida Statutes Chapter 475, IRS reporting requirements (Form 1099 where applicable), court orders, subpoenas, and FREC oversight.
  • Service Improvement: analyzing aggregate, de-identified usage data to improve algorithms, interfaces, and content.
  • Fraud Detection: identifying and preventing fraudulent activity, abuse, and Platform misuse.
  • Regulatory Audit: maintaining records required for FREC audits and licensing inspections.
  • Claim Defense: defending against and responding to claims, complaints, and legal proceedings.

5. LEGAL BASIS FOR PROCESSING

We process information based on:

  • Performance of Contract: to provide the Services you have requested.
  • Legitimate Interests: fraud prevention, service improvement, security, and direct business communications.
  • Consent: marketing communications, optional features, and use of certain third-party integrations.
  • Legal Obligation: FREC record retention, escrow accounting, regulatory compliance, and lawful disclosure requests.

6. SHARING AND DISCLOSURE

6.1 Service Providers (Bound by Confidentiality and Data Processing Agreements)

  • HubSpot Inc.: customer relationship management and pipeline tracking
  • Twilio Inc.: SMS identity verification (future deployment)
  • Resend: transactional email delivery
  • Google LLC: Maps Platform, Google Cloud, and Google Workspace email
  • Stellar MLS and MLS Grid: listing data ingest
  • Apollo.io: outbound prospecting analytics
  • Replit: Platform hosting
  • Authentisign and Form Simplicity: electronic signature (future Tier 2)
  • Stripe: payment processing (future Concierge subscription)

6.2 Affiliated Entities

  • NAH Management LLC (residential property management, same parent ownership)
  • NAH Stone LLC (when relevant to a transaction involving both entities)

6.3 Legal and Regulatory Disclosure

We disclose information when required by law, including in response to subpoenas, court orders, FREC inspections and audits, IRS reporting requirements, Fair Housing complaints, and other lawful requests.

6.4 Business Transfers

In the event of a merger, acquisition, sale of assets, reorganization, or bankruptcy, your information may be transferred to the acquiring or successor entity, subject to the protections described in this Privacy Policy.

6.5 With Your Consent

We share information with listing brokers (after a Tier 2 Representation Agreement is executed), with mortgage, title, inspection, and other professional partners (only with your explicit consent for referrals).

7. NO SALE OF PERSONAL INFORMATION

We do not sell personal information for monetary consideration. We do not engage in "sharing" of personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act, the Florida Digital Bill of Rights, and similar state privacy laws.

8. DATA RETENTION

  • Active Records: retained while your account is active and as needed to provide Services.
  • Real Estate Transaction Records: retained for a minimum of five (5) years from the date of the transaction or such longer period as required under Florida Statutes Section 475.5015.
  • Inactive Marketing Data: deleted upon consent withdrawal or after twenty-four (24) months of inactivity.
  • Anonymized Analytics: retained indefinitely.
  • Backups: rolling ninety (90) days.
  • Deletion Requests: honored within forty-five (45) days unless retention is required by law.

9. DATA SECURITY

We implement reasonable administrative, technical, and physical safeguards to protect your information, including:

  • Encryption in transit using TLS 1.2 or higher
  • Encryption at rest for sensitive data fields
  • Role-based access controls
  • Multi-factor authentication for administrative accounts
  • Vendor security assessments (SOC 2, ISO 27001 where available)
  • Regular security reviews

No system is perfectly secure. We cannot guarantee absolute security. Breach Notification: In the event of a breach of security affecting personal information of Florida residents, we will provide notice in accordance with the Florida Information Protection Act (FIPA), Florida Statutes Section 501.171, including notice to affected individuals and, where applicable, to the Florida Department of Legal Affairs.

10. YOUR PRIVACY RIGHTS

You have the following rights regarding your personal information:

  • Access: request a copy of information we hold about you
  • Correction: request correction of inaccurate information
  • Deletion: request deletion (subject to retention obligations under Section 8)
  • Portability: request a copy in a portable format
  • Opt-Out of Marketing: withdraw consent for marketing communications
  • Opt-Out of Automated Decision-Making: where applicable (see Section 17)
  • Withdraw Consent: where processing is based on consent

To exercise these rights, email legal@nahmanagement.com with the subject "Privacy Rights Request". We will respond within forty-five (45) days. We may extend this period by an additional forty-five (45) days for complex requests, with notice to you. We may request information to verify your identity before fulfilling the request.

You also have the right to lodge a complaint with the Florida Department of Agriculture and Consumer Services or the Federal Trade Commission.

11. CALIFORNIA, EU, AND UK RESIDENTS

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) may provide additional rights including the right to know, right to delete, right to correct, right to portability, right to opt-out of sale/sharing, and right to limit use of sensitive personal information.

If you are a resident of the European Economic Area, United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and UK GDPR may provide additional rights including the right of access, rectification, erasure, restriction, portability, objection, and rights related to automated decision-making.

To exercise jurisdiction-specific rights, email legal@nahmanagement.com identifying your jurisdiction.

12. CHILDREN'S PRIVACY

The Platform is not intended for users under eighteen (18) years of age. We do not knowingly collect personal information from children under thirteen (13) in violation of the Children's Online Privacy Protection Act (COPPA, 15 U.S.C. Section 6501 et seq.). If you believe we have inadvertently collected information from a child under thirteen, contact us at legal@nahmanagement.com and we will delete the information.

13. ELECTRONIC COMMUNICATIONS (TCPA, CAN-SPAM)

By providing your phone number, you consent to receive calls and SMS messages (including those sent through automated dialing systems and prerecorded messages) for transactional and account-related purposes. Marketing communications by phone or SMS require separate express written consent. You may reply STOP to any SMS to opt out or HELP for assistance. Marketing emails include an unsubscribe link. Transactional and account-related messages (verification codes, account notifications, transaction-related communications) may continue after marketing opt-out where required to provide the Services.

14. DO NOT TRACK

We respect Do Not Track signals where technically feasible. Browser-level DNT signals will be honored for non-essential tracking. Essential tracking required for Platform operation (authentication, security, session management) will continue regardless of DNT signals.

15. INTERNATIONAL DATA TRANSFERS

NAH Management is based in the United States. If you access the Platform from outside the United States, your information will be transferred to, stored in, and processed in the United States. By using the Platform, you consent to this transfer. For transfers from the European Economic Area or United Kingdom, we apply Standard Contractual Clauses or other appropriate safeguards where required.

16. THIRD-PARTY LINKS AND SERVICES

The Platform may contain links to third-party websites and services, including listing detail pages on Stellar MLS or other brokerage sites. We are not responsible for the privacy practices of third parties. Review the privacy policies of any third party before providing information.

17. AUTOMATED DECISION-MAKING

The Platform uses algorithmic match scoring based on rule-based filters (price, bedrooms, bathrooms, square footage, neighborhood selection) and keyword-based scoring against listing descriptions. Future enhancements may incorporate large language model technology (such as Google Gemini or OpenAI GPT) to parse free-text preference notes. Algorithmic outputs are advisory only. No fully automated decisions are made regarding housing access, pricing, or eligibility. All material decisions involve human review by NAH Management personnel. Fair Housing compliance is reviewed at the algorithm level to ensure protected-class characteristics do not influence scoring.

18. NOTICE OF FINANCIAL INCENTIVES

A future Concierge subscription tier may be offered as an optional paid service. Pricing is uniform and does not vary based on personal information. We do not engage in "pay for privacy" practices.

19. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Material changes will be communicated by email or Platform notice at least thirty (30) days before the effective date. The "Last Updated" date at the top of this Privacy Policy reflects the most recent change. Material changes affecting how we use existing personal information will require your opt-in consent.

20. CONTACT US

For questions, requests, or complaints regarding this Privacy Policy or our information practices:

NAH Management Privacy Team
Email: legal@nahmanagement.com
Winter Park, Florida

Designated Privacy Contact for Florida Information Protection Act and similar state privacy law inquiries: legal@nahmanagement.com

North American Home Management LLC d/b/a NAH Management
Florida Real Estate Brokerage License CQ1074507
Qualifying Broker: Albert Wessels, License BK3656447