Privacy, in plain English.
Effective August 13, 2026 · Track to Keys is a product of Surfstung Systems, Charleston, SC.
The short version
- · We never sell your data. Nobody's data, ever.
- · No ad trackers, no third-party analytics scripts — which is why there's no cookie banner.
- · Deal information belongs to the agent's account and the people they share it with. That's the whole flow.
- · The app never sends texts or emails on anyone's behalf — messages are drafts a human sends.
- · Want something corrected or deleted? Ask. It happens.
What we collect, and why
Agents create an account with an email and password, and add their profile (name, phone, firm, optional headshot and socials). Their deals hold what a deal needs: property addresses, contract dates, and the contact information of the people working the transaction — clients, co-op agents, lenders, attorneys, vendors.
Clientsdon't create accounts. A client's portal is a private link from their agent. If a client taps “yes” to text updates, we record that choice with a timestamp — the client's own tap, on their own device.
Visitorswho sign in at an open house or send a message from an agent's page are handing that agent a lead — name, contact info, and the message. It goes to that agent, and no one else.
Signed disclosures(South Carolina's brokerage-relationships form) are kept permanently with their audit records — the signer's typed name, timestamps, and technical details of the signing — because a signed legal record is only useful if it lasts. Both the agent and the signer keep access.
What we don't do
We don't sell, rent, or trade personal information. We don't run advertising trackers or third-party analytics on these pages. We don't send marketing to clients or leads. The app never texts or emails anyone by itself — every message is a prefilled draft that a human reviews and sends from their own phone or email.
Cookies
Only the functional kind: keeping an agent signed in, remembering a demo sandbox, and remembering what a portal visitor has already seen so the bell can show what's new. No advertising or cross-site tracking cookies — which is why you didn't have to dismiss a banner to read this.
Where data lives
Account data is stored with Supabase (our database provider) on servers in the United States, and the site is served by Vercel. Push notifications, if an agent turns them on, go through their phone platform's push service. These providers process data to run the service — not for their own purposes.
Your choices
Clients: your agent controls your portal — ask them to correct or remove anything, or to stop text updates (or just tell them to stop texting; that works too). Agents: you can edit or delete deals, contacts, and leads in the app anytime. Anyone can reach the operator at info@surfstung.com to ask what we hold about you, or to have it corrected or deleted. Signed disclosure records are retained as legal records, as the law contemplates.
Changes
If our practices ever change, this page changes first and the effective date moves. We won't quietly get worse.
Track to Keys · A Surfstung Systems product · Terms of Service