Privacy Policy

Last updated: November 24, 2025

Introduction

MLS Pipeline ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Canva integration service for MLS organizations.

This Privacy Policy applies to all users of MLS Pipeline across the United States and is designed to comply with applicable federal and state privacy laws.

Our Role as a Service Provider

MLS Pipeline operates as a service provider (as defined under the California Consumer Privacy Act and similar state laws) on behalf of your MLS organization. This means:

  • Your MLS organization is the "business" or "controller" responsible for your personal information
  • We process personal information only as directed by your MLS organization and as necessary to provide our service
  • We do not use your personal information for our own commercial purposes beyond providing the service
  • Privacy rights requests (access, deletion, correction) should generally be directed to your MLS organization, who will coordinate with us as needed

Information We Collect

MLS Data

We retrieve MLS data directly from your organization's API when authorized members request it through the Canva app. This includes:

  • Listing information (property details, photos, descriptions)
  • Agent profile information (including membership status)
  • Office and brokerage data

We temporarily cache MLS data to improve performance and reduce load on MLS systems. Additionally, we retain records of data access for analytics and monitoring purposes as described in the Usage Analytics section below.

Authentication Data

We store minimal authentication data to link MLS members with their Canva accounts:

  • MLS member ID
  • Name
  • Email address
  • Canva user ID
  • Canva brand ID
  • Account linking timestamps and session tokens

Usage Analytics

We collect detailed usage data for your MLS organization's analytics dashboard, including:

  • Individual member activity and session data
  • Specific listings accessed by each member
  • Timestamps and frequency of app usage
  • API call details and performance metrics
  • Error logs and system diagnostics
  • Cache hit rates and response times

This data is searchable by member ID and listing ID, allowing your MLS organization to monitor individual usage patterns and system performance.

How We Use Your Information

We use your information solely to provide and improve the MLS Pipeline service:

  • To provide and maintain the MLS Pipeline service
  • To authenticate and authorize member access
  • To display real-time MLS data in Canva
  • To provide analytics and reporting to your MLS organization
  • To improve and optimize our service
  • To comply with legal obligations
  • To detect and prevent fraud or security incidents

Data Sharing and Disclosure

We Do Not Sell Your Data

We do not sell, rent, or share your personal information for monetary or other valuable consideration. We do not "sell" or "share" your personal information as those terms are defined under the California Consumer Privacy Act (CCPA) or similar state privacy laws.

Limited Disclosure for Service Delivery

We may disclose data only in these circumstances:

  • With Your MLS Organization: Usage analytics, adoption metrics, and data necessary for them to fulfill their role as the data controller
  • With Canva: Only as necessary to integrate MLS data into the Canva platform pursuant to their API requirements
  • With Service Providers: Third-party vendors who assist in providing our service (such as cloud hosting providers), bound by contractual obligations to protect your data and use it only as directed
  • Legal Requirements: When required by law, subpoena, court order, or to protect our legal rights, safety, or property
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to your MLS organization

Data Security

We implement industry-standard security measures to protect your data:

  • Encryption in transit and at rest
  • Secure authentication protocols
  • Regular security audits and updates
  • Access controls and permission management
  • Compliance with MLS data security requirements

While we use commercially reasonable safeguards, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information. Because we operate as a service provider on behalf of your MLS organization, most requests should be directed to your MLS organization first.

You may have the right to:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate personal information
  • Deletion: Request deletion of your personal information, subject to legal retention requirements
  • Portability: Receive your data in a portable format
  • Opt-Out: Opt out of certain processing activities (note: we do not sell data or use it for targeted advertising)
  • Disconnect: Unlink your Canva account from your MLS member ID at any time

To exercise these rights, please contact your MLS organization's administrator. You may also contact us directly at privacy@mlspipeline.com and we will coordinate with your MLS organization as appropriate.

We will not discriminate against you for exercising any of your privacy rights.

State Privacy Rights

Residents of certain states have additional rights under state privacy laws. This section provides supplemental information for residents of those states.

California Residents

Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), California residents have specific rights regarding their personal information:

  • Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you
  • Right to Delete: You may request deletion of your personal information, subject to certain exceptions
  • Right to Correct: You may request correction of inaccurate personal information
  • Right to Opt-Out of Sale/Sharing: We do not sell or share (for cross-context behavioral advertising) your personal information
  • Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information for purposes beyond what is necessary to provide the service
  • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

Categories of Personal Information Collected: In the preceding 12 months, we have collected: identifiers (MLS member ID, Canva user ID), professional information (agent/broker status, office affiliation), and internet activity information (usage logs, access timestamps).

Retention: We retain personal information for as long as necessary to provide our services and as required by our agreement with your MLS organization, typically for the duration of the service relationship plus any legally required retention period.

Virginia, Colorado, Connecticut, Utah, and Other State Residents

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with comprehensive privacy laws have similar rights, which may include:

  • Right to access your personal data
  • Right to correct inaccuracies
  • Right to delete your personal data
  • Right to data portability
  • Right to opt out of targeted advertising, sale of personal data, or profiling (note: we do not engage in these activities)
  • Right to appeal if we deny your request (contact privacy@mlspipeline.com)

Because we act as a processor/service provider, please direct requests to your MLS organization first. We will assist your MLS organization in responding to verified requests.

Data Retention

We retain different types of data for different periods:

  • MLS Data Cache: Up to 24 hours for performance optimization
  • Authentication Data: For the duration of your account linkage, plus 30 days after unlinking
  • Usage Analytics: For the duration of your MLS organization's subscription, plus any period required by our agreement with them
  • Terms Acceptance Records: At least 7 years from acceptance, and as long as necessary to establish or defend legal claims

Upon termination of your MLS organization's subscription, we will delete or return data as specified in our agreement with them.

Children's Privacy

Our service is intended for real estate professionals and is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will promptly delete that information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this policy indicates when it was last revised. For material changes, we may require you to re-accept this Privacy Policy (along with our Terms of Use) before continuing to use the service. Your continued use of the service after any changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

Email: privacy@mlspipeline.com
Address: Capstone PropTech LLC (DBA MLS Pipeline)
328 E. Grand Canyon Dr
Meridian, ID 83646

For fastest resolution of privacy rights requests, please contact your MLS organization directly, as they are the controller of your personal information.