Privacy Policy
This Privacy Policy explains how LISTA CRM collects, uses, and protects your personal and business data.
This Privacy Policy explains how Lista CRM collects, uses, discloses, and protects personal information and business-related data when you use the Lista CRM platform, websites, microsites, integrations, and related services (collectively, the “Platform” or “Services”). Lista CRM is operated by E-Systematic LLC (“Lista CRM,” “we,” “us,” or “our”).
This Privacy Policy applies to information we collect when:
By accessing or using Lista CRM, you acknowledge the practices described in this Privacy Policy.
This Privacy Policy applies to personal information and related data processed by Lista CRM in connection with the Platform. Depending on the context, Lista CRM may process information:
If you are a visitor, lead, buyer, seller, or consumer interacting with a real estate professional’s Lista CRM-powered microsite or form, some of your information may be processed by Lista CRM on behalf of that customer.
Depending on how you use Lista CRM and which features are enabled, we may collect the following categories of information:
We may collect information such as:
We may process CRM data that you or your authorized users upload, import, create, sync, or manage through the Platform, including:
If you use Lista CRM microsites or customer-facing features, we may collect information submitted by visitors, leads, and end users through those experiences, including:
We may process communications data related to your use of the Platform, including:
If you connect Facebook, Instagram, or other supported third-party services, we may receive information made available by those services based on the permissions you grant and the functionality you enable. Depending on the integration, this may include:
If you enable MLS / IDX, listing search, listing detail, market reports, or related real estate data features, we may process listing-related information, search activity, listing references, and compliance-related data needed to operate those features.
We automatically collect certain technical and usage information when you access or use the Platform, including:
To support reporting, lead attribution, microsite analytics, routing, and related functionality, we may collect and process information such as:
We and our service providers may use cookies, pixels, tags, local storage, and similar technologies to operate the Platform, remember preferences, analyze usage, improve performance, and support security and reporting. More information is provided in Section 10 below.
We may use the information we collect for the following purposes:
We do not sell personal information.
Depending on the applicable law and the context in which information is processed, Lista CRM may rely on one or more legal bases for processing, including performance of a contract, legitimate interests, consent, and compliance with legal obligations.
If you use Lista CRM to collect, upload, import, store, or communicate with leads, contacts, buyers, sellers, or other individuals, you are responsible for ensuring that you have the notices, permissions, consents, and other lawful bases required by applicable law to collect and use that information and to communicate with those individuals.
Lista CRM may allow customers to send SMS messages through supported features or third-party messaging providers.
If you use SMS functionality through Lista CRM, you are solely responsible for obtaining all legally required consent before sending messages and for complying with applicable messaging, telemarketing, privacy, and carrier rules, including the U.S. Telephone Consumer Protection Act (TCPA) and A2P / 10DLC requirements where applicable.
Recipients may be able to opt out of SMS communications, and customers are responsible for honoring opt-out requests as required by law and provider rules.
If you connect Lista CRM with Meta services such as Facebook or Instagram, or with other third-party platforms, we may receive limited information from those platforms based on the permissions you grant and the integrations you enable.
We use such information only to support the Platform and requested functionality, including account connection, lead import, asset synchronization, reporting, communications, and related CRM workflows.
We do not sell Meta user data and do not disclose Meta data to third parties for their own advertising or resale purposes. Our use of information received from Meta APIs is intended to comply with applicable Meta Platform Terms, Developer Policies, and other platform requirements.
Please note that third-party platforms control the data they make available, and may change their APIs, permissions, features, or policies at any time.
We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, misuse, loss, alteration, or disclosure. These measures may include access controls, authentication measures, logging, vendor management, secure infrastructure practices, and other security controls appropriate to the nature of the Services.
However, no system, network, or transmission method is completely secure, and we cannot guarantee absolute security.
You are responsible for protecting your account credentials, devices, and connected third-party accounts, and for maintaining appropriate internal access controls for your team or organization.
We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:
Retention periods may vary depending on the type of information, the customer relationship, the nature of the feature being used, legal obligations, and operational requirements.
If you close your account or request deletion, we may retain certain information as permitted or required by law, for legitimate business purposes, or for backup and security purposes for a limited period.
Depending on your location and applicable law, you may have certain rights regarding personal information, including the right to:
If you are a California resident or a resident of another U.S. state with an applicable privacy law, you may have additional rights under that law, subject to any exemptions or limitations that apply.
If Lista CRM processes your information on behalf of one of our customers (for example, if you submitted your information through a real estate professional’s Lista CRM-powered form or microsite), you may need to direct your request to that customer in the first instance, because they may control the relevant CRM data.
To submit a privacy-related request, contact info@listacrm.com.
If you used Facebook or Instagram in connection with Lista CRM and would like data associated with that integration deleted, you may contact info@listacrm.com with your request details and the relevant account information. We will review and process requests in accordance with applicable law, our role in the processing, and applicable platform requirements.
Lista CRM is intended for use by businesses and professionals and is not directed to children under 18. We do not knowingly collect personal information directly from children in a manner that requires parental consent under applicable law.
If you believe that a child has provided personal information to us inappropriately, please contact us so that we can review and take appropriate action.
Lista CRM is operated from the United States and may process or store information in the United States or in other jurisdictions where our service providers operate. By using the Platform, you understand that your information may be transferred to and processed in jurisdictions that may have data protection laws different from those in your country or state.
We may update this Privacy Policy from time to time. If we make material changes, we may post the updated version on our website, update the effective date, or provide additional notice where required by law. Your continued use of Lista CRM after the effective date of an updated Privacy Policy means that you acknowledge the revised policy.
If you have questions about this Privacy Policy, your information, or Lista CRM’s privacy practices, you may contact us at:
If you are submitting a privacy or deletion request, please include enough information for us to verify and process your request.
Lista CRM, operated by E-Systematic LLC, offers optional integrations with Google services. This section explains what data we access from your Google Account, how we use it, and how you can remove it. It applies only when you choose to connect a Google service.
If you sign in with Google, we receive your name, email address and profile picture (scopes: openid, email, profile). We use this information only to create your account, sign you in, and show your name and photo inside Lista CRM.
When you connect Google Calendar, Lista CRM requests permission to view and edit events on your calendars (scope: https://www.googleapis.com/auth/calendar.events). We use this access only to sync your Lista CRM appointments and tasks with your Google Calendar, at your request. We keep event data only as long as needed to show and sync your schedule.
When you connect a Google Ads account, Lista CRM requests permission to manage your Google Ads campaigns (scope: https://www.googleapis.com/auth/adwords). We use this access only to:
We keep Google Ads data only as long as needed to show it to you in Lista CRM.
OAuth access and refresh tokens are stored encrypted. Google user data is accessed only by the Lista CRM features you connected, and only by authorized personnel when needed for support, security or legal reasons.
We do not sell Google user data. We do not use it for advertising, and we do not use it to develop, improve or train generalized artificial intelligence or machine learning models. We do not share it with third parties, except service providers needed to run Lista CRM (such as hosting), who are bound to protect it, or when required by law.
You can disconnect Google Calendar, Google Ads or Sign in with Google at any time in Lista CRM Settings → Integrations, or at https://myaccount.google.com/permissions. When you disconnect, we delete the stored tokens and the Google Calendar event data or Google Ads data we hold for your account. To request deletion of any Google data, email info@listacrm.com. We will complete the request within 30 days.
Lista CRM’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
