Privacy Policy / 隐私政策

MyListings (mylistings.top) · Last updated / 最后更新:2026-09-02

We are a real-estate listing and 3D/VR tour platform used by real-estate agents in New York. This page describes exactly what we collect, where it lives, who else sees it, and how to get it deleted.
我们是给纽约地产经纪用的房源与 VR 看房平台。这一页如实写明我们收集什么、存在哪里、给了谁、以及怎么删除。

1. What we collect / 我们收集什么

Agent accounts / 经纪账号: email, name, phone number, WeChat ID, company name and avatar (whatever the agent fills in). If the agent sets a password we store only a bcrypt hash, never the password itself. If they sign in with Apple or Google, we store the provider's stable user id and the email address the provider gives us.
邮箱、姓名、电话、微信号、公司名与头像(经纪自己填多少我们就存多少)。密码只存 bcrypt 哈希,从不存明文。用 Apple / Google 登录时,存服务商给的稳定用户 id 和邮箱。

Content uploaded by agents / 经纪上传的内容: listing photos, 360° panoramas, floor plans, listing text, and the raw capture files from the scanning app.
房源照片、360° 全景、户型图、房源文字,以及采集 App 传上来的原始拍摄文件。

Device identifier / 设备标识: when the iOS app signs in, it may report Apple'sidentifierForVendor. We use it only to understand usage. We do not use it for advertising, we do not sell it, and we do not build a device fingerprint out of hardware characteristics in the app.
iOS App 登录时可能上报苹果的 identifierForVendor。只用于了解使用情况:不用于广告、不出售、也不在 App 里拼装设备指纹。

Visitors of public listing pages / 公开房源页的访客: a random id stored in a cookie, a hashed IP address, browser user-agent and language, a coarse city/region/country estimate, how long you stayed on a page, which media you opened (VR tour, video, gallery…), and QR-code scans. We also compute a browser fingerprint hash so a returning visitor can be recognised as the same person even after clearing cookies. It is computed from: how your browser renders a small test image (canvas), your screen width/height/colour depth, device pixel ratio, time zone, number of CPU cores, browser language, and platform string. These are combined and hashed with SHA-256 — we store only the hash, which cannot be turned back into those values.
cookie 里的随机 id、经过哈希的 IP、浏览器 UA 与语言、粗略的城市/地区/国家、页面停留时长、打开了哪些内容(VR / 视频 / 相册…)、扫码记录。我们还会计算一个浏览器指纹哈希, 即使你清了 cookie 也能把同一台设备的访问认到一起。它由以下 7 项合成后做 SHA-256: 浏览器渲染一小张测试图的结果(canvas)、屏幕宽高与色深、设备像素比、时区、CPU 核心数、浏览器语言、平台标识。我们只存这个哈希,它无法还原回上面那些值。

Enquiries / 留资: the name and phone number a visitor types into a contact form.WeChat mini-program / 微信小程序: the WeChat openId, nickname and avatar when someone enters through it. Push / 推送: the browser push endpoint if notifications are enabled.
访客在表单里填的姓名与电话;从微信小程序进来时的 openId、昵称、头像;开启通知时的浏览器推送地址。

Real-estate agents we contact / 我们主动联络的同行经纪: we collect the business contact details of other real-estate agents from publicly available sources (their public agent profile, brokerage website, listing sheet, business card at an event, or a referral) — name, phone number, brokerage / company name, and business email. These people have not signed up for our service; we look them up because we want to work with them. We record only business contact details and our own notes about the working relationship (which stage it is at, when we last spoke, what we sent them). We do not collect their home address, their clients, or anything about their private life.
我们会从公开渠道收集同行地产经纪的业务联系方式(公开的经纪主页、公司网站、房源表、活动上拿到的名片、同行推荐):姓名、电话、公司、业务邮箱。这些人并没有注册我们的服务 —— 我们主动找他们,是因为想跟他们合作。除联系方式外,我们只记自己这一侧的工作记录 (谈到哪一步、最近一次联系是什么时候、给他发过什么)。不收集他们的住址、不收集他们的客户、不收集任何私人生活信息。

2. Browsing history is linked to your email when you register / 注册后,浏览记录会被关联到你的邮箱

This is real and we state it plainly: if you browse the site and later create an account from the same browser, we attach that account's email address to the anonymous browsing record from that browser. It is visible only to platform administrators — it is not shown to the agents who recruit other agents, and it is not shared with anyone outside the company.
这件事我们确实在做,如实写明:你先浏览、之后在同一个浏览器上注册,我们会把这个账号的邮箱挂到那台浏览器此前的匿名浏览记录上。只有平台管理员看得到,不给"发展经纪"的角色看,也不对外提供。

3. Why we collect it / 为什么收集

To run the service: publish listings, generate VR tours, host live VR showings. / 提供服务本身。
To show an agent who looked at their listing and for how long. / 让经纪知道谁看了他的房源、看了多久。
To keep accounts secure (rate limiting, login checks). / 账号安全:限流与登录校验。
To understand product usage. / 了解产品使用情况。
For the agent contact details described in section 1: only to contact that agent about working together (a phone call, a text message) and to send them our listings and case studies so they can refer or share them. Nothing else. / 第 1 节里那些同行经纪的联系方式:只用于就合作本身联络他本人(打电话、发短信), 以及把我们的房源与案例发给他,方便他转介或转发。没有别的用途。

We do not run advertising, we do not use ad networks or ad-tracking pixels, and we do not sell or rent personal data to anyone.
我们不做广告投放、不接广告联盟或追踪像素、不出售也不出租任何个人数据。

Specifically for the agent contact details in section 1: we do not sell, rent or trade them, we do not use them for advertising or ad targeting, and we do not make them available to other agents on the platform — a contact list belongs to the one person who entered it and nobody else on the platform can see it. The only exception is our own platform administrators, who can see the name / phone / company on an internal billing-and-compliance page.
第 1 节里那些经纪联系方式,具体地说:我们不出售、不出租、不与任何第三方交换,不用于广告或广告定向,也不提供给平台上的其他经纪 —— 一份名单只属于录入它的那一个人,平台上别人看不到。唯一的例外是我们自己的平台管理员, 他们在内部的账务与合规页面上能看到姓名 / 电话 / 公司。

4. Where it is stored / 存在哪里

Our database runs on our own server. Photos, panoramas and floor plans are stored on Alibaba Cloud Object Storage (OSS), US region. Location estimates are computed on our own server using a local offline database — your IP address is not sent to any geolocation service.
数据库在我们自己的服务器上;照片、全景、户型图存在阿里云 OSS(美国节点)。地理位置是用本地离线库在我们自己的服务器上算的 —— 你的 IP 不会发给任何地理定位服务商。

OpenAI — listing text (translation, descriptions), panorama images (AI image processing), and outreach message drafts are sent to OpenAI's API for processing. Visitor browsing records are not. / 房源文字(翻译、描述)、全景图(AI 出图)、以及外联消息草稿会送到 OpenAI 处理;访客浏览记录不会。
Tencent Cloud (TRTC) — only during a live VR showing, to carry the real-time audio/video. / 仅在「VR 带看」进行时,用于承载实时音视频。
Alibaba Cloud — object storage and delivery of media files. / 媒体文件的存储与分发。
Zoho — hosts our info@mylistings.top mailbox, so email you send us is stored there. / 托管我们的 info@mylistings.top 信箱,你发给我们的邮件存在那里。
Apple / Google / Facebook — only if you choose to sign in with them; we receive your provider user id, name and email. We request nothing beyond name and email. / 仅当你选择用它们登录;我们只拿到用户 id、姓名和邮箱,不申请任何超出姓名与邮箱的权限。

6. How long we keep it / 保留多久

Account data: as long as the account exists. / 账号数据:账号存在期间。
Listing media: until the agent deletes the listing or the VR tour — deleting a VR tour also deletes its files from object storage. / 房源媒体:直到经纪删除房源或 VR;删除 VR 会连同对象存储里的文件一起删掉。
Visitor events and enquiries: kept while the listing exists, for the agent's own analytics. / 访客事件与留资:随房源存在而保留。
Agent contact details (section 1): kept for as long as we still have a reason to be in touch about working together. We do not run an automatic purge on a fixed schedule — we are telling you what we actually do rather than promising a timer we have not built. What we do guarantee is the request route below: anyone can ask us to delete their details at any time, and we delete them within 30 days and reply to confirm. / 同行经纪的联系方式(第 1 节):保留至我们不再有业务联络的理由为止。我们没有按固定周期自动清理的机制 —— 这里写的是我们实际在做的事, 而不是一个我们还没做出来的定时器。我们能保证的是下面那条请求通道:任何人都可以随时要求删除,我们在 30 天内删除并回信确认。
One exception, and it is deliberate: when someone tells us not to contact them (or asks us to delete their details), we keep a do-not-contact record so that we cannot end up calling them again — for example if the same public list is imported a second time. That record contains only the phone number in normalised form and the date — no name, no company, no email. US telemarketing rules require such records to be kept for 5 years, so it is not deleted together with the rest of the person's data. Keeping less than this would mean we could not reliably honour the request itself. / 有一个例外,而且是故意的:当有人告诉我们不要再联系他(或要求删除资料)时, 我们会留下一条「不再联系」记录,以确保我们不会再打过去 —— 比如同一份公开名单被再导入一次的时候。这条记录里只有归一化后的电话号码和日期, 没有姓名、没有公司、没有邮箱。美国电话营销法规要求这类记录保留 5 年, 所以它不会随其余资料一起删除。留得比这更少,就意味着我们没法可靠地兑现这个请求本身。

7. How to delete your data / 怎么删除你的数据

Email info@mylistings.top from the address on your account, or text/WhatsApp +1 212 561 5197, and say what you want removed — your whole account, or a specific listing, or your visitor record. We will delete it within 30 days and reply to confirm. If you signed in with Apple, Google or Facebook, the same request removes that link too.
用你账号上的那个邮箱写信到 info@mylistings.top,或者发短信 / WhatsApp 到 +1 212 561 5197,说明要删什么(整个账号、某个房源、或你的访客记录)。我们会在 30 天内删除并回信确认。用 Apple / Google / Facebook 登录的绑定关系也会一并解除。

Agents can also delete their own listings and VR tours at any time from the admin dashboard, which removes the stored media immediately. / 经纪也可以随时在后台自行删除房源与 VR,媒体文件会立即从存储中删除。

If we contacted you and you do not want us to / 如果是我们联系了你,而你不希望我们再联系: you do not need an account and you do not need to write a formal request. Any one of these works:
你不需要有账号,也不需要写正式申请。以下任何一种都可以:

Email info@mylistings.top / 发邮件到 info@mylistings.top
Call or text +1 212 561 5197 / 打电话或发短信到 +1 212 561 5197
Just say "stop calling me" on the phone. The person who called you marks you do-not-contact on the spot, and every later outbound action they run skips you. If you want to be certain that nobody else here reaches you from the same public list, ask us to delete your details as well (next paragraph) — a deletion request is recorded company-wide, so a colleague re-importing the same list will not reach you either.
在电话里说一句「别再打了」就够了。打给你的人会当场把你标成「不再联系」, 他之后的每一次对外动作都会跳过你。如果你还想确保我们这边的其他人拿同一份公开名单也联系不到你,请顺便要求我们把资料删掉(见下一段)——删除请求是记在公司层面的,我们这边另一个经纪把同一份名单再导入一次,同样联系不到你。

If you also want your details removed entirely, say so and we delete them — the outreach record and the contact profile — within 30 days and reply to confirm. As explained in section 6, the do-not-contact record (phone number and date only) stays, because that is what stops us from contacting you again.
如果你还希望把资料整个删掉,说一声就行 —— 我们会在 30 天内删掉陌拜记录与联系人档案并回信确认。如第 6 节所述,「不再联系」记录(只有电话号码和日期)会留下来, 因为正是它让我们不会再联系到你。

8. Cookies / Cookie

We use a login session cookie (so you stay signed in), a random visitor id cookie (so an agent can see repeat visits), and a cookie remembering your admin language choice. We do not use advertising cookies.
登录会话 cookie、访客随机 id cookie、后台语言偏好 cookie。没有任何广告类 cookie。

9. Children / 未成年人

This service is for real-estate professionals and their clients; it is not directed at children under 13. / 本服务面向地产从业者及其客户,不面向 13 岁以下儿童。

10. Contact / 联系我们

MyListings (mylistings.top)
17 Allen St, New York, NY 10002, USA
info@mylistings.top · +1 212 561 5197