Privacy.

1. Our promise and who we are

Privacy is the point of what we do. We hold the details of your residence in confidence. Apart from our team and the service providers who help us deliver the service, and except where the law requires it, we share nothing without your direction. We never sell your personal information.

Trusound LLC operates idist.com and nycid.com ("IDist"). Questions or requests: support@idist.com. This page describes what we collect, why, and who else handles it.

2. What we collect

• Visiting the sites. Our hosting provider, Google Cloud, keeps standard server logs, including IP address, browser type, pages requested and time, for security and reliability. We use Google Analytics to measure visits (page views), which uses cookies or similar identifiers. The site loads its fonts from Google, so Google receives your IP address and browser details when a page loads.
• Searching buildings. When you search, we log what you type (which may include an address), the building you opened, any results you clicked, answers you give to intake questions, whether the search found a match, an anonymous identifier set by the site, and whether the request looks like a browser, a program or a bot. Emails and phone numbers in what you type are blanked automatically. This log is not linked to your name, email or account, and it stores no IP address or browser details.
• Inquiry form. Your name, your email, the property address and, if you choose, a phone number.
• Record request form. Your name, your email, a phone number if you would rather we call, the address of the residence, and what is ahead.
• Reading form. The address, your name, your email, a phone number if you would rather we call than write, and your answers to the questions. The reading is stored in our content system (Directus) and a PDF is emailed to you.
• Form protection. Our forms are protected by Google reCAPTCHA Enterprise, which receives technical information such as your IP address and how you interact with the form.
• The free list. We collect your email address and when and where you signed up. We use double opt-in: nothing is sent until you confirm. Brevo stores the email addresses of people who join the list or submit forms, and sends our notification emails.
• Membership purchases. Payment is handled by Stripe. We never receive your card number. We store your email, Stripe's customer and payment identifiers, and your membership status and dates.
• The Record. If you request a Record, we collect your name, email, phone, the residence address, the details you give us, and whether you own or are authorized to act for the residence. At the appointment we collect photographs, measurements, notes and documents about the residence, and we may add documents you send us, such as invoices and plans. Your Record is a private agreement between you and us. It is stored in our systems on Google Cloud and can be seen by the staff who deliver the service. Others can see it only if you grant them access or the law requires it. To sign in and view a Record, we use Google's sign-in service, which processes your email address. We do not sell your Record. We may use information from Records, with names, addresses and other identifying details removed, to improve the service and to build general building-level information. You can ask us to remove your personal details from your Record. We will do so where we can, but we may keep payment and accounting records, security and audit logs, and information that has already been de-identified.
• Owner assistant. If you use the assistant in your Record dashboard, your questions, the parts of your Record needed to answer them, and the replies are processed by Google's Vertex AI service. We keep the conversation in our systems.

3. How we use it

We use your information to prepare your reading or Record and your private dashboard, to deliver what you ask for, to communicate with you, to process payment, to keep the sites running and secure, to understand what people search for and improve the service, and to send email you have asked for. We do not sell personal information.

4. Who else handles it

We share your information only with the service providers who help us run the platform, and only as needed: Stripe for payment, Brevo for email, Google for hosting (Google Cloud), reCAPTCHA, Analytics and fonts, and Directus for our content system. Each handles data under its own terms and acts on our behalf. We do not sell or rent your information, and, other than as the law requires, we do not share the identifying details of your residence with anyone without your direction. We may disclose information when the law requires it, or in a sale of the business, with notice to you.

5. De identified information

We may use de identified and aggregated information, in a form that does not identify you or your residence, to develop and improve our services and our reference corpus.

6. How we protect it

We use encryption in transit and reasonable technical and organizational measures to protect your information. The identifying details of your residence are held in confidence, and access is limited to those who need it. No system is perfectly secure.

7. How long we keep it

Search logs are kept while the service operates. List emails are kept until you unsubscribe, and we keep a record of your unsubscribe and consent. Membership and payment records are kept for 7 years for accounting and legal reasons. Form messages are kept as long as needed to respond and for our records. Information for your engagement or platform is kept while it is active, and for as long as needed for the purposes above or as the law requires. You may ask us to correct or remove your personal details, as described in section 8.

8. Your choices

Unsubscribe from any email with the link in it. Write to support@idist.com to ask what we hold about you, or to correct or remove your personal details. We will do so where we can and where the law requires it. We may keep payment and accounting records, security and audit logs, and information already de-identified. We aim to reply within 30 days. Because the search log is anonymous, we cannot look up your searches. If you are a resident of California, the European Union, or the United Kingdom, or of another state with its own privacy law, you may have additional rights, and we honor valid requests where the law requires it. We do not sell personal information.

9. Children

The services are not directed to anyone under eighteen, and we do not knowingly collect their information.

10. Changes and contact

We may update this policy, and changes take effect when posted. The date at the top shows the latest version. We will update this page before accounts are introduced and before any search can be linked to a person. Questions: support@idist.com.