Privacy Policy

The Finest Homes at Red Rock Real Estate · Last updated: May 5, 2026

This policy explains what information The Finest Homes at Red Rock Real Estate ("we," "us") collects when you visit this site or submit a form, how we use it, and the rights you have. We are a licensed Utah real estate brokerage and a TCPA, CCPA, and UCPA-aware operator. If anything here is unclear, email dan@thefinesthomesutah.com.

1. Information we collect

You give us directly

Contact information when you submit a form: name, email, phone number, and (optionally) buyer type, current state of residence, and listing of interest.
Consent record when you check our consent box: a timestamped record of the page URL, the disclosure text shown, and the user agent of your browser.

Collected automatically

Behavioral analytics: page views, scroll depth, listing clicks, time on page, click-through-to-call. We use these to improve the site and understand which listings are getting attention.
Technical metadata: approximate geographic location (city/region/country derived from your IP — we do not store your raw IP, only a salted hash), browser user-agent, and referring URL.
A first-party cookie named bm_anon that gives your browser a randomly-generated identifier so we can recognize repeat visits. The cookie is set on the .thefinesthomesutah.com domain only after you affirmatively interact with the site, and only if your browser is not signaling a Global Privacy Control opt-out.

2. How we use your information

To respond to your inquiry — by phone, text, email, or in person.
To match you to active listings using our Buyer Magnet AI matching engine.
To send marketing communications — but only if you have given us prior express written consent (the consent box on the form). You can withdraw consent at any time.
To improve the site and our service quality — analytics on which content works, A/B tests on copy, etc.
To meet legal obligations — record-keeping required by Utah real estate law, TCPA consent records, and tax/accounting.

3. AI-assisted communications

We operate an AI voice agent named Rex (built on VAPI). Rex may call or text you only if you have explicitly consented to AI-assisted outreach in writing. Rex always discloses at the start of every call that you are speaking with an AI assistant calling on behalf of The Finest Homes at Red Rock Real Estate, a licensed Utah real estate brokerage. This is required by the Utah AI Policy Act (UAIPA) and the FCC's February 2024 ruling treating AI voices as artificial/prerecorded under the TCPA. You may interrupt Rex at any time, and you may request to speak to a human at any time.

4. Third-party services we share data with

Service	Purpose	What data they receive
Supabase (data storage)	Database and edge functions	All form data, encrypted at rest
Cloudflare (network & pixel)	Network protection, pixel proxy	Hashed IP, geo, user-agent, event payload
GoHighLevel (CRM)	Outreach orchestration	Name, email, phone, consent record, engagement score
VAPI (Rex AI agent)	AI-assisted calls (consented users only)	Name, phone, call transcript
Twilio (SMS & calls)	SMS/call delivery	Phone number, message content
Meta CAPI (advertising)	Conversion attribution if you opt-in	Hashed identifiers, event metadata

We do not sell your data. We do not share your data with anyone outside the integrations above without your explicit consent.

5. Your rights and how to exercise them

Texts and calls — TCPA

You can opt out at any time by replying STOP to any text, asking the agent to put you on our internal Do Not Call list during any call, or emailing dan@thefinesthomesutah.com. We honor the National Do Not Call Registry (we scrub every 31 days) and we maintain an internal company DNC list for 5 years per FCC rules.

Marketing email — CAN-SPAM

Every marketing email we send includes a one-click unsubscribe link and our physical mailing address.

Privacy rights — CCPA / UCPA / Global Privacy Control

Right to know what we have on you: email dan@thefinesthomesutah.com and we will respond within 45 days.
Right to delete: same channel. We will delete except where retention is required by law (e.g., real estate transaction records).
Right to opt-out of sale or share: we don't sell your data, but if your browser sends a Sec-GPC: 1 header (Global Privacy Control), we treat that as an opt-out signal automatically. You don't need to do anything else.

6. Data retention

Behavioral events (page views, clicks): retained for 90 days in active storage, archived for 24 months, then deleted.
Lead records: retained as long as you remain an active prospect or client. After 24 months of no activity, your personal data is anonymized; after 36 months, the record is fully deleted.
Consent records: retained for at least 5 years as required by TCPA and FCC AI ruling 24-17.
Real estate transaction records: retained as required by Utah Division of Real Estate (5 years minimum).

7. Security

All sensitive personal information (email, phone, name) is encrypted at rest in our database using pgcrypto with a key stored in Supabase Vault. Access to the underlying data is restricted to service-role credentials held only by our infrastructure operators. Our systems use TLS for all transit.

8. Children

This site is not directed at children under 16. We do not knowingly collect personal information from anyone under 16. If you believe we have, contact us and we will delete the record.

9. Changes to this policy

We will update this policy when our practices change. The "last updated" date at the top is authoritative. Material changes will be communicated via email to anyone who has consented to email contact.

10. Contact

Daniel Stewart, Principal Broker
The Finest Homes at Red Rock Real Estate
162 N 400 E #B202, St. George, UT 84770
dan@thefinesthomesutah.com
(435) 215-4533