Legal
Rufkey is built to be privacy-first. This policy describes what we collect, what stays public, and what stays between you and the other party in a transaction.
Last updated: August 19, 2026
Rufkey is a privacy-first peer-to-peer real estate marketplace. This policy explains what information we collect, how we use it, and the choices you have. We collect the minimum information needed to connect sellers and buyers and to keep the marketplace safe.
When you sign in with Internet Identity, we associate your principal with an optional profile (display name and contact email). Listings you create include the details you choose to publish. Messages you send through the marketplace are stored so both parties can review the conversation.
Listing titles, cities, parish/county, state, and descriptions are public so buyers can discover homes. Your street address is never shown publicly until you and the other party mutually decide to share it. Your contact email is shared only when you initiate a conversation or accept an inquiry.
We use your information to operate the marketplace, surface listings and inquiries, prevent abuse, and provide support. We do not sell your personal information to third parties.
Your profile and listings remain for as long as your account is active. You may delete listings at any time. Conversations are retained so both parties maintain a record of the transaction.
Some information is recorded directly on the Internet Computer blockchain rather than only in our active records. This includes offer history (the buyer's principal, the price offered, and the time the offer was made) and the milestone audit trail that records key steps in a deal's timeline. Because this information lives on-chain, it is immutable: it cannot be edited or erased, and it may remain accessible through historical state or archive nodes even after you delete your account. Deleting your account removes your profile, listings, and conversations from the active store Rufkey uses day to day, but it cannot erase on-chain history that was already recorded. If you exercise your right to deletion, please understand that a record of your on-chain activity may persist in historical records that we do not control.
Three categories of records are retained by design and survive account deletion for transaction integrity, audit-trail, and compliance purposes. First, inspection reports attach permanently to the property record keyed by listing id and survive listing edits and re-listings; the report's submitting inspector principal, company name, license number, and submission timestamp are snapshotted at submission time and never refreshed, so the public Inspection History on a listing remains accurate even if the inspector later updates their profile or cancels their subscription. Second, offers are permanent timestamped entries with an immutable buyer principal and submitted-at timestamp; only the offer's status may transition (pending, accepted, rejected, withdrawn, expired) — the buyer principal, price, and submission timestamp never change. Third, your consent records — the documents you agreed to, the terms version you accepted, and the timestamps of each acceptance — are permanently retained even after you delete your account, so we can honor and verify your consent for audit and compliance purposes. These records are retained so that buyers, sellers, any future owner of a property, and regulators can rely on a complete, tamper-evident history of inspections, offers, and consent attached to that account. Retention protects transaction and compliance integrity: a seller reviewing offers, a buyer reviewing a property's inspection history, and an auditor reviewing consent must be able to trust that the history they see has not been retroactively edited or erased.
When you delete your account, Rufkey wipes your side of the following per-user stores from the active records: your user profile; your listings; your inquiries (including the reply threads inside each inquiry); your viewing slots; your recurring scheduling rules; your tracked homes; your saved businesses; your contact messages (including the reply threads inside each message); your analytics events; your attorney, insurer, inspector, contractor, and surveyor directory profiles; your business leads (including the reply threads inside each lead); your business reviews; your business service menus; your business analytics events; your inspection reports; your deal timelines; your offers; and your saved searches. Your consent records are NOT wiped — they are permanently retained for audit and compliance (see “What on-chain data is immutable and why” above). Deletion scopes only to your own principal — no other user's data is touched.
Some records are shared between two parties — for example, a deal timeline links a buyer and a seller, and a business lead links a submitter and a business owner. When you delete your account, Rufkey removes your side of these shared records (your offers, your reviews, your saved searches, your deal timelines, your business leads). However, the other party's copy of a shared transaction record may persist until that party also deletes their account. For immutable on-chain records (inspection reports and offers), the record itself is never erased even when both parties delete their accounts — see “What on-chain data is immutable and why” above. If you are concerned about a specific shared record, please contact the other party or reach out through the contact form in your dashboard before deletion.
You can edit or remove your profile information, delete your listings, and choose when to share contact details. Because Rufkey runs on the Internet Computer, your identity is anchored to Internet Identity and remains under your control.
If you have questions about this Privacy Policy or how your information is handled, you can reach the Rufkey team through the contact form available in your buyer dashboard.
