8 Total
2 High severity
6 Medium severity
0 Low severity
Summary

This document establishes Redfin's data collection, use, and disclosure practices for users accessing the real estate platform's services, including home search, agent services, and related tools. Redfin collects personal data including browsing activity, geolocation, phone numbers, financial documents, device identifiers, and call recordings, and discloses portions of this data to real estate partners and third-party advertising platforms. The policy authorizes users in California and other covered states to submit requests to access, delete, or opt out of data sale or sharing through Redfin's privacy settings or by contacting privacy@redfin.com.

Technical / Legal Breakdown

This document is Redfin's Privacy Policy, effective January 1, 2020 and updated November 13, 2025, governing the collection, use, and sharing of Personal Information across Redfin.com, Redfin.ca, the Redfin mobile applications, and affiliated sites including Walkscore, with the policy stating that use of the Services constitutes acknowledgment that Personal Information will be handled as described. The policy asserts broad collection rights spanning automatically collected technical data (IP address, device ID, geolocation, browsing behavior), account registration data, financial information including loan pre-approval documentation, call recordings, SMS communications, and third-party social media data, with the terms authorizing use of this information for service delivery, targeted advertising on third-party platforms, and sharing with affiliates, service providers, real estate partners, and marketing partners. The policy's authorization to share Personal Information with real estate partners and third-party advertising platforms for tailored content delivery, combined with the statement that public interactive feature content is not subject to the policy's privacy protections, represents operationally significant scope; the policy asserts de-identified data falls outside its protections, though applicable law in some jurisdictions may limit how broadly 're-identification risk' is assessed. The policy engages the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) through a dedicated Section 8 providing California-specific rights including opt-out of data sale and sharing, and references additional U.S. state privacy frameworks in Section 9; Canadian users are addressed through Redfin Unlimited Liability Company, engaging Canadian federal and provincial privacy law. Compliance teams should note that the policy's cross-referencing of the Terms of Use for dispute resolution, damage limitations, and privacy disputes creates interdependency between documents that may affect consumer rights assessments under applicable state and federal consumer protection frameworks.

Institutional Analysis

Institutional analysis available with Professional

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Start Professional free trial
High — 2 provisions
Medium — 6 provisions

Monitoring

Redfin has updated this document before.

Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →

Professional Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Professional free trial

Cross-platform context

See how other platforms handle Behavioral Advertising Data Sharing with Third Parties and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
ePrivacy Directive
European Union
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
VPPA
United States Federal
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured April 19, 2026 06:19 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000234
Version ID CA-V-000763
SHA-256 e2a710982b11350e983a703b71894c98ab19e42d2ff7f8ef16face1457672bcf
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans