Data Security FAQ

• How does Percy Signals protect my clients' data?

Percy Signals is built around a simple principle: we never share your clients' personal data with third-party sites. Client information stays private and is never sold, rented, or exposed to outside publishers, advertisers, or platforms.

• What information does Signals actually use?

When you monitor a client in Signals, we take their email address and convert it into a hashed, anonymized SHA-256 token. A hash is a one-way transformation it cannot be reversed to reveal the original email address. This hashed token, not the client's actual email or identity, is what powers the matching behind Signals.

• How does Signals detect client activity if it doesn't share their information?

Using the hashed email, Signals detects intent-based behaviors like home searches, saved listings, and viewing activity across a broad network of real estate websites and MLS platforms. Because matching happens through the hashed token rather than raw personal data, publishers and platforms in the network never see who the client actually is.

• Is client consent involved?

Yes. Signals relies on consent-based data collection. Activity is only surfaced where the underlying data source has collected it in accordance with applicable consent and privacy requirements.

• What information is explicitly excluded?

Signals is intentionally narrow in scope. It never collects, stores, or uses:

• Social Security numbers
• Financial account information or credit data

Signals is focused on behavioral, intent-based signals not sensitive personal or financial data.

• How do partner sites and MLS platforms handle data on their end?

Each publisher in the network is responsible for defining and disclosing its own data collection and usage practices, and each does so in line with applicable regulations. Percy does not dictate a partner's privacy practices we require that they operate transparently and lawfully, and our own use of the data they surface is limited to anonymized, hashed matching.

• What's the bottom line?

Anonymized, hashed email matching. Consent-based collection. No SSNs. No financial data. Transparent disclosure from every publisher in the network. Signals is designed to give you responsible, privacy-first intelligence not access to your clients' raw personal data.