Skip to content

Privacy

Last updated June 2026

What we collect

Mortar only activates on a Zillow listing page you choose to analyze. We do not collect your general browsing history and do not track pages you haven't analyzed.

When you use Mortar we collect and store:

Account data — your email address and a count of analyses used, to sign you in and manage your free/Pro limit.
Listing data — for each property you analyze, the public listing details on the page (address, listing URL, price, beds, baths, square footage, and where shown, Zillow's Rent Zestimate and Zestimate).
Analysis results — the estimates we produce for those listings (rent, value, cap rate, cash flow, verdict), retained to power your history and to cache repeat scans.
Technical & diagnostic data — your IP address (used transiently for rate-limiting and abuse prevention) and aggregate scrape/error diagnostics that help us keep the service working.

How we use it

Listing data is sent to our analysis API solely to compute the metrics shown in the extension popup. We use account and technical data to operate the service, enforce usage limits, prevent abuse, and fix bugs. We do not use your data for advertising, and we do not sell or share it.

Where it is stored & who processes it

Your data is stored in a managed PostgreSQL database (Supabase, US region). We rely on a small set of sub-processors to run Mortar:

Supabase — database & authentication.
Vercel — application hosting.
Anthropic — AI rent/value estimation; receives the listing details for a property you analyze, not your account identity, and only when a Zillow estimate isn't available on the page.
LemonSqueezy — payments, as merchant of record. We never see or store your card details.

How long we keep it

Analyses and account data are retained until you delete your account. When you request deletion, your account and all associated data are scheduled for permanent removal after a 21-day grace period (during which you can cancel and keep your account); once that window passes they are deleted and cannot be recovered. Technical and diagnostic logs are retained for up to 12 months and then discarded.

Your rights

Depending on where you live (including under the CCPA/CPRA and GDPR), you may have the right to access, correct, or delete your personal data, and to ask us not to sell or share it — we don't. You can request deletion of your account and all associated records yourself, any time, from the in-app account page at your account page while signed in; deletion is finalized after a 21-day grace period, which you can cancel from that same page. To exercise any other right, or if you need help, email haaris.africawala@gmail.com.

Third-party listing data

Listing details and Zillow's estimates belong to their respective owners. Mortar is not affiliated with, endorsed by, or sponsored by Zillow.