The Ulu Team · Keller Williams Honolulu

Privacy policy

What our website and Oahu Home Search app collect, why, and who else touches it. Written against the code that runs it, so it describes what actually happens rather than what a template says usually happens.

Effective

Draft pending legal review. This document was written from the site’s own code rather than by an attorney, and it has not yet been reviewed by one. It describes what the site actually does, but it should not be relied on as a final statement of the team’s obligations until that review is complete.

Oahu Home Search app

This policy also covers the Oahu Home Search iPhone app. The app and website share an account and connect buyer activity with the assigned agent in The Ulu Team Portal.

  • Sign-in uses Supabase. Apple sign-in can supply an Apple relay email instead of your personal email; Google and email sign-in remain available. Your sign-in session is kept in secure device storage.
  • Saved searches, favorite and shortlisted homes, comparisons and feedback you share, tour requests, buyer Journey details, and messages are associated with your account so you and your assigned team can use them across the app and Portal.
  • Images, files, and documents are uploaded only when you choose them. Conversation attachments and buyer documents are stored privately and made available to authorized participants and team members. Do not include financial account numbers, passwords, or other unnecessary sensitive information.
  • If you enable push notifications, we register your device notification token and your alert preferences. Expo and Apple deliver these alerts; a notification can include a message preview or property update visible on your lock screen. You can change alert categories in Account → Notifications and control lock-screen previews in iPhone Settings.
  • If you allow location access, the app uses your location to center the map when you request it. Location-based map bounds may be sent with listing searches. The app does not request background location access.
  • If you choose Add to calendar, the app requests access needed to save the confirmed tour. It does not read your calendar to build an advertising profile.
  • Public listing photos and map content are loaded from listing and mapping providers. Those providers receive the network and device details needed to deliver the content. Plain-language search text is sent to the search AI provider to produce filters.

To request deletion, open Account → Delete account → Request deletion in the app. The team will complete the request within 7 days and send confirmation to your account email. This covers the shared sign-in account and associated personal app data, including saved homes, searches, messages, and uploads. Access to the website and buyer Portal also ends. Records we are required to retain for a transaction are handled separately. Deletion does not cancel a signed agreement or a scheduled tour.

Who this is

This site, oahuhomesearch.com, is operated by The Ulu Team, a residential real estate team at Keller Williams Honolulu (Hawaiʻi brokerage license RB-21303). Keller Williams Honolulu is the brokerage that holds the licenses under which the team works; each Keller Williams office is independently owned and operated.

The team works residential real estate on Oʻahu. The site is run from Hawaiʻi, is intended for people in the United States, and the services behind it process information in the United States.

What we collect

Only what a form asks for, plus what a web server sees by default. There is no account requirement to browse, and no form on this site is mandatory.

When you fill in a form

  • Your name and email address. Every form on the site asks for both.
  • Your phone number. Contact, showing, buyer-alert, and Home Value request forms require a number and ask you to tick a consent box before we may call or text it. We record that you consented and when. Phone remains optional in your account profile.
  • Whatever you type in a message or comments field.
  • Details specific to the form: a property address and its rough particulars on a home valuation request, the listing you were looking at on a listing enquiry, your timeline if you tell us, and which agent you asked for.
  • Which page you sent it from.

If you create an account

  • Your email address, which is also how you sign in. You can use Google, a password, or a one-time link sent to that address.
  • A first and last name and, optionally, a phone number, asked for once after your first sign-in.
  • Your saved searches: the search criteria themselves, how often you want to hear about matches, and which listings we have already emailed you about, so the same home is not sent twice.
  • The homes you save or react to — Love, Like, or Pass — and a snapshot of that home’s price and address as it stood when you reacted.
  • If you use Home Equity, the mortgage or lien details you choose to enter or confirm: principal balance and its date, loan type, and, when supplied, interest rate, principal-and-interest payment, total payment, next payment date, and maturity date. We also keep whether a balance was entered, confirmed from a statement, updated, paid off, or refinanced so the estimate can be dated and explained.
  • If you choose statement upload, the raw PDF, photograph, or screenshot may contain everything visible on that statement. It is held temporarily in private storage while fields are extracted and you review them. The raw file is deleted from our storage when you confirm or discard it, or by scheduled cleanup after it has been unfinished for 24 hours. The structured fields you confirm remain with your Home Value record until you update or delete them.

Automatically

  • Ordinary web server records from our hosting provider: IP address, the pages requested, timestamps, and browser user-agent. The contact forms also read the connection IP briefly to rate-limit submissions from a single address.
  • If you use the plain-language search box, the text of that query is sent to an AI provider to be turned into search filters. Type an address or a name into it and that is what gets sent, so treat it as a search box rather than a message to us.
  • If you choose Allow analytics, Google Analytics receives page paths, page titles, referral information, approximate location, and browser or device details so we can understand aggregate traffic and which pages are useful. Search-query text is excluded from the page URLs we send, and we do not send the names, email addresses, phone numbers, or messages entered in forms.
  • When a neighborhood guide shows a restaurant carousel, our server asks Google Maps for current place details and your browser loads the selected Google-hosted photographs. Google can receive the IP address and ordinary device and request details associated with loading those photographs. We do not send Google the names, email addresses, phone numbers, or form messages you give us for this feature.

Google Analytics is optional and remains completely off until you choose Allow analytics. We disable advertising storage, Google Signals, and ad-personalization signals. The site does not use Google Tag Manager, advertising pixels, or third-party session recording.

What we do with it

  • Answer you. A form submission is routed to one of the team’s licensed agents, and our inside sales agent is alerted alongside them, so somebody actually responds.
  • Do the real estate work you asked for — valuing a home, lining up showings, or sending listings that match what you told us you wanted.
  • Run your account: keep you signed in, save your searches and favourites, and email you new matches at the frequency you chose.
  • Calculate an informational gross-equity estimate from the home-value estimate and the mortgage balances you provided or confirmed. For an eligible fixed-rate, fully amortizing loan, the site may project the balance forward using the stated rate, principal-and-interest payment, and payment dates; other loans remain dated balance snapshots.
  • Let the team see that you requested an equity review or property-specific net sheet. Exact mortgage balances, rates, payments, and statement files are not copied into our customer relationship manager.
  • Send the email you asked for, and only that: the alerts your saved searches generate, the newsletter if you subscribed, and the sign-in links you request.
  • Keep the site working and defensible — server logs, rate limiting, and diagnosing faults.

If you are already a client of ours working a transaction on the team’s portal, and you sign in here with the same email address, the homes you save, reactions you make, and private property comments you send on this site are added to your file there so the agent you are already working with can see and respond to them. Messages and supported buyer activity synchronize with the assigned buyer file so you can receive team replies in the app and website.

Who else touches it

We use outside services to run this site, and the ones below receive some of the information above in order to do their job. Each has its own privacy terms.

  • Our customer relationship manager, where form submissions land as a contact record with notes, and from which the team’s alert texts are sent. Home Equity sends it only an engagement signal, such as that a balance was refreshed or a net sheet was requested; it does not receive the exact mortgage balance, rate, payment, or statement file.
  • Our accounts, database, and storage provider, which holds sign-in records, saved searches, favourites, reactions, structured Home Value and mortgage details, and any mortgage statement kept temporarily for extraction.
  • Our email provider, which delivers listing alerts, the newsletter and sign-in links.
  • Our listings data provider, which supplies MLS listing data and listing photographs from the Honolulu board. Listing pages and searches query it; your name and contact details are not sent to it.
  • If you click Get RentCast estimate in your Home Value report, we send RentCast the property address and available property type, bedrooms, bathrooms and living area. We do not send your name, contact details or mortgage information. The estimate is requested only on that action, and a recent saved result may be reused.
  • An AI provider receives the text of a plain-language search query to turn it into filters. Mortgage statement reading uses a separate local model on The Ulu Team’s own server, with cloud AI disabled. Statements are processed in memory and are not sent to OpenAI or saved in Leo chat history. The reader returns only limited loan fields for your review, excluding account numbers, borrower names, property addresses, barcodes, and contact details. Our hosting and storage providers still handle transport and temporary uploads.
  • Our map provider, or OpenStreetMap. Loading a map on a listing page fetches map tiles from them, which means your browser contacts them directly and they see your IP address.
  • Google Maps, which supplies the restaurant names, current ratings, review counts, addresses, links and user-contributed photographs shown in neighborhood guides. We filter the returned listings to operational restaurants currently rated exactly 5.0 and order them by review count; Google supplies the underlying content.
  • Our hosting provider, which serves the site and keeps standard server logs.
  • Google Analytics, only after you allow it, which receives analytics events so we can measure aggregate visits and content use. Google processes that information under its own terms and privacy policy.

Google Maps content is handled under the Google Maps Platform Terms of Service and Google handles information under its Privacy Policy.

We may also disclose information where the law requires it, or where we need to in order to establish or defend a legal claim.

Cookies and browser storage

The site uses essential storage for sign-in and site preferences. Analytics storage is optional and remains off unless you choose Allow analytics:

  • A session cookie, once you sign in, which is what keeps you signed in. Sign out and it goes.
  • Small values stored in your own browser, which never reach our servers: one recording that you dismissed the email listing alerts prompt; a capped, expiring list of public homes you recently opened; your most recent listing-search URL and a general summary; and, only if you continue from a Love, Like, or Pass prompt, that pending choice so it can be saved after sign-in. Clearing your browser storage clears them, and the site works normally without them.
  • A browser-storage value records whether you chose Allow analytics or Essential only. If you allow analytics, Google Analytics may set first-party cookies such as _ga and _ga_<container-id> to distinguish visitors and sessions; Google documents a default expiration of up to two years.

Your choices

  • Do not fill in the form. Nothing on this site requires an account or a submission to browse listings, read a guide, or look at the market figures.
  • Choose Essential only in the analytics notice to keep Google Analytics off. You can reopen Analytics settings in the footer at any time; clearing this site’s browser storage also resets the choice.
  • You may leave the phone field blank in your optional account profile. Public contact and request forms require a phone number and your consent before they can be submitted.
  • Every listing-alert and newsletter email carries a working unsubscribe link, and one click is enough — you do not need to be signed in to use it.
  • Change or delete a saved search, or turn its alerts off, from your account at any time.
  • Enter a balance manually instead of uploading a statement. You can update a loan, or mark it paid off or refinanced, from Home Equity. You can also ask us to delete the structured mortgage details associated with your account.
  • Reply STOP to any text message from us to stop the texts.
  • Ask us to correct or delete what we hold about you, using the contact details below, and we will do it where we are not required to keep it.

Security, and its limits

The site is served over HTTPS. Account data is held per-user in our database and scoped so one account cannot read another’s. Sign-in supports Google, an email and password, or a one-time email link; authentication is managed by Supabase. Team credentials and API keys stay server-side and are never sent to your browser.

None of which is a guarantee. No website or transmission over the internet is completely secure, and we cannot promise that information sent to us or held by us will never be accessed by someone who should not have it. Please do not type a Social Security number, bank account number, or full date of birth into a form. A mortgage statement may already display sensitive identifiers; review the upload carefully and redact anything that is not needed if your servicer lets you do so. When a transaction needs separate sensitive documents, your agent and escrow will tell you the secure way to send them.

Children

This site is meant for adults doing adult business, and it is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has sent us something, contact us and we will delete it.

Changes to this policy

When this changes, the new version goes up on this page and the effective date at the top changes with it. If a change materially affects how we use information we already hold, we will say so more loudly than a date change.

Contacting us about this

Email is the fastest route, and there is a form on the contact page if you would rather use one.

daniel@uluteam.comThe Ulu Team, Keller Williams Honolulu, Kapolei, HawaiʻiContact form →