ohm ("ohm," "we," "us") is a product of SUM28. ohm is a sign-in and reporting instrument for real estate open houses: a licensed agent runs it at an open house, visitors sign in on a tablet or their phone, and the agent gives the seller a measured report of who attended. This policy explains what personal information we collect, how we use it, and the choices and rights you have. It applies to open-house visitors, to the agents and brokerages who use ohm, to sellers who receive reports, and to people whose information appears in listing materials.
Personal information is governed by this policy. Non-personal measurements of an open house (such as attendance counts, dwell time, and market benchmarks) are governed by our Terms and content license, not by this policy.
From open-house visitors, when you sign in. Your name, your email address and/or phone number, whether you identify as a buyer, a neighbor, or a fellow agent, and a small closed set of intent fields you choose from (such as budget range, timeline, and whether you are already working with an agent). We record the consent language shown to you, the language you viewed it in, and the time you signed in, together with basic technical information such as device type and IP address. We do not collect free-text notes about visitors.
From agents, brokers, and staff who use ohm. Your account details, your DRE license number, your responsible broker information, brokerage settings, an optional profile photo, and billing information processed by our payment provider (Stripe). We do not store full card numbers.
Information embedded in listing materials. Photos, disclosures, inspection reports, and similar documents an agent uploads may contain personal information about sellers, occupants, or third parties. We treat that information as excluded personal information: it is not part of our analytics, and our default is to redact or de-identify it before any secondary use.
Information we derive. Non-personal measurements such as attendance, timing, and neighborhood-level market benchmarks.
We use information to operate the kiosk sign-in, deliver property information to visitors who ask for it, generate the seller's report, and run agent accounts and billing.
We do not sell your personal information, and we do not sell leads. We do not sell or share open-house visitors' personal information. Our market-insight and benchmarking products are built only from non-personal and de-identified data.
We send messages only within the consent you gave — email and text message consent are captured separately, never bundled — and we honor opt-outs. You can reply STOP to a text or use the unsubscribe link in an email at any time.
Where we use data to improve or develop our products, including any machine-learning work, we use only de-identified and aggregated data. We never use excluded personal information, and we never use third-party copyrighted works without permission for that purpose.
Open-house visitors sign in against a versioned, plain-language consent notice, presented in the language you choose. Text-message marketing is always a separate checkbox and is never required to sign in — and signing in is never required to tour a home. We keep an exact, tamper-evident record of the consent language you agreed to. You can withdraw consent for a channel at any time by opting out, which adds you to our do-not-contact list for that channel.
We share personal information only with service providers who work on our behalf under contract — for example, our email and text-message senders, our hosting provider, and our payment processor — and only as needed to run the service. We may disclose information where required by law or to protect rights and safety, and to a successor if our business is transferred, who would remain bound by this policy. We do not sell or share your personal information to third parties for their own purposes.
Our market-insight products are built from de-identified data. As required by California law (Civil Code §1798.140(m)), ohm publicly commits that, for any information we maintain in de-identified form, we will: (1) take reasonable measures to ensure the data cannot be associated with a consumer or household; (2) keep and use the information in de-identified form and not attempt to re-identify it, except in a good-faith test solely to confirm de-identification works; and (3) contractually require anyone we share it with to do the same.
We also publish market outputs only at neighborhood level or broader, with minimum-count thresholds and small-group suppression, and we do not reconstruct the underlying listing materials or re-identify any individual.
California residents (CCPA/CPRA). You have the right to know and access the personal information we hold about you, to delete it, to correct it, to opt out of any sale or sharing, to limit the use of sensitive personal information, and to not be discriminated against for exercising these rights. To make a request, contact us at privacy@sum28.com. We verify requests and respond within 45 days; an authorized agent may make a request on your behalf.
How deletion works. When we delete a visitor's information, we remove personal identifiers. Certain records are retained where the law requires it: our do-not-contact (opt-out) list, so your opt-out keeps working; our tamper-evident consent record, kept as legal evidence; and advertising records we are required to keep. These narrow exceptions are how privacy law expects opt-outs and consent proof to be preserved.
Sensitive information. We handle any sensitive information that appears in listing disclosures under the redaction practices above, and we do not use it for profiling or targeting.
ohm's data model excludes protected-characteristic fields from our analytics and exports. We do not profile or target on protected characteristics.
ohm is intended for adult open-house visitors and real estate professionals. It is not directed to children, and we do not knowingly collect personal information from children under 13.
We protect information with encryption in transit and at rest, scoped access controls, and sign-in tokens that are stored only as one-way hashes. The tablet sign-in token is deliberately limited so it cannot read other visitors' information. If a breach affecting your personal information occurs, we will notify you as required by law.
We host data in the United States (Amazon Web Services, US West region). ohm is offered as a California-first product for U.S. real estate.
We keep information only as long as needed for the purpose it was collected or as the law requires, and then delete or de-identify it. Open-house attendance records are kept as a business record for the seller's report and for compliance traceability.
We will post any material changes here and update the effective date. For any privacy question or to exercise a right, contact SUM28 at privacy@sum28.com.
Effective date: July 8, 2026.
SUM28 · privacy@sum28.com