What I keep, and why.

Who this covers

This notice covers nicholasar.com, including its tool pages and the client portal. The site is operated by Nicholas Aponte-Rodriguez, a real estate salesperson licensed in Connecticut (RES.0820105, Lewis Real Estate) and Nevada (S.0205850, Keller Williams VIP). The site itself is built and maintained by ASEC Services, LLC, which is not a real estate brokerage and does not receive or use your information for its own purposes.

It applies to anyone who visits the site, sends a message through one of its forms, or signs in to the client portal.

What is collected

Nothing is collected unless you give it or your browser sends it as part of loading a page. The categories are:

When	What
Contact and career forms	Name, email, phone, the state or region you are asking about, what you are looking to do, your message, and the page you sent it from.
Home value request	The above plus the property address and anything you tell me about the home.
Mortgage calculator	The numbers you enter stay in your browser. They are sent to me only if you choose to send the breakdown, together with your name and email.
School question	Name, email, and the area or school you are asking about.
Testimonial	Name, email, state, your rating and your words, and whether you allow publication. Nothing is published without the permission box checked, and you can withdraw permission at any time.
Client portal	Email address used to sign in, name and phone, the files I set up for you, milestones and dates, tasks, messages between us, and any documents you or I upload. Referral partners: their brokerage and the details of each referral they send.
Legend, the site assistant	What you type into the chat, and any name, email, phone, state or message you choose to leave so Nicholas can follow up. Your messages are sent to Anthropic, the company whose Claude model powers Legend, to generate each reply; Anthropic does not use them to train its models. Legend is an AI assistant, not a person, and does not give legal, tax or lending advice.
Bot protection (Cloudflare Turnstile)	The contact forms and Legend use Cloudflare Turnstile to tell people from automated bots without showing a puzzle. Turnstile runs silently in your browser and may collect limited device and browser signals for that purpose only, as described in Cloudflare's Turnstile Privacy Addendum. It does not identify you to Nicholas.
Every visit	The hosting service records standard server logs (IP address, browser type, pages requested, time) to serve the page and protect against abuse. I do not use these to identify you.

None of the site's forms ask for Social Security numbers, financial account numbers or government ID numbers, and when a transaction needs those they go through the brokerage's own systems, the lender or the title company. A document you choose to upload to the portal, such as a bank statement, may contain such details; it is stored only in the private document store described below and shared only as this notice allows.

How it is used

To answer you, to do the work you asked for, and to keep the record a real estate transaction requires. In practice: replying to an inquiry, preparing a home valuation, coordinating a purchase, sale or relocation, keeping you informed through the portal, handling a referral from a partner agent, and, with your explicit permission, publishing a testimonial. Form submissions are also stored in my brokerage contact database so I can follow up.

I do not use your information for advertising to you on other sites, and I do not send bulk marketing email unless you have asked for it.

Who it is shared with

Your information is shared only with the categories below, and only as far as the work requires.

• My brokerages and their parent company. Connecticut inquiries and transactions are supervised by Lewis Real Estate (Scott T. Lewis, Broker, REB.0791414); Nevada by Keller Williams VIP (VIP Real Estate LLC). Form submissions are stored in Keller Williams Command, the contact and transaction system operated by Keller Williams Realty, Inc., under its own privacy policy.
• People in your transaction, at your direction. Lenders, title and escrow companies, attorneys, inspectors, appraisers, cooperating agents and, for a relocation, the agent or team on the other end. Only what each of them needs.
• Service providers that run the site. Website hosting (Vercel), the portal database and file storage (Supabase), form-to-database automation (Zapier), and the email service that delivers portal sign-in links. Each processes information on my instructions and may not use it for anything else. Fonts are loaded from Google Fonts, which receives your IP address when the page loads.
• When the law requires it. To comply with a subpoena, court order, regulator request or a real estate licensing authority, or to protect the rights and safety of a client or myself.

I do not sell your information, and I do not share it with data brokers or advertisers.

Cookies and tracking

The public pages set no cookies and run no analytics or advertising trackers. The client portal stores a sign-in token in your browser so you stay signed in on that device; it identifies your session, not your browsing elsewhere. No third party collects information about your online activity over time and across different websites through this site. Because there is no tracking to switch off, the site does not respond differently to browser "Do Not Track" signals.

If I ever add an analytics tool, this section will say which one and what it records, and the effective date at the top of this page will change.

The client portal

The portal is private. You sign in with a one-time link sent to your email, and you can see only your own files. Documents are stored in a private bucket; every link to a document is generated for you at the moment you open it and expires within minutes, so no document is ever at a public address. I can see everything in your file, as can any assistant I have expressly authorized as an administrator.

The portal holds convenience copies. The brokerage transaction file is the official record of any transaction and is kept under the brokerage's retention rules, which are separate from this notice.

How long it is kept

Form submissions stay in my brokerage contact database for as long as I am in practice unless you ask me to remove them. Portal files are marked closed at the end of a transaction; documents are removed from the portal within 90 days after closing, and the file itself is removed on request or after two years. Server logs are kept by the hosting service for a short rolling period. Published testimonials stay up until you withdraw permission.

Review, change or delete

You can ask at any time to see what I have about you, correct it, or have it deleted. Email nicholasar@kw.com from the address I have for you, or ask me in person, by phone or through a portal message. I will confirm your identity in a way that suits the request and respond within 60 days.

Two limits: I cannot delete information a brokerage or state licensing law requires me to keep for a transaction that took place, and removing you from my contact database means I will not be able to follow up with you.

Sale of information

I do not sell covered information and have no plans to. Nevada law lets you submit a request that your information not be sold; the designated address for that request is nicholasar@kw.com. Such a request will be honored within 60 days, and because nothing is sold, honoring it changes nothing about how the site works for you.

Security

The site is served over HTTPS. Portal data is protected by database rules that limit every signed-in person to their own rows, sign-in is by single-use email link rather than a password that can be reused, and document access is by short-lived signed links. No system is perfectly secure; if I learn of a breach affecting your information, I will tell you and the appropriate authorities as the law of your state requires.

Children

The site is for adults engaged in real estate. It does not knowingly collect information from anyone under 18. If you believe a child has submitted information, email me and it will be deleted.

Changes to this notice

When this notice changes materially, the effective date at the top changes, and portal clients receive a message in the portal describing what changed. The current version is always at nicholasar.com/privacy.html.

Contact