Privacy policy
Last updated 12 October 2026
Stoop is a private tool used by one family group to search for rental apartments in New York City. It is not offered to the public: only people the group admin has invited can sign in.
What we collect
- Your Google account basics: your name and email address, used to check that you are an invited member and to show who did what.
- Gmail permission (gmail.compose): lets Stoop create drafts and send emails to listing agents from your own Gmail account, only when you ask it to. Stoop does not read your inbox. We store a refresh token, encrypted, so this keeps working between sessions.
- What you do in Stoop: listings you save or discard, notes, search areas, criteria, settings and the emails you send to agents through Stoop.
- Sign-in events: when sign-ins succeed or fail, with your email address partly masked, so the admin can fix access problems.
How it is used
Only to run Stoop for the group: showing and scoring listings, drafting and sending your messages to agents, and the optional new-listings email. We do not sell or rent your data, use it for advertising, or share it with anyone outside the group except the services below.
Google user data
Stoop’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is never used to train AI models and is never transferred to anyone except as needed to send the email you asked Stoop to send.
Services that process data for us
- Supabase (database and sign-in, United States)
- Vercel (hosting)
- Anthropic (Claude reads public listing details to score them and drafts agent emails; your Gmail contents are not sent)
- Resend (sign-in links and the new-listings email)
- Apify (collects public rental listings from StreetEasy and Zillow)
- Google (sign-in, Gmail and maps)
Keeping and deleting data
Data is kept while the group uses Stoop. You can ask the admin to delete your account and data at any time, and you can remove Stoop’s Gmail access whenever you like at myaccount.google.com/permissions. Data is encrypted in transit, and Gmail tokens are also encrypted at rest.
Contact
Questions or deletion requests: edmaclean@gmail.com.