Privacy

We don’t sell your information. Not even to ADT.

We use service providers to operate NetSheets, as explained below. You choose whether to publish your agent business card.

Net-sheet contacts

When you generate a guest net sheet or buyer estimate, Cantera saves the first name, last name, phone, email, sheet type and submission time. Authorized Cantera staff can view and export these contacts. Creating a new profile or generating a guest sheet does not grant marketing consent. Previously recorded preferences remain on file and may be withdrawn by contacting the office. We do not authorize automated texts or robocalls through NetSheets.

When you generate a sheet while signed in on your own calculator, we save its property address, contact and financial inputs, notes, comparison prices, generation time and available PDFs to your private account history. Each generation creates a separate version. Account-owned records are stored in our database and original PDFs in our file storage; dashboard and download access require the account that created them. Other agents and the team activity dashboard cannot access your private estimate history. Records remain until you delete your saved data in My Account; archiving only hides them from the active list. Guest sheets and sheets made through a shared agent calculator are not added to account history. When a PDF is prepared, a temporary copy is uploaded to our file storage so Download and Open/Print can use a normal HTTPS link. The unguessable link expires after one hour. Expired copies are removed during download-service cleanup. Listing Appointment Packages use the same process. PDFs already downloaded or shared remain with their recipients. Address and tax lookup processing is described below. Using an agent’s shared calculator does not create a new marketing contact from that agent’s prefilled information.

Calculator scenarios

Calculator inputs stay in your browser unless you choose Save scenario. Saved scenarios include the selected calculator, scenario name, optional property address, financial assumptions, calculation-model version and time saved. They are private to the verified account that saved them, including when using income or debt inputs. Reopening and saving creates a separate version. Archiving hides a scenario from the active list; deleting your saved data in My Account removes the scenarios. PDF summaries use your current saved branding and the same temporary download storage described above. Importing a saved net sheet reuses its stored inputs and does not request new property data.

Closing requests

When you request a closing, Cantera saves your contact information, property address, optional file number, requested date and time, signing preferences and notes. Authorized Cantera staff use these details to coordinate and confirm your closing. A scheduling request does not opt you into marketing or reserve a confirmed appointment. Requests are retained as needed to coordinate the transaction and maintain business records; contact the office to correct or request removal of a record. The team may use the file number to review the related file in Qualia. Private Qualia information is available only to authorized Cantera staff, never through the public request form.

If you open scheduling from the calculator, the contact and address fields you entered are temporarily held in your current browser tab to prefill the request. They are removed when the form opens and expire after 30 minutes if unused. They are saved to Cantera only when you submit the request.

Agent Registry

Sign-in is handled by ChatGPT, or by Google or email and password through Supabase Auth. Passwords created for NetSheets are sent directly to Supabase Auth for secure storage and verification; they are not saved in Cantera’s profile or contact database. Cantera receives a verified sign-in email and an account identifier; Cantera does not receive your Google or ChatGPT password. Supabase sessions are stored in your browser so you can stay signed in, and a secure cookie permits access to your private branding images. Sign out on shared devices. Google and Supabase process sign-in under their privacy policies. Your saved profile includes your business contact information, brokerage, title, license, website, optional social-profile links, introduction, brand color and uploaded images; previously recorded marketing preferences may also remain on file. Your profile is private until you turn on public sharing. Authorized staff can view the contact portion for customer relationship management.

If you enable public sharing, anyone with the link can view your business card and its business contact information, headshot, logo and business-card image, and use your branded calculator. Turning off sharing disables future access to those links. Copies already downloaded or shared by others cannot be recalled.

Invitations and account activity

Cantera records account registration and email confirmation, the team member who invited you, your assigned representative, profile completion, last visit, and use of net sheets, buyer estimates, PDF downloads, listing packages and market comparisons. Activity records contain the action and time, not property addresses, financial amounts or estimate notes. Assigned representatives can see their own agents; authorized administrators can see all accounts and assignments. Unregistered contact submissions are labeled separately. An invitation link is remembered for up to 30 days to credit the inviting team member. Employee access is managed in Cantera Workflow. This tracking does not grant marketing consent. Contact the office to request removal of account activity and invitation records.

Images and storage

Images are resized and re-encoded in your browser before upload, removing original image metadata. Profile records are stored in the Site’s database and uploaded images in its file storage. Access to private profiles and images is checked on the server. Information is retained until you delete your profile or request removal; contact records may be retained as needed to provide services and honor contact preferences.

Control your information

Use Agent Registry to update your contact details, turn off public sharing, remove images or delete your profile and submissions linked to that account. Guest submissions are not linked retroactively to an account. To remove a guest contact record, withdraw marketing consent, request a copy or correct information, email Info@canteratitle.com or call (210) 441-3437. We may ask you to verify your identity.

Property reports and saved drafts

When you look up a property, its address is sent to RealEstateAPI to retrieve available public-record property, ownership, tax, financing, listing and related data. Your contact details, proposed sale prices, payoff inputs and notes are not sent to RealEstateAPI. Matched reports are cached on our server for up to 15 minutes; unsuccessful matches for one minute. Reports can be included in PDFs you choose to share. Optional saved drafts remain in local storage on your device until you delete them; they may contain contact information and estimate amounts. Do not save drafts on a shared device.

Property taxes

For Bexar County addresses, we send the property street address to the county’s public tax search to retrieve its annual levy, tax year and current-year balance. Contact information and other estimate inputs are not sent. We cache the matched street address and minimal tax results under a hashed address identifier for up to 15 minutes; unsuccessful lookups are cached for one minute. Lookup sessions remain temporary on our server. RentCast is disconnected. RealEstateAPI tax records may be available in other Texas counties. Missing or older tax records require verification or manual entry. Closing-date proration is calculated in your browser.

Address lookup and service security

Address searches are sent through our server to Google Maps. Google processes requests under its Privacy Policy. You may enter an address manually. Address searches are not saved in our database. A property address is saved when you generate a signed-in sheet or submit a closing request.

To limit abuse, we keep short-lived request counters using daily hashes of network addresses or account identifiers, expiring after two days. Hosting and authentication providers may process service logs and necessary sign-in cookies under their policies. We do not sell these contact records or send marketing messages automatically.

Updated November 3, 2026.