Privacy policy

Last updated October 16, 2026.

Who we are

Wonderstand is operated by FirstDistro Inc., a Delaware corporation. Wonderstand is the product name.

Wonderstand is a texting assistant for US real estate agents, teams, and brokerages. It replies to new buyer leads by iMessage or SMS, follows up, books showings, and hands the lead to the agent. This policy covers the website, the account, and the texting service.

What we collect

From an agent who opens an account:

• First name, last name, and email address.
• A US mobile number. A number outside the US cannot finish signup.
• A verified alert number, if you set one, so the assistant can text you.
• A sign-in session, including the IP address and the browser, so you stay signed in. Login codes expire after 10 minutes.
• Billing records from Stripe: customer id, subscription id, status, and the end of the current period. We also send Stripe your name and email. The card number is entered on Stripe's page.

From buyers the assistant texts for you:

• Name and phone number.
• Message history, including what they want (area, beds, budget, timing) and the showing details tied to that conversation.
• An opt-out record when they reply STOP, so we do not text that number again.

From the homes you add:

• Listing facts you confirm, such as address, price, beds, baths, and showing times, plus up to 12 photos we store for that home.

If you connect Google Calendar, we store:

• A refresh token, the Google account email, and the permissions you granted. See Google Calendar below.

If you apply on this website, we store the email address you submit. We do not run a separate analytics product, and we do not drop advertising cookies.

Why we collect it

We use this information to:

• Open and protect your account, and email you a login code.
• Text buyers about your listings, follow up, and book showings.
• Hand you price, offer, wire, and legal questions, and text you when something needs you.
• Charge the $199 monthly plan and show whether it is active.
• Email people who asked to join the design-partner list.

Texts and consent

You are responsible for having permission before Wonderstand texts a buyer. The first text says the person can reply STOP to opt out.

Reply STOP to opt out. STOPALL, UNSUBSCRIBE, CANCEL, END, and QUIT do the same. We confirm, and we do not text that number again until the person replies START or UNSTOP. Texting HELP does not send an automatic reply. For help, email hello@wonderstand.ai. Message frequency varies. Message and data rates may apply.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent are never shared or sold to third parties or affiliates for their marketing. A vendor that delivers the message receives the number only to send or receive that text.

Who else handles it

These companies process information for us. We do not sell personal information.

• Cloudflare hosts the site and the service, stores the databases and listing photos, checks the website form and login form with Turnstile, and routes model calls through AI Gateway.
• Blooio delivers iMessage and SMS. It receives the phone number and the message content so the text can be sent or received.
• Google Gemini writes replies. Anthropic Claude is the backup for some planning and writing steps. Both are called through Cloudflare AI Gateway.
• Stripe charges the monthly plan. Card numbers stay on Stripe's page.
• Google Calendar, if you connect it, stores the showing events Wonderstand creates.
• Resend sends the login-code email.
• Firecrawl reads a public listing page when you import one, so we can pull facts and photo links. It does not receive buyer texts.

Google Calendar

If you connect a calendar, we ask Google for permission to see whether times are free or busy, and to create, change, and delete events that Wonderstand itself creates. We also ask for the Google account email. The product uses that connection to add, change, and remove showing events. We do not ask to read every event on the calendar.

Wonderstand's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Calendar data only to provide the showing feature in the product. We do not sell it, use it for advertising, or use it to train generalized AI models. People at Wonderstand do not read Calendar data unless you ask for help, we need to secure the service, or the law requires it.

AI models

Conversation and listing text is sent to the model providers above so the assistant can write a reply. We do not use your information to train our own generalized models, and we do not sell that text. Our code does not send a setting that tells Google or Anthropic to train on the text, or to refuse to. Whether those providers train on API inputs is governed by their terms for the products we call.

Cloudflare AI Gateway logs record token counts, cost, and timing. The code does not put the buyer's phone number in those logs. Whether a message body is stored in the gateway log is a Cloudflare dashboard setting. The application code does not switch that setting off.

How long we keep it

We keep account, buyer, message, listing, and calendar data while the account is open so the assistant can work. Login codes expire after 10 minutes.

Settings will include a Delete account option. Until that option is available, email hello@wonderstand.ai and ask us to delete the account. We erase the account data within 30 days, except what we must keep: payment and tax records, opt-out and STOP lists, and records under a legal hold.

There is no export button. Email hello@wonderstand.ai to request a copy of the personal information we hold for your account.

Security

The site and the service are served over HTTPS on Cloudflare. Sign-in uses a one-time email code. Calendar refresh tokens stay in our database and are not shown in the product. Payment card numbers are entered on Stripe, not on our pages.

Your privacy rights

We do not sell personal information, and we do not share it for cross-context behavioral advertising. If you live in California, the CCPA and CPRA give you the right to know, correct, delete, and receive a copy of personal information, and to opt out of a sale. Other US states give similar rights. Email hello@wonderstand.ai to use them. We will not treat you worse for asking. You may use an authorized agent where your state allows it.

Children

Wonderstand is for real estate agents and the buyers they work with. We do not knowingly collect personal information from children under 13. If you believe we have, email hello@wonderstand.ai and we will delete it.

Changes

We will post updates on this page and change the date at the top. The date is the notice.

Contact

Privacy questions: hello@wonderstand.ai.