Privacy Policy

Last updated July 6, 2026

Plain-English version: I collect your name, email, phone, and what you tell me on the contact form. I use it to write back to you, send you the newsletter if you ask for it, and remember the conversation if we end up working together. I don't sell your data, and there's no ad pixel here. I share it only with the small list of services that run this site (named below). You can ask me to delete it any time.

Who this applies to

This policy covers tylerlingle.com and the email or phone conversations that come from it. "I" or "we" means Tyler Lingle, a licensed real estate professional in Indiana, and Jarred Porter / Tuscan Agency, who builds and maintains the site.

What I collect

Three buckets:

What you give me directly. Name, email, phone, anything you write in the contact form, replies to email, and your email address if you sign up for the newsletter.
What your browser tells the site. IP address, device and browser type, the page you came from, the pages you visit, and the rough region your IP suggests. Standard server-log data.
What analytics tools record. Google Analytics 4 and PostHog record anonymous usage — which pages get viewed, how long, what links and actions happen on the site. These run only with your consent (see the Cookie Policy) and don't have your name attached unless you've submitted a form that gives me your email.

What I don't collect

I don't ask for your social security number, bank account, or income on this site. If we work together on an actual home purchase, your lender (separate from me) will ask for that. I never ask you to send those over email.

Why I collect it

So I can write back when you reach out.
So I know where you are in the process if we keep talking.
So you get the newsletter if you ask for it, and stop getting it if you ask me to stop.
So I can see what's working on the site (anonymous traffic and usage patterns, not personal tracking).

Who I share it with

Only the small set of services ("processors") that run the site. Here's each one and what it handles:

Google Analytics 4 (Google LLC) — anonymous website analytics. Sets analytics cookies, subject to your consent choice and Google Consent Mode. Doesn't have your name.
PostHog (PostHog, Inc.) — product and event analytics, used to understand how visitors move through the site and which actions happen. Used for event and product analytics only, and it follows your analytics consent choice. When you submit a form that includes your email, that conversion is joined to your site activity so I can understand which sources lead to inquiries.
Make.com (Celonis / Make) — routes your newsletter (Indy Investor Update) signups into the mailing list. Sees the email you submit.
Resend (Resend, Inc.) — delivers the contact-form notification emails I receive when you reach out. Sees your email address and message.
Beehiiv (Beehiiv, Inc.) — runs the Indy Investor Update newsletter. Sees your email if you opt in.
Supabase / Tuscan CMS (Supabase, Inc.) — stores the case studies, journal posts, and general site content. The site reads this content; it does not store your contact leads here.
Vercel (Vercel, Inc.) — hosts and serves the site, and keeps standard server and security logs plus aggregate, cookieless performance metrics.
Instagram / Meta Graph API (Meta Platforms, Inc.) — the site displays my recent public Instagram posts, pulled through Meta's Graph API. This shows my own posts; it doesn't collect information about you.
Roots Realty Co. / @properties — the brokerage I'm licensed under. If we end up working together on an actual transaction, the brokerage handles the paperwork side and may receive your information for that purpose.

Each processor handles your data only to provide its service to me, under its own terms and privacy commitments. I don't sell your information, I don't share it with advertisers, and there is no ad pixel or third-party retargeting on this site. I may also disclose information if the law requires it, or to protect rights and safety.

Cookies and consent

Analytics on this site runs through a geo-aware cookie banner with Google Consent Mode v2: EU/UK/EEA/Switzerland visitors opt in before analytics runs, everyone else gets a notice and can opt out, and Global Privacy Control (GPC) signals are honored automatically as an opt-out. You can change your choice any time with the "Cookie preferences" link in the footer. The full list of cookies is in the Cookie Policy.

How long I keep it

Contact form messages: kept while we're in touch, then up to 24 months after the last contact, then deleted unless you've become a client (in which case brokerage record-keeping rules apply).
Newsletter list: kept until you unsubscribe, then removed within 30 days.
Analytics data: retained per Google Analytics 4 and PostHog defaults.

How I protect it

The site runs over HTTPS, and I use reputable providers with their own security programs. That said, no method of transmission or storage is ever 100% secure, so I can't guarantee absolute security.

Where your data is processed

I'm based in the United States and these providers process data primarily in the US. If you contact me from outside the US, your information will be transferred to and processed in the US, where data protection laws may differ from those where you live.

Your rights

Depending on where you live, you have rights over your personal information. I honor these for everyone who asks.

If you're in California (CCPA/CPRA), you can:

Know what personal information I collect and how I use it.
Access a copy of your personal information.
Delete your personal information.
Correct inaccurate personal information.
Opt out of the "sale" or "sharing" of personal information — I don't sell or share it, but you can still tell me not to, and I honor GPC signals automatically.
Not be treated differently for exercising these rights.

If you're in the EU, UK, or a similar jurisdiction (GDPR-style), you can:

Access, correct, or delete your personal data.
Restrict or object to how I process it.
Request data portability (get your data in a usable format).
Withdraw consent at any time, where processing is based on consent.
Lodge a complaint with your local data protection authority.

If you're a Colorado, Connecticut, Virginia, or other state-privacy-law resident, the rights granted by your state's law apply on top of these. To exercise any of these, email tyler@tylerlingle.com with the request and I'll handle it within the time the law allows (usually 30 days). I may need to verify your request before acting on it.

Your privacy choices

Here's how to control what happens on this site:

Cookie preferences. Use the "Cookie preferences" link in the footer to reopen the banner and accept or decline analytics any time.
Global Privacy Control (GPC). If your browser or extension sends a GPC signal, I treat it as a valid opt-out of analytics automatically — you don't have to do anything else.
Unsubscribe. Every newsletter issue has an unsubscribe link. You can also reply to any email and ask me to take you off everything.
Email me. Send any access, deletion, or correction request to tyler@tylerlingle.com.

Do Not Sell or Share My Personal Information. I do not sell or share your personal information, and I never have. Because there's nothing to opt out of, I don't run a separate "Do Not Sell" page — but I still honor GPC signals and any opt-out request you send me.

Children

This site is not directed to children under 13, and I don't knowingly collect information from anyone under 13. If you think I have, email me and I'll delete it.

If something changes

If I update this policy in any meaningful way (new processor, new data type, new retention rule), I'll change the "Last updated" date at the top. If the change is material, I'll also send a one-time email to anyone on the newsletter list. Continued use of the site after a change means you accept the updated policy.

Contact

Privacy questions: tyler@tylerlingle.com
Site/build questions: jarred@tuscanagency.com

This policy was last updated on 2026-06-16 and is reviewed at least annually.