MLS Data Retention Policy

This policy describes how Quiver Labs handles "MLS Content" - listing data, photos (URLs and any cached thumbnails), remarks, field values, and any other MLS-supplied information - for workspaces operated under a data license with a Multiple Listing Service (e.g. MLSListings, Inc. for the Bay Area).

It applies only to workspaces configured for licensed real-estate use under a verified Broker license; it does not apply to other Quiver workspaces, which never receive MLS Content.

Quiver stores the minimum MLS Content needed for cross-file aggregation, search, and a file's identity. The rest is re-fetched live from the MLS feed when a user opens a detail view.

What we store on a saved listing or comparable: - Source identifier (which MLS) and external record id - Address, beds, baths, sqft, property type - Sold price + sold date (for comparables) - Listing brokerage and source-provided disclaimer (for attribution) - A cached cover-photo thumbnail (re-fetchable; never the full gallery as bytes)

What we re-fetch live each time it's viewed: - Full photo gallery - Public remarks / descriptions - School data - Current status, price, days on market

Results returned by a live MLS search are held in an in-memory, per-workspace cache for no more than 10 seconds to serve a single user interaction. Search results are never written to disk as files unless an authorized agent explicitly saves an individual listing (e.g. as a CMA comparable or a buyer's tour).

When an authorized agent saves a listing into a workspace (as a comp, a tour, or a property of interest), Quiver creates a file inside that workspace carrying the minimum fields above plus the source attribution. These files are retained for the life of the workspace and can be deleted at any time by their owner or by a workspace admin from the file menu.

A Subscriber may request deletion at any time, including of a single materialized listing, all materialized listings in a workspace, or all materialized listings across every workspace under the brokerage's license. Quiver will purge the requested files within 30 days of the request and send the requester a deletion confirmation.

When a Subscriber's access to the underlying MLS is revoked, or the brokerage's data licensing agreement is terminated, expired, or marked revoked in the Quiver workspace's license record, the affected workspaces are flagged immediately, and all materialized MLS Content is purged within 14 days. A deletion confirmation is available to the MLS on request.

The platform-admin "Purge licensed data" action surfaces in the workspace's License settings the moment the license becomes inactive, so the purge can be executed on-demand and does not depend on the 14-day window.

Quiver uses third-party large language models (Anthropic's Claude family, via the Anthropic API in inference-only configuration) for narrow in-workspace agent features: summarizing user-attached documents, extracting structured fields from natural-language input, and answering scoped questions about a user's own workspace.

• MLS Content may appear in an inference prompt when needed to satisfy a user's specific request; it is never used to train, fine-tune, or update any model.
• Anthropic's Commercial Terms, Section B (Customer Content), state that *"Anthropic may not train models on Customer Content from Services."* Section E.1 (Confidential Information) further classifies Customer Content as Customer's Confidential Information. We have additionally requested a Zero Data Retention agreement for the Quiver Labs organization, which once active eliminates at-rest retention by the model provider beyond what's needed for abuse screening.
• We do not produce or store embeddings or vector representations of MLS Content.
• AI request/response logs in Quiver's operational telemetry are retained for no more than 30 days and are scrubbed of MLS Content before any retention beyond that window.

Every listing displayed in a Quiver workspace, whether in ephemeral search results, the saved-listing detail view, or a comparison view, carries the listing brokerage and source-provided disclaimer, in accordance with the MLS's Display Guidelines.

MLS Content stays inside the controlled environment of the workspace it belongs to. Quiver does not publish, syndicate, or otherwise expose MLS Content to any third party, search engine, or non-Subscriber. There is no public-facing portal: every workspace user is authenticated, and clients access only the workspace their agent has explicitly invited them to.

MLS Content is stored only in Quiver's own per-workspace database, behind access controls. We do not use any external third-party vector database, RAG store, embeddings provider, analytics platform, or logging service that would receive MLS Content or its derivatives.

MLSes, brokerages, and Subscribers may request a deletion confirmation, an audit of our handling of their content, or any other clarification by contacting Quiver Labs at hello@tellquiver.ai. We respond within 5 business days.