Terms of Service and Privacy Policy

Last Updated: October 2026

This California Notice at Collection and Privacy Policy (“CA Privacy Notice”) applies solely to California residents. Please note, residents of California are afforded the same rights provided in our General Privacy Policy - as all of the processing, use, and collection remains the same - this policy is an addendum used to highlight additional rights.

The CA Privacy Notice does not apply to information we collect in the context of an individual’s interaction with us as a job applicant, employee, contractor, or other role within Compass - for that information please refer to our Employee Privacy Notice, California Employee Privacy Notice or California Applicant Privacy Notice.

California Notice at Collection

The following notice identifies the categories of personal information to be collected from you and the purposes for which the personal information will be used, including whether that information is sold or shared, in accordance with California law.

General Personal Information

Do We collect?	Categories of Personal Information	Purposes for Collection	Sold to Third Parties or Shared with Third Parties for Cross-Context Behavioral Advertising
Yes	A. Identifiers: For example, a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, agent license number and licensing state; date of birth; debit card information; credit card information; IP address; Cookie Session Identifier; or other similar identifiers	To fulfill or meet the reason for which the information is provided Servicing transactions and accounts (e.g.customer verification) Undertaking internal research for technological development and demonstration To share the personal information with service providers to carry out other business purposes	No: Sale Yes: Share as we do use the IP address/cookie session information for advertising and analytical purposes
Yes	B. Personal Information Categories from Cal. Civ. Code § 1798.80(e): For example, a name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information	To fulfill or meet the reason for which the information is provided Servicing transactions and accounts (e.g.customer verification) Undertaking internal research for technological development and demonstration To share the personal information with service providers to carry out other business purposes	No
Yes	C. Characteristics of CA or Federal Protected Classifications: For example, race, religion, national origin), age (40 and over), gender, sexual orientation, medical condition, pregnancy (includes childbirth, breastfeeding and/or related medical conditions), familial status, disability, veteran status, or genetic information	Short-term data use for the current interaction that is not used to build a profile	No
Yes	D. Commercial Information: For example, records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies	To fulfill or meet the reason for which the information is provided Servicing transactions and accounts (e.g.customer verification) Undertaking internal research for technological development and demonstration To share the personal information with service providers to carry out other business purposes	No
Yes	E. Biometric Information	N/A	No
Yes	F. Internet or Other Similar Network Activity: For example, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement	To fulfill or meet the reason for which the information is provided For our internal operation purposes Short-term data use for the current interaction that is not used to build a profile Servicing transactions and accounts (e.g., customer service, maintaining and servicing accounts, customer verification, payment processing) and providing services on behalf of business or service provider Undertaking internal research for technological development and demonstration Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. To share the personal information with service providers to carry out other business purposes	No: Sale Yes: Share as we do use the IP address/cookie session information for advertising and analytical purposes
Yes	G. Geolocation Data: For example, information that can be used to determine a device’s physical location	For our internal operation purposes Fraud and security detection Debugging to identify and repair errors Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. To share the personal information with service providers to carry out other business purposes	No
Yes	H. Sensory or Surveillance Data: For example, audio, electronic, visual, thermal, olfactory, or similar information that can be linked or associated with a particular consumer or household	To fulfill or meet the reason for which the information is provided For our internal operation purposes	No
Yes	I. Professional or Employment-Related Information: For example, compensation or other information required for a transaction	To fulfill or meet the reason for which the information is provided Short-term data use for the current interaction that is not used to build a profile To share the personal information with service providers to carry out other business purposes	No
Yes	J. Education Information (defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, 34 C.F.R. Part 99)): Education records directly related to a student maintained by an education institution or party acting on its behalf, for example, non-public information that can be used to distinguish or trace an individual’s identity in relation to an educational institution either directly or indirectly through linkages with other information	To fulfill or meet the reason for which the information is provided Short-term data use for the current interaction that is not used to build a profile To share the personal information with service providers to carry out other business purposes	No
Yes	K. Inferences drawn from other personal information (e.g., profiles reflecting a consumer’s preferences, characteristics, behavior, or real estate interests)	To customize and personalize your experience on our Services To improve and train our recommendation algorithms and AI tools To deliver targeted real estate recommendations and marketing communications	No

Sensitive Personal Information

Do We collect?	Categories of Sensitive Personal Information	Purposes for Collection	Sold to or Shared with Third Parties for Cross-Context Behavioral Advertising
Yes	Social Security Number, Driver’s License, State Identification Card, or Passport Number	To perform services or provide goods you request and reasonably expect from us To perform services for our business needs such as maintaining accounts, providing customer service, providing financing, verifying customer information, processing payments, providing analytics services, storage, and to fulfill orders	No
Yes	Account log-in, financial account, debit card, or credit card number when provided with any required security or access code, password, or credentials allowing access to an account	To perform services for our business needs such as maintaining accounts, providing customer service, providing financing, verifying customer information, processing payments, providing analytics services, storage, and to fulfill orders	No
Yes	Precise geolocation	To perform services or provide goods you request and reasonably expect from us To detect, prevent, and investigate security incidents involving your information To investigate or curtail malicious, fraudulent, or illegal actions directed at us and to prosecute those responsible To enhance your experience on our website in real time, so long as we do not disclose your information to a third party	No
Yes	Racial or ethnic origin, religious or philosophical beliefs, or union membership	To perform services or provide goods you request and reasonably expect from us	No
Yes	Contents of a consumer’s mail, email, and text messages (unless we are the intended recipient of the communication)	To perform services for our business needs such as maintaining accounts, providing customer service, providing financing, verifying customer information, processing payments, providing analytics services, storage, and to fulfill orders	No
No	Genetic data	N/A	N/A
No	Biometric information for the purpose of unique identification	N/A	N/A
Yes	Health information*	To perform services or provide goods you request and reasonably expect from us (for example, if you require ADA accommodations)	No
No	Information concerning sex life or sexual orientation	N/A	N/A

We may disclose your personal information to the following groups, for the reasons provided in the table above:

• Internet service providers
• Government entities
• Data analytics providers
• Operating systems and platforms
• Cloud storage providers
• Payment processors
• E-mail distribution service providers
• Help Desk service providers
• Financial and accounting service providers
• Cybersecurity service providers
• Customer relationship management tool providers
• Law firms
• Insurers and other parties, if required to do so for claims or dispute purposes
• Banks, investors and other sources of funding, if required to do so for funding purposes

Further, the categories identified as collected in the tables above were collected from the following categories of sources:

• You directly (Your direct inputs or derived automatically from your interactions with our Services, search history, saved listings, and platform usage).
• Our real estate agents
• Advertising networks
• Internet service providers
• Data analytics providers
• Government entities
• Operating systems and platforms
• Social networks
• Data brokers

Please note that we do not collect any sensitive personal information for the purpose of inferring characteristics about any consumer, nor do we sell it for monetary consideration to any third parties.

Opt Outs:

• Your Opt-Out Right: We respect legally recognized browser privacy signals (e.g., Global Privacy Control, or GPC). You can also opt out of the sharing of your personal information for targeted advertising at any time by clicking the “Do Not Sell/Share My Personal Information” link on our website.
  • What is GPC? GPC is a browser setting or extension that acts as a universal "Do Not Sell or Share" signal. When enabled, it automatically tells every website you visit to stop selling or sharing your personal data and to limit targeted advertising—without you having to opt out of each site individually. Note that it is per browser - so if you set it on Mozilla Firefox and switch to Google Chrome (for example), you would have to set it again under Google Chrome.
• Email Opt-Outs: You can opt out of Company marketing emails at any time by emailing us at opt-out@compass.com. You may opt out from an individual Agent by following the opt out instructions within their particular email.

1. Data Subject Access Request (DSAR) Metrics Received Between January 1, 2025 and December 31, 2025

Request Type	Received	Complied With	Denied	# of Days to Complete Request
Access Requests	18	8	10	20
Deletion Requests	178	75	103	15
Correction Requests	5	2	3	13
Do Not Sell My Personal Information Requests	9,608	9,593	15	0
Limit the Sale/Use of Information Requests	N/A	N/A	N/A	N/A

*Requests were rejected exclusively due to inability to verify the requestor. Otherwise, all requests were fulfilled, in whole or in part, unless the requestor did not complete the verification process.

2. What Terms Apply to California Employees and Job Applicants?

If you are a California job applicant, specific terms in the Your California Privacy Rights notice will apply to the collection of your Personal Information.

If you are a California based employee, please refer to the California Employee Privacy Notice for additional information.

3. California Privacy Rights: Shine the Light Law

California’s Shine the Light law (Cal. Civ. Code § 1798.83) permits users of the Services that are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, email us at mydata@compass.com. If you wish to opt-out from any marketing efforts at any time, please send an email to opt-out@compass.com.

4. California Privacy Rights: Online Privacy Protection Act (“CalOPPA”)

California’s Online Privacy Protection Act (Bus. & Prof. Code § 22575) requires operators of a commercial website or online service that collect personally identifiable information as defined under CalOPPA (“PII”) about California consumers through the Internet to satisfy certain requirements. For more information about our tracking practices, please review Section 6 in our Privacy Policy. If you want to review and request changes to the handling of your Personal Information, collected through the Site (as defined in the Privacy Policy or our Services, please send an email to mydata@compass.com.