Privacy Notice

Global Privacy Notice

Last Updated: June 24, 2025

As a leading provider of information, analytics, and online marketplaces to the commercial real estate industry, CoStar Realty Information, Inc. and our affiliates (collectively, “CoStar,” “we,” or “us”) respect your privacy and are committed to protecting your personal information. Notice at Collection and Summary of Our Privacy Practices We recommend reviewing our comprehensive Privacy Notice, which is provided below, to gain a detailed understanding of our privacy practices before using our products or services. This summary is intended to offer only a brief overview.

CoStar collects various types of personal information, including contact details, account credentials, communications you send us, and data about your activities when you visit our websites, use our mobile apps, or interact with our other services, allowing us to make inferences about you and your interests. Depending on the products or services you use, we also may collect transactional, financial, and employment details, government-issued identification, geolocation data, and biometric data. We get personal information from you directly, through your use of our products and services, and from other sources, such as public data, credit reporting agencies, and referrals. 

We process personal information to provide our services and operate our business. This includes security and fraud prevention, communication and customer support, business relationship management, service improvement and development, advertising and marketing, research and analytics, and compliance with legal obligations. CoStar will process and retain personal information as long as necessary for these outlined purposes, while accounts are active and for a reasonable period of time afterward, or as required by legal obligations.

CoStar collaborates with vendors and business partners. Some of the personal information exchanged through these engagements and partnerships may be considered a “sale” of personal information under US consumer privacy laws. CoStar also uses personal information for cross-context behavioral and targeted advertising. To opt out, please contact us by the methods set out in the Contact Us section below.

To learn more about CoStar’s privacy practices, please continue reading our Privacy Notice below.

 

Table of Contents

Introduction

1. Types of Personal Information We Collect and Why 
2. How We Collect Your Personal Information
3. How We Use Your Personal Information
4. How We Disclose Your Personal Information
5. International Transfer of Personal Information
6. How We Secure Your Personal Information
7. How We Retain Your Personal Information
8. Your Choices and Rights 
9. Other Important Information 
10. Jurisdiction-Specific Notices 
11. Contact Us

 

Privacy Notice

This Global Privacy Notice (“Privacy Notice”) describes the types of personal information we collect and our practices for using, maintaining, sharing, and protecting it. It also describes the rights and choices you may have with respect to your personal information and how you may contact us about our privacy practices. Our privacy practices may vary among the countries in which we operate to reflect local practices and legal requirements, and specific privacy practices may apply to some of our products and services. By using our products and services, you agree to the collection, storage, use, and disclosure of your personal information as described in this Privacy Notice.

If you are a current or former CoStar job applicant, employee, owner, director, officer, or contractor, please Contact Us for the appropriate privacy policy that describes our collection, use, and disclosure of your personal information.

When using our Services (defined below), you may choose to interact with features from third parties that operate independently from CoStar, such as social media widgets and links to third-party websites. CoStar has no control over and is not responsible for the privacy practices of such third parties. This Privacy Notice does not apply to the extent CoStar does not own or control any linked websites or features you visit or use. We recommend that you familiarize yourself with the privacy practices of these third parties.

This Privacy Notice applies to the CoStar Marketplaces (defined below), CoStar Products (defined below), and any associated websites, products, services, mobile applications, or other websites or applications which we currently own, or in the future may own or control, on which this Privacy Notice is posted (collectively, “Services”). This Privacy Notice does not apply to publicly available information that is lawfully made available to the general public from federal, state, or local government records, unless otherwise provided by law.

CoStar Marketplaces:

Apartments.com and related brands	Homes.com and related brands	Showcase.com
Land.com and related brands	Ten-X.com and related brands	LoopNet.com and related brands
STR.com and related brands	BizBuySell.com and related brands	Off Campus Partners
Belbex.com	OnTheMarket.com	Bureauxlocaux.com

 

CoStar Products:

CoStar Property Professional®	Professional Directory™	CoStar Properties and CoStar For Sale™
CoStar COMPS Professional®	CoStar Marketing Center™	Metropolis™
CoStar Tenant®	CoStar Mobile™	CoStar Portfolio Strategy™
CoStar Suite® with Market Analytics	CoStar Go®	CoStar Investment Analysis™
CoStar News	CoStar Lease Analysis®	CoStar Brokerage Applications
CoStar Connect®	CoStar Lease Comps™	CoStar Information and Analytics
CoStar Real Estate Manager	CoStar Risk Analytics	CoStar For Lease ™
CoStar Loan, Capital Markets	CoStar Advanced Reporting	CoStar Advisory Services
Matterport	Visual Lease

 

1. Types of Personal Information We Collect and Why 

CoStar may collect the following types of personal information. CoStar collects various information that can be used to identify you, directly or indirectly, when you use the Services. The following table provides examples of the types of personal information that we collect from you and how we use that information. In accordance with applicable laws, we recognize your rights with respect to your personal information, as described more fully in the “Your Choices and Rights ” section of this Privacy Notice.

Category	Examples of Personal Information	Purpose and Legal Basis for Collection and Use
User Activity & Interaction Data	Log-on activity, search history, saved searches, viewed properties and listings, advertiser message engagement, user interactions (including video clips of your online interactions such as cursor movements, scrolling activity, or downloads), audio or video from customer service calls, calls that you host or attend on Costar Products, or other calls you place to inquire about certain listings on the Services. For example, we collect personal information from you contained in any inquiry you submit to us regarding our Services, such as completing our online forms, calling, or emailing for the purposes of general inquiries, support requests, or to report an issue.	For example, we collect personal information from you contained in any inquiry you submit to us regarding our Services, such as completing our online forms, calling, or emailing for the purposes of general inquiries, support requests, or to report an issue. We have a legitimate interest to operate and personalize our Services, maintain call quality, ensure fraud prevention and security, improve our UX, and support internal analytics. Depending on your relationship with us, we also may have contractual obligations to provide you with the services you request that may require personal information processing.
Business and Employment Information	Business contact information, department, job title or description, broker license number. For example, employment history may be collected within the context of a rental application on Apartments.com in listing information. Broker performance may be collected within the context of certain CoStar Products.	We have a legitimate interest to verify professional credentials, facilitate business communications, and support our services by assessing employment history where relevant to platform features like rental applications or professional directories. Depending on your relationship with us, we also may have contractual obligations to provide you with the services you request that may require personal information processing. Some information in this category may be required for our compliance with legal obligations.
Transactional and Commercial History	Records of past properties, goods, or services purchased or leased either on our Services or in other contexts, including your potential interest in properties whether or not you acted on that interest.	We have a legitimate interest to provide our Services, maintain records of user transactions to deliver our Services, personalize recommendations, conduct marketing analytics, and improve overall platform performance and relevance. Some information in this category may be required for our compliance with legal obligations.
Contact Information	Full name, nickname, mailing address, email address, and phone number. For example, when you sign up for one of our mailing lists or complete a contact form, we collect your email address or postal address.	We have a legitimate interest to contact users about their accounts, respond to service requests, send referrals and promotions, provide information requested by users, and verify identity where necessary to deliver our services effectively.
Demographic Information Some types of demographic information, such as legally protected characteristics, can be considered a type of sensitive personal information that may require consent for collection and other processing in some jurisdictions. If consent is required, we will ask you for consent when collecting demographic information from you.	Gender, date of birth, age, language preference, school affiliation, school year, guest type, household income, educational history, and race/ethnicity. For example, we may collect gender and language preferences to enhance our business contact records. We may collect household income, educational history, and race and/or ethnicity as part of benchmarking surveys on Apartments.com, as permitted by local laws and regulations. We may collect school affiliation, school year, and guest type within the context of a subscription through Off Campus Partners. We may collect household income, presence of children in household, educational history, and race and/or ethnicity through STR, as permitted by local laws and regulations.	We have a legitimate interest to personalize our services, conduct market research and benchmarking, and enhance user profiling for improved functionality and targeting, subject to applicable law. Depending on your relationship with us, we also may have contractual obligations to provide you with the services you request that may require personal information processing. Some information in this category may be required for our compliance with legal obligations.
Identification and Government Records Government identification can be considered a type of sensitive personal information that may require consent for collection and other processing in some jurisdictions. If consent is required, we will ask you for consent when collecting government identification from you.	Social Security number, tax ID, driver’s license or other state ID, and vehicle registration details. For example, we may collect this data within the context of a rental application on Apartments.com or a real estate financing and transaction	We process this information to comply with legal obligations and to verify identity where required for rental applications, transactions, or regulatory purposes (for example, KYC). Depending on your relationship with us, we also may have contractual obligations to provide you with the services you request that may require personal information processing.
Account Credentials	Username and password, if you chose to create an account with us.	We have a legitimate interest to secure user accounts, prevent unauthorized access, and maintain the integrity and confidentiality of user data on our platforms. Depending on your relationship with us, we also may have contractual obligations to provide you with the services you request that may require personal information processing.
Payment and Financial Information Financial information can be considered a type of sensitive personal information that may require consent for collection and other processing in some jurisdictions. If consent is required, we will ask you for consent when collecting financial information from you.	Credit card details, proof of income, income history, proof of funds, credit score or other payment information. For example, we may collect proof of income and income history when you provide it within the context of a rental application on Apartments.com and related brands. We may collect proof of funds within the context of a real estate transaction on Ten-X and related brands. We may collect your income or credit score when using our mortgage tools on Homes.com and related brands, or when qualifying buyers of businesses on the BizBuySell platform.	We typically process this information in connection with our contractual obligations to provide you with the services you request that may require personal information processing. Some information in this category may be required for our compliance with legal obligations.
Profile Images	Profile pictures or property images that you choose to provide to us or share in other publicly available domains.	We have a legitimate interest to display images in listings and profiles to enhance user experience, interaction, engagement, and the overall presentation of content.
Spatial Images	Digital images of properties. For example, when you capture images using a Matterport camera or other devices, or if you provide images from any other source and upload them to the Matterport Platform, we may collect other personal information which is depicted within the imagery you submit.	We have a legitimate interest in collecting customer’s spatial images to provide the Services. Depending on your relationship with us, we also may have contractual obligations to provide you with the services you request that may require personal information processing.
Social Media Information	Username, biography, and other publicly available information from social media networks. We may also collect information associated with your social media account if you choose to use that account to log in to our Services or to interact with our social media accounts.	We have a legitimate interest to enable social login features, enrich user profiles, and allow content sharing or interaction through integrated social media tools. When you log in to our Services using your social media account, the social media account provider also may ask for your consent.
System and Device Information	IP address, browser type, operating system, device model, mobile device identifiers, app usage data, push notification tokens, session logs, language settings. Most mobile devices allow you to turn off location services. If you have questions about how to disable your device’s location services, we recommend you contact your mobile service carrier or your device manufacturer.	We have a legitimate interest to ensure the secure and optimized operation of our mobile and web services, support user authentication, enable push notifications, detect technical issues, and analyze performance across devices. We also use cookies and similar technologies to enable functionality, conduct analytics, and support behavior-based advertising as described in our Cookie Policy.
Messaging and Communications Data	Messages sent through our Services (for example, inquiries to advertisers, support tickets, live chats, or other platform-based communications). If you receive email from us, we use certain tracking technologies to capture data related to when you open our message, click on any links or banners it contains, and make purchases.	We have a legitimate interest to retain and analyze user communications to respond to inquiries, support service delivery, maintain records for legal and transactional purposes, and improve customer experience. Users can opt out of marketing communications at any time.
Inferences Drawn from Other Data	Preferences, characteristics, or behavioral profiles inferred from user activity.	We have a legitimate interest to improve service personalization, optimize property recommendations, and support product development and audience insights.
Geolocation Data Precise geolocation data can be considered a type of sensitive personal information that may require consent for collection and other processing in some jurisdictions. If consent is required, we will ask you for consent when collecting precise geolocation data from you.	Device-level location, GPS data, IP-derived location. For example, when you use a Matterport camera in conjunction with our mobile applications, to better provide the Services we collect your current location information provided from the camera or mobile devices built-in GPS sensors, and from information derived from cell tower triangulation. Matterport also uses location data to assist the processing of image data and to better understand how multiple scan locations are related to each other.	We have a legitimate interest to provide relevant search results, maps, and location-based functionality within certain CoStar Products. Some CoStar Products, including our mobile apps, may request or require opt-in to collect this data to provide localized services. Users can disable location-based features at any time through their device or browser settings.
Biometric Data Biometric Data can be considered a type of sensitive personal information that may require consent for collection and other processing in some jurisdictions. If consent is required, we will ask you for consent when collecting biometric data from you.	Facial geometry, facial recognition scans collected via device camera.	We process biometric data with your consent where required to authenticate users, maintain secure sessions, and detect fraudulent use of certain CoStar Products. CoStar Marketplaces do not collect biometric data. Some CoStar Products may request or require you to opt in to facial recognition features, which compare your live photo to a previously stored image for security purposes. Biometric data is stored securely, only accessible to authorized employees, and retained as required by applicable law.

 

2. How We Collect Your Personal Information

 

CoStar may collect personal information in the following ways:

Directly from You. We may collect personal information you provide directly to us or the Services. This includes when you:

 

• Create an account
• Fill out web forms or enter information into chatbots
• Submit rental applications or listing information
• Participate in surveys, focus groups, or promotions
• Contact customer service or engage with us by phone, video call, or email

Through Your Use of the Services. We use cookies and other tracking technologies to may automatically collect certain information about how you use our Services as you interact with our Services. This may include:

• Technical data about your browser, device, IP address, and usage activity
• Log information such as search history, page views, and time spent on a particular page or site
• Device-based geolocation (if you enable this feature)
• Interactions captured through cookies and other tracking technologies, such as cursor movement, scrolling, typing, and downloads
• Audio and video data (such as when Marketplace image or video embedded in a third-party web-sites, or customer support calls or sessions hosted through CoStar Products)
• For more information about how we use personal information collected through cookies and other tracking technologies and the ways you may be able to manage the data collected by these tools, see How We Use Your Personal Information, our Cookie Policy , and Your Choices and Rights

From Others. We may receive personal information about you from other sources, including:

• Property owners, landlords, tenants, brokers, agents, or managers
• Public records, government websites, search engines, news sites, or other company websites.
• Consumer reporting agencies (for example, for background or credit checks)
• Our vendors, including data service providers, such as data brokers, analytics and marketing service providers
• Social media platforms, if you use your social account to log in to our Service or to interact with our social media pages
• Other CoStar customers and those who might provide referral information about you

When we receive information about you, including personal information, from other parties, and combine this information with other information we already have about you, this Privacy Notice will govern the combined information to the extent it is personal information.

 

3. How We Use Your Personal Information 

We use personal information as appropriate for the relationship you have with us, which may differ depending on the Services you use and how you use them. We commonly use personal information for the following purposes:

• Provision of the Services. To create and manage your account, provide and personalize our Services, or provide you with specific products or services you request, process payments, and respond to your inquiries.
• Security and Fraud Prevention. To authenticate users, maintain secure sessions, detect and prevent fraudulent or unauthorized activity, and safeguard the integrity of our Services and our systems and data.
• Communication and Customer Support. To communicate with you about your account or use of the Services, respond to questions or support requests, send transactional notifications, provide service-related updates, and provide you with marketing when you permit it.
• Improvement and Development of the Services. To test, analyze, and improve the functionality, performance, and user experience of the Services, including through aggregated usage analytics, product research, and feature development. We may use automated decision-making and profiling to tailor our services and communications, but we do not rely on these tools to make decisions that have a legal or similarly significant effect on you, and we may use artificial intelligence to enhance certain Services. Please see the subsection on automated decision making below for more details.
• Advertising and Marketing. To market our Services and those of our partners, conduct targeted advertising and retargeting, personalize offers, and measure the effectiveness of our campaigns. This includes the use of cookies and tracking technologies. See our Cookie Policy for more information.
• Research and Benchmarking. To conduct surveys, focus groups, and internal research, including aggregated benchmarking reports, user experience studies, and property market analysis.
• Compliance with Legal Obligations. To comply with applicable laws, enforce our legal rights, respond to lawful requests, perform background or credit checks where required, and fulfill contractual or regulatory obligations.
• Relationship Management. To manage our vendor and partner relationships.
• Anonymization and Aggregation. To anonymize, de-identify or aggregate personal information in order to produce analytics, trend reports, or research insights that do not identify any individual. When we de-identify personal information, we maintain such data in de-identified form and make no attempts to re-identify the data. We additionally pass these obligations to our vendors that process de-identified data on our behalf.

 

4. How We Disclose Your Personal Information 

Affiliates and Subsidiaries. We share all personal information with other entities in the CoStar group of companies to support business operations, compliance, customer support, and service delivery across our brands.

Our Vendors. We disclose personal information, including contact information, social media information, payment and financial information, and transactional and commercial history, to vendors who perform services on our behalf, such as web hosting, IT support, data analytics, payment processing, email marketing, customer relationship management, and infrastructure management. These vendors are contractually required to handle personal information only as necessary to perform these services for us.

Business Customers and Listing Partners. We share personal information, including contact information and demographic information, with CoStar customers or subscribers to our Services, such as listing agents when you view a profile, request more information, or submit a bid. We may also share your contact information within our professional directories or inventories, or when you use features that enable sharing with property owners, brokers, landlords, or agents. For example, if you use Apartments.com to inquire about a listing, the relevant property manager may receive your contact information. We may also disclose information you provide through content-sharing or messaging features on our platforms, including within customer forums or other user-facing areas. Please exercise caution when posting or sharing publicly within our Services or on our social media pages, and do not include information that you do not wish to make public.

Business Partners and Resellers. We share personal information, including contact information, payment and financial information, business and employment information, and messaging and communications data, with our business partners and value-added resellers, such as partners that sell Matterport Cameras, or channel partners of certain services to facilitate sales in situations where we do not directly sell our products and Services due to location, industry type, or any other reason as determined solely by CoStar.

Advertising and Analytics Partners. We share certain personal information, such as social media information, user activity and interaction data, geolocation data, inferences drawn from other data, and system and device information, with third-party advertising networks and analytics providers for purposes of cross-context behavioral advertising, targeted advertising, retargeting, and performance measurement. Even when not conducted for monetary value, certain activities described above may be considered a “sale” of personal information under applicable laws. See our Cookie Policy to learn more about managing your preferences regarding cookie data collection.

Third-Party Integrations. We may disclose your information, including social media information, user activity and interaction data, system and device information, and inferences drawn from other data, when you interact with third-party features integrated into our Services, such as using a social media account to log in, using integrated mapping features, or sharing listings through social platforms. Some of these third parties may utilize artificial intelligence in their provision of Services, subject to contract terms that limit their use of personal information.

Consumer Reporting and Verification Providers. We may disclose personal information, including contact information, identification and government records, business and employment information, and payment and financial information, to background check providers or consumer credit reporting agencies, as required or authorized in connection with rental applications or real estate transactions. We may also request that you provide this information directly to a background check provider and that we are given the results of such checks.

Legal, Regulatory, and Compliance Disclosures. We will disclose any personal information to law enforcement, regulatory authorities, courts, or other public authorities or advisors as reasonably necessary to comply with legal obligations, enforce our Terms of Use or other agreements and policies, or protect the rights, property, or safety of CoStar, our users, or others.

Corporate Transactions. In the event of a merger, acquisition, divestiture, restructuring, sale of assets, or other corporate transaction, any or all personal information may be disclosed to the relevant parties during the evaluation or execution of that transaction.

Auditors and Professional Advisors. We may share any personal information with our auditors, legal counsel, and other professional advisors who support our legal, financial, reporting, and operational obligations.

With Your Consent or at Your Direction. We will share your personal information when you direct us to do so, such as when you refer someone to our platform through our “Email a Listing to Friend” or similar feature, share a listing via email, or engage with integrated social features.

 

5. International Transfer of Personal Information

CoStar is a global business. Subject to applicable laws and regulations, you may directly provide your personal information to, or we may transfer your personal information (or personal data) to or store your personal information in, the United States, where we are headquartered, and to other countries outside your own, where our affiliates, service providers, or data processors operate. In addition to the United States, we regularly process personal information in the United Kingdom, Switzerland, India, and the Philippines. These countries may not have the same privacy laws or data protections as your country. We will process your personal information in accordance with this Privacy Notice. By using our Services, you indicate that you understand and acknowledge our personal information processing outside of your home jurisdiction. Please see the Jurisdiction-Specific Notices section below for additional details.

 

6. How We Secure Your Personal Information

CoStar implements industry-standard security safeguards to protect your personal information.

Unfortunately, no company can guarantee the security of information transmitted through the Internet, and we do not guarantee the security of your personal information.

We take steps to secure personal information through administrative, technical, and physical safeguards designed to protect against the risk of accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure, or use. Where we have given you (or where you have chosen) a password, you are responsible for keeping this password confidential and for reporting any compromise of your password to CoStarSecurity1@costar.com. .

 

7. How We Retain Your Personal Information

CoStar will retain your personal information only for as long as is reasonably necessary for the purposes set out on this Privacy Notice, for as long as your account is active, or as needed to provide the Services you request to you, unless we are legally obligated to maintain personal information longer. CoStar will retain and use any personal information to the extent necessary to comply with our legal obligations, resolve disputes, enforce our agreements, and as otherwise described in this Privacy Notice. In some circumstances we may anonymize your personal information (so that it can no longer be associated with you) for research, statistical or other business purposes. We may use this aggregated, anonymized, or de identified information indefinitely without further notice.

 

8. Your Choices and Rights

Subject to the privacy laws applicable to you, you may have the rights outlined in this section regarding your personal information. You may also have additional rights, depending on where you live, as set out in the Other Jurisdictions section below. If you have any questions about whether a privacy right is available to you, you may contact us using the information in the “Contact Us” section of this Privacy Notice.

Correction. If any user believes that any personal information provided to us is out-of-date, incomplete, or inaccurate, the user may review and correct available information within the user’s online account by logging in at any time or by using this information to Contact Us.

Marketing. We may send you promotional and marketing communications by direct mail, email, text, or telephone, including via auto dialer or prerecorded messages, where permitted by law and with your consent where required. You may choose to provide us with your email address for the purpose of allowing us to send newsletters, surveys, offers, and other promotional materials to you, as well as targeted offers from third parties. You can opt out of receiving promotional emails by following the unsubscribe instructions in any communications you receive or by using this information to Contact Us. If you decide not to receive promotional or marketing communications, we may still send you service-related communications about your account and transactions.

Jurisdiction-Dependent Rights. Other rights that commonly apply to our users covered by a privacy or data protection law are as follows:

• Access to your personal information. You have the right to request access to your personal information.
• Deletion of your personal information. You may request that we delete your some or all of your personal information.
• Objection to or restriction of certain processing. You may object to our use or disclosure of your personal information or restrict our ability to process personal information in some circumstances.
• Opting out of browser-based tracking. While we do not respond to ‘Do Not Track’ browser signals, we do honor Global Privacy Control (GPC) signals as a valid request to opt out of the sale or sharing of personal information.
• Opting out of sales and sharing/targeted advertising. Some of our personal data processing meets the definition of sale or “sharing” / targeted advertising under US consumer privacy laws. When it does, you may opt out of our processing of your personal information for sales and sharing/targeted advertising. Please be aware that opting out of targeted advertising does not mean that you will no longer see ads or even our ads on our Services or elsewhere, the ads will, however, likely be less relevant to you or your interests.
• Revocation of consent. When we ask for your consent to processing, you may revoke it at any time. Please note, however, that if you revoke your consent for the processing of personal information, then we may no longer be able to provide you services that relied on your consent.
• Appeals. If you reside in Virginia, Colorado, Connecticut, Oregon, Texas, or any other jurisdiction that provides a right to appeal, you may appeal a denial of your privacy rights request by responding to our decision as set out in the Contact Us section below and we will respond within the time period required by applicable law.

Exercising your rights. We will not discriminate against any user for exercising lawful privacy rights. To make a request, please Contact Us by email, call us toll-free at (800) 204-5960. You or someone you authorize to act on your behalf may make a privacy request. We may ask you to verify your identity and residency to fulfill your rights. We may verify your identity by phone call or email, including by asking you for more information to match to information we already have about you. If you make a request, please watch for additional communications from us, we cannot respond to most requests if we cannot verify your identity and confirm that the personal information relates to you. We will respond to let you know if we have fulfilled your request, in whole or in part. If we cannot fulfill a request, we will let you know why. If you have any concerns about our decision in response to your privacy rights request, you may ask us to reconsider our decision by replying to the email or other communication you received from us with our initial determination. In such cases providing additional supporting information or explanation may be helpful. You may also have the right to submit a complaint to your privacy or data protection regulator if you disagree with our decision in response to your privacy rights request or with our personal information handling.

Please see the Other Jurisdictions section below for additional information that may apply to you based on where you reside.

 

9. Other Important Information

Privacy Notice Changes. This Privacy Notice may be updated periodically to reflect changes in our privacy practices. We will post changes on this page and identify the date the privacy notice was last updated at the top of the page. Changes to this Privacy Notice shall be applicable as of the updated date unless otherwise noted.

Children Under 16. CoStar Services are not intended for children under 16 years of age, and we do not have actual knowledge that we sell or share the personal information of consumers under the age of 16.

Conflict Between this Privacy Notice and our Terms of Use or Other Terms. Where there is a conflict between this Privacy Notice and an explicit provision of the Terms of Use, this Privacy Notice will prevail over those other Terms as to our processing of personal information.

Accessibility. If you are visually impaired, you may access this notice through your browser’s audio reader. If you need additional support, please contact us.

Automated Decision Making. We may use automated systems, including artificial intelligence (AI) and machine learning, to support and enhance our Services. These systems may make decisions or generate outputs without direct human involvement — for example, verifying account eligibility, providing personalized content or recommendations, and detecting fraudulent or restricted activity.

Some of these activities may involve profiling — meaning we analyze user behavior or characteristics to make inferences. For example, the properties you browse, the searches you conduct, and your location helps us to understand what sort of properties you are interested in and categorizing your activity helps us determine the Services may be best suited to your needs. In limited cases, these systems may result in automated decisions that restrict your access to the Services, such as geo-blocking based on your IP address or restricting access for sanctioned entities under U.S. law.

Where required by law, including under the EU General Data Protection Regulation and the EU AI Act, we ensure that automated decision-making systems are explainable, documented, and subject to human oversight. You have the right not to be subject to a decision based solely on automated processing only where that decision has legal or similarly significant effects. If you want to request human review of any automated decision or further explanation, please contact us using the information in the Contact Us section.

10. Jurisdiction-Specific Notices

This section provides additional information to supplement our Privacy Notice. Please review this information alongside the other sections of our Privacy Notice, which explain the personal information we collect, the sources of this information, our purposes for processing it, our retention practices, and the circumstances under which we disclose personal information to others. If you have questions about the applicability of any law, your rights, our processing of personal information, or our privacy practices, please Contact Us.

Australia. If you are an Australian resident, we manage your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). You have the right to access and correct your personal information, and to make complaints about our handling of your information. To exercise your rights or raise a concern, please contact us as outlined in the Contact Us section. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

Canada. We may use service providers located outside of Canada, including in the United States, to process personal information, and may transfer your personal information to such service providers for this purpose. When your personal information is processed outside of Canada, it will be subject to the laws of the countries where the information is processed and may be accessible to law enforcement, national security authorities and other public authorities in those countries in accordance with their laws. For more information about our privacy practices; to access, update or correct inaccuracies in your personal information; or if you have a question or complaint about how we or our service providers process your personal information, please Contact Us.

European Economic Area (EEA) and the United Kingdom (UK). If you are located in the EEA or the UK, CoStar is the controller of the personal information we collect. To exercise your rights of access, portability, rectification, and erasure, to object to or restrict our personal information processing, to withdraw your consent, or to inquire about our privacy practices, including the safeguards used when we transfer personal information to other jurisdictions, please Contact Us. You may direct complaints about our privacy practices to your local data protection authority.

United States

• Sales and Targeted Advertising. CoStar sells personal information and uses it for targeted advertising (or “sharing” in California). CoStar also provides personal information to other CoStar customers or subscribers so that they may contact you about properties or services you express interest in and for the purpose of making business contact information available through the Professional Directory or similar features in CoStar Products. In the past year, CoStar has sold, or used for targeted advertising, contact details, online identifiers, IP addresses, non-precise geolocation data, information derived from your use of our Services (such as information about properties or services purchased or considered), and professional information for CoStar Products. Please see our Cookie Policy for more details about the information we obtain from cookies and other tracking technologies, some of which we sell and use for targeted advertising.

• State Consumer Privacy Rights. Residents of California, Connecticut, Colorado, Delaware, Iowa, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia have the rights to access, correct, and delete personal information, the right of personal information portability, the right to opt out of sales and targeted advertising (called a “share” in California), and, except in California, the right to opt out of profiling that results in legal or similarly significant effects on you.

  Residents of California, Delaware, Minnesota, and Oregon may request additional information about our personal information processing, including about the other parties we disclose personal information to.

  When we use profiling that results in legal or similarly significant effects on you, residents of Minnesota may question the results of such profiling, be informed about the reason the profiling resulted in the decision, ask what actions resulted in the decision or what actions the consumer could take to get a different result in the future, and request to correct information used for the profiling and for a subsequent re-evaluation.

  To exercise any of these rights, please follow the instructions provided in the Your Choices and Rights section above.

• California. In the past year, we have collected the following categories of personal information from California residents. To facilitate your understanding of our Privacy Notice, which explains the personal information we collect, how we use it, and when we disclose it, we provide the following table that cross-references the California categories to the more precise categories used in the Types of Personal Information We Collect section of our Privacy Notice and referenced throughout. Please be aware that although we collect some types of sensitive personal information, we do not use it for any purposes that would permit the right to limit sensitive personal information use in California.

CA Personal Information Category	Privacy Notice Categories
Identifiers	Contact Information Identification and Government Records Account Credentials Social Media Information
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))	Contact Information Business and Employment Information Identification and Government Records Payment and Financial Information Profile Images
Protected classification characteristics under California or federal law	Demographic Information
Commercial information	Transactional and Commercial History Payment and Financial Information
Biometric information	Biometric Data
Internet or other similar network activity	User Activity and Interaction Data System and Device Information
Geolocation data	Geolocation Data
Sensory data	User Activity and Interaction Data Profile Images Spatial Images Messaging and Communications Data
Professional or employment-related information	Business and Employment Information
Inferences drawn from other personal information	Inferences Drawn from Other Data

“Shine the Light” Requests. California residents may also request certain information regarding our disclosure of personal information to third parties for their own direct marketing purposes. To make such a request, please Contact Us.

• Illinois Biometric Data Collection. The Illinois Biometric Information Privacy Act (BIPA) permits the collection, use, and storage of biometric information for the purpose of providing services. Some CoStar Products may collect biometric data — such as facial geometry or facial recognition scans — for security or identity verification purposes. When collecting biometric data in Illinois, we comply with BIPA’s requirements, including obtaining explicit written consent prior to collection, providing notice of our data retention schedule, and storing biometric data securely. For more details, please refer to the Types of Data We Collect and Why section of this Privacy Notice. If you have any questions or concerns about our use of biometric data, please Contact Us.
• Nevada. This notice is provided to you pursuant to Nevada state law. Nevada state privacy laws permit us to make marketing calls to existing customers, but if you prefer not to receive marketing calls, you may be placed on our internal opt-out list by contacting us as set forth in the Contact Us section.

11. Contact Us

We have appointed a Data Protection Officer to investigate and respond to privacy issues and to be accountable for our compliance with this Privacy Notice. You can contact us, depending on the nature of your inquiry, by using the relevant contact information below.

In order to properly respond to your privacy questions or requests about our services, please email the relevant service outlined below or call the relevant service using the below toll-free numbers:

Service	Contact Information
CoStar services (e.g., CoStar Information and Analytics, CoStar Portfolio Strategy, CoStar Risk Analytics, CoStar Real Estate Manager, CoStar Investment Analysis, and CoStar Brokerage Applications)	Email: Support@costar.com
Apartments.com services (e.g., Apartments.com, ApartmentFinder.com, ApartmentHomeLiving.com, ForRent.com, Cozy.com)	Email: Support@apartments.com Phone: (888) 658-7368
Belbex and BureauxLocaux:	Email: CoStarUKPrivacy1@costar.co.uk
Business Immo	Email: dpo@businessimmo.fr
Businesses for Sale (e.g., BizBuySell.com, BizQuest.com or FindAFranchise.com)	Email: bizbuysell_clientser@bizbuysell.com Phone: (888) 777-9893
Homes.com services (e.g., Homes.com, HomeSnap.com, CitySnap.com)	Email: Support@homes.com
LoopNet and Cityfeet services (e.g., CoStar Information and Analytics, CoStar Portfolio Strategy, CoStar Risk Analytics, CoStar Real Estate Manager, CoStar Investment Analysis, and CoStar Brokerage Applications)	Email: Help@LoopNet.com Phone: (800) 613-1303
Matterport products and services	Web: Requests can be submitted to our customer support portal: https://support.matterport.com/hc/en-us/requests/new Phone: +1 (833) 408-0104
Off Campus Partners services (e.g., OffCampusPartners.com)	Email: offcampus@costar.com phone: (877) 895-1234
OnTheMarket	Email: privacy@onthemarket.com
Rural land and real estate listing services (e.g., LandsOfAmerica.com, LandAndFarm.com, LandWatch.com)	Email: Support@land.com Phone: (512) 263-5600
STR services (e.g., CoStar Information and Analytics, CoStar Portfolio Strategy, CoStar Risk Analytics, CoStar Real Estate Manager, CoStar Investment Analysis, and CoStar Brokerage Applications)	Email: Support@str.com Phone: (615) 824-8664
Ten-X Auction Services on LoopNet	Email: Help@LoopNet.com Phone: (800) 613-1303
Thomas Daily	Email: Datenschutz@thomas-daily.de
Visual Lease	Contact your Account Manager directly or  Email: Legal@visuallease.com

You may direct your requests in writing to us via postal mail in the United States or the United Kingdom:

CoStar Realty Information, Inc.
1201 Wilson Boulevard
Arlington, VA 22209
Attn: Legal Department
 

CoStar UK Limited
c/o Corporation Service Company (Uk) Limited, 
5 Churchill Place, 10th Floor, London, 
United Kingdom, E14 5HU