Careful with
the data.
Where listing data comes from and what we do with personal data. Not legal advice.
Listing data
- A licensed partner. IDX Bloom holds no MLS licenses; data comes through a licensed MLS data partner, per site.
- A cache. Pages load from the cache on your own WordPress. If the feed fails, the last good data stays up to 24 hours.
- A kill switch. If the data provider refuses a site, every cached listing is deleted at once until access returns.
What leaves your site
The plugin reports counts, page addresses and titles. On a live paid site the dashboard also gets lead and registration details and, for buyers who agreed, the listing id, price and page of each home they view or save. Never photos, remarks or search text. You can switch contact details off in Settings. AI listing text, if you turn it on, also sends the listing number and address.
Maps load from cdnjs and OpenFreeMap, so a visitor's IP reaches those hosts when a map opens. Nothing else is called from the visitor's browser.
AI and keys
AI listing text is off until the data provider confirms your MLS allows it. No AI or MLS keys live on your site.
Personal data
- Consent is required when a buyer creates an account, and optional on the lead form.
- Privacy export and erase tools for buyer accounts.
- Lead IP addresses are wiped after 30 days. The CSV never includes them.
- Buyer emails have a master switch in Settings, come only from a live site, carry an unsubscribe link and, on a paid site, can be relayed through hello@idxbloom.com.
Safe by design
- Preview mode first: one private page, no other page changes.
- It never edits your existing pages. Going live adds one page, Search homes.
- Reviewed, not audited: internal code reviews only.
Questions, answered
What does the plugin keep on my site?
Cached listing data, your leads, buyer accounts, and settings, all inside your own WordPress. Nothing is saved into the content of your existing pages; going live adds one new page, Search homes.
What happens if my data access is revoked?
If the data provider refuses a site (a key or domain was revoked), every cached listing is deleted at once and nothing is shown until access is restored.
Is AI listing text switched on by default?
No. AI listing text is off until the data provider confirms your MLS allows it, and no AI or MLS keys live on your site. If you turn it on, the listing number and address are also sent. Otherwise the plugin reports counts, page addresses and titles, and never photos, remarks or search text.
Do you store visitor IP addresses?
In the plugin, lead IP addresses are wiped after 30 days. On this marketing site, an IP address is kept in scrambled (hashed) form for about ten minutes to limit repeated form submissions.
Do maps send a visitor's IP address to anyone?
Yes, to the map hosts. Maps load from cdnjs and OpenFreeMap, so a visitor's IP reaches those hosts when a map opens. Nothing else is called from the visitor's browser. Lead IP addresses are a separate matter: they are wiped from the plugin after 30 days, and the CSV never includes them.
Has the plugin been reviewed?
It has had internal code reviews. It has not had an outside audit, and we do not claim one.
Do leads leak listing details?
Only what the dashboard needs. A lead carries the contact details the visitor typed. A registered buyer who agreed to be contacted also sends the listing id, the price and the page of each home they view or save. This applies on a live paid site, and you can switch contact details off in Settings.
See listings on your website in 3 steps.
7 days free. No card. Then $49/mo.