Data comes from a licensed partner
IDX Bloom holds no MLS licenses. Listing data comes through a licensed MLS data partner, approved per site.
— Security and dataCareful with
Careful with
the data.
Where listing data comes from, where it lives, what happens when something fails, and what we do with personal data. In plain words.
Not legal advice. The legal pages are pending legal review.
— Listing data
From the MLS to your page
A cache, refreshed in the background
Pages load from the cache right away, so they never wait on the feed. The cache lives on your own WordPress site.
Last good data, up to 24 hours
If the feed fails, the last good data stays on your pages for up to 24 hours instead of being wiped.
A data kill switch
If the data provider refuses a site, every cached listing is deleted at once and nothing is shown until access is restored.
Counts only leave your site
Reporting back from your site sends counts, not listing identifiers.
AI text is off by default
AI-written listing text stays off until the data provider confirms your MLS allows it. No API keys live on your site.
— Personal data
Consent, export, erase
Consent at sign-up
Required when a buyer creates an account. An optional consent checkbox is available on the lead form and recorded with the lead.
Export and erase
The plugin includes privacy export and erase tools for buyer accounts.
IP addresses wiped at 30 days
Lead IP addresses are wiped after 30 days. The CSV download never includes the IP address.
Email is off until you turn it on
A master email switch is off by default, so no sign-in or alert emails go out until you decide.
— Safe by design
Four guard rails
Preview mode
A new install runs on one private page, visible only to logged-in editors and admins. Nothing reaches visitors or Google, and no other page changes.
Never edits your pages
Listings are added when a page is shown, never saved into your content. Deactivate and everything is as it was.
Samples are never indexed
Sample listings never reach search engines, even when you are live.
Reviewed, not audited
The plugin went through four internal reviews and every finding was fixed. It has not had an outside audit, and we do not claim one.
— FAQ
Questions, answered
What does the plugin keep on my site?
Cached listing data, your leads, buyer accounts, and settings, all inside your own WordPress. Nothing is written into your page content.
What happens if my data access is revoked?
If the data provider refuses a site (a key or domain was revoked), every cached listing is deleted at once and nothing is shown until access is restored.
What if the listings feed is slow or down?
Pages always load from the cache right away. If the feed fails, the last good data stays on your pages for up to 24 hours instead of being wiped.
Do you store visitor IP addresses?
In the plugin, lead IP addresses are wiped after 30 days. On this marketing site, an IP address is kept in scrambled (hashed) form for about ten minutes to limit repeated form submissions.
Can a buyer delete their data?
Yes. The plugin includes privacy export and erase tools for buyer accounts, and consent is required when a buyer creates an account.
Do I need my own AI or API keys?
No. No API keys live on your site. AI features run through the IDX Bloom service, using your license key.
Has the plugin been reviewed?
It went through four internal reviews and every finding was fixed. It has not had an outside audit, and we do not claim one.
Do leads leak listing details?
No. Reporting back from your site sends counts only, not listing identifiers.
— Keep going
Related pages
See it on your own site.
Start a free pilot (no card), try the live demo with fictional listings, or join the waitlist.