Privacy policy
Updated October 29, 2026.
What we collect
When you book a tour or send a message, we receive what you enter: your name, email and phone number, your move-in date, your message and, for a tour, the time you choose. We use it only to answer you and arrange your visit. It goes to the Thousand Oaks leasing team through Knock, their scheduling and leasing system, and is not sold or shared for marketing.
This website sets no advertising or analytics cookies and runs no third-party tracking scripts. Its fonts, map software and images are served from this website itself. It keeps the latest apartment list in your browser’s session storage for ten minutes so pages load faster; that copy holds nothing about you and is cleared when you close the tab.
Services this website uses
Each service below receives your IP address and browser details when your browser contacts it, as any website does.
| Service | Host | What it does here | When it is contacted |
|---|---|---|---|
| Cloudflare | www.toapts.com | Hosts this website and its server functions | Every page |
| SightMap | sightmap.com | Supplies apartment availability, rents and each apartment’s apply link | By our server only; your browser does not contact SightMap |
| Knock | doorway-api.knockrentals.com | The leasing office’s scheduling and leasing system: supplies open tour times and receives tour requests and messages | By our server only: when you open the tour card and when you send a request |
| OpenFreeMap | tiles.openfreemap.org | Map tiles, labels and fonts for the neighborhood and contact maps | When you scroll to a map |
| Matterport | my.matterport.com, events.matterport.com | Hosts the virtual tours; Matterport measures use of the tour inside its own player | Only when you open a tour |
| Knock | m.knck.io | Delivers email sent to the leasing office address | Only when you email the leasing office |
| RealPage | 9141461.onlineleasing.realpage.com | Online application, under its own privacy policy | Only when you choose Apply |
| LOFT Living | thousandoaks.loftliving.com | Resident portal, under its own privacy policy | Only when you open the portal |
| Tour24 | app.tour24now.com | Self-guided tours, under its own privacy policy | Only when you choose a self-guided tour |
| Google Maps | www.google.com | Directions | Only when you choose Directions |
| Facebook and Instagram | www.facebook.com, www.instagram.com | The community’s social pages | Only when you follow the link |
| Kiara | meetkiara.ai | The company that built this website | Only when you follow the “Powered by Kiara” link |
Services the previous website used
The earlier toapts.com loaded the services below. This website does not load any of them.
- Knock widget, chat and call tracking: doorway-api.knockrentals.com, doorway.knck.io, prod-knockphotos.s3.amazonaws.com, and normalize.css from cdnjs.cloudflare.com
- LaunchDarkly feature flags: app.launchdarkly.com, events.launchdarkly.com
- Pusher realtime messaging: stats.pusher.com
- PostHog analytics through the SightMap embed: us.i.posthog.com, us-assets.i.posthog.com
- SightMap embedded map: sightmap.com/embed, cdn.sightmap.com
- Google Maps, Analytics, Tag Manager and Ads: maps.google.com, www.google.com, www.googletagmanager.com, www.google-analytics.com, analytics.google.com, stats.g.doubleclick.net, ad.doubleclick.net, googleads.g.doubleclick.net
- Unbounce popups: e073dad7f5cc4bbab393a131f49c3e97.js.ubembed.com, assets.ubembed.com
- NitroPack page optimization: to.getnitropack.com
- Google Fonts and Font Awesome: fonts.googleapis.com, fonts.gstatic.com, maxcdn.bootstrapcdn.com
- WP Engine font files from a staging host: thousandoa1stg.wpenginepowered.com
- Billingsley 360° panoramas: billingsleymarketing.viewin360.co
- Gravatar profile images: secure.gravatar.com
Your choices
To ask what information we hold about you, correct it or have it deleted, email live@toapts.com or call (210) 942-0263.
Changes
If this policy changes, the date at the top of this page changes with it.