Privacy Policy

From agents and agencies (account holders):

• Registration information — name, email address, agency name, password (hashed), and optional real estate license number.
• Profile and settings data — logo, phone number, address, timezone, and booking preferences.
• Property listing content — descriptions, photos, pricing, and location data you submit.
• Usage and activity data — pages visited, features used, AI messages sent, and timestamps.
• Billing information — processed securely through our payment processor (we do not store raw card numbers).

From property seekers (public visitors):

• Contact details voluntarily submitted — name, email, and optionally phone number — when inquiring about a property or booking a tour.
• Chat conversation content — messages sent to the Aria AI assistant on a listing page.
• Session identifiers — stored in the browser to avoid re-asking for email on return visits.

Automatically collected:

• Log data — IP address, browser type, referring URL, pages visited, and error logs.
• Device information — device type, operating system, and screen resolution.
• Cookies — session cookies for authentication; no third-party advertising cookies.

We use the information we collect to:

• Provide, operate, and improve the HomeWise AI platform and its features.
• Authenticate users and maintain account security.
• Power AI-driven features including the Aria listing assistant, the Aura dashboard assistant, and the Romy buyer decision-support assistant.
• Connect property seekers with the agents whose listings they inquire about.
• Send transactional emails — account confirmations, appointment reminders, billing receipts.
• Monitor usage against plan limits and enforce our Terms of Service.
• Detect, prevent, and respond to fraud, abuse, and security incidents.
• Comply with legal obligations.

We do not sell your personal information to third parties. We do not use your data to train AI models without your explicit consent.

We share information only in the following circumstances:

• Service providers — trusted third parties who assist in operating the platform (cloud hosting, email delivery, payment processing, AI APIs). These providers access data only as necessary to perform services on our behalf and are bound by confidentiality obligations.
• Within your organization — if your account is part of an agency, other users within the same organization may see lead data, property listings, and appointment details you create.
• Legal requirements — we may disclose information if required by law, court order, or to protect the rights, property, or safety of HomeWise AI, our users, or the public.
• Business transfers — in the event of a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction.
• Address verification — when you enter a home address during Home Setup, we send that address to Google's Address Validation service to standardize it and confirm it is a real, deliverable address. Google returns a standardized version of the address and its map coordinates. We use this to help you confirm your home's address; it is not used to verify or determine legal ownership of the property. Google's handling of this information is governed by Google's own Privacy Policy and Google Maps Platform terms.

HomeWise AI uses AI systems — including Aria (buyer conversational assistance), Aura (agent CRM and pipeline intelligence), and Romy (buyer decision support within the Decision Room) — to operate and improve the platform's features. When you interact with an AI-assisted feature, the content you provide is processed by that AI infrastructure in order to serve your own request. We do not design these features to request sensitive identifiers such as Social Security numbers or financial account details, and we encourage you not to include this type of information in messages to any AI assistant.

Using your data to train or improve AI models, beyond the processing needed to serve your own request, is separate from this ordinary processing and requires your explicit, opt-in consent, which you may withhold or revoke at any time. This consent principle applies equally to all HomeWise user and customer accounts — buyers, homeowners, agents, and Professional Network participants. We do not use your data to train AI models without that consent.

Conversation content and AI-generated analysis may be stored in our database — including to maintain chat history, to power cross-session memory for registered users, to support Aura's memory of agent lead interactions, and to preserve buyer decision-support analysis within the Decision Room. This stored content is covered by the deletion rights described in the Data Retention and Your Rights sections below.

We retain your account data for as long as your account is active. If you request deletion of your personal data, HomeWise commits to responding within 30 days. For buyer and homeowner accounts, deleting your account triggers an immediate, automated process that redacts or removes your personal data across our systems — including your account identity information, any stored payment-provider customer record, AI conversation and chat history, Decision Room analysis text, saved activity and task records, and the personal content of professional-connection requests and home-event records associated with your account. For agent and organization accounts, deletion is currently carried out by a HomeWise administrator upon request rather than through self-service automation; once processed, it results in the same removal of account and personal data. Some information may continue to be retained beyond deletion where required for legal, compliance, or fraud-prevention purposes (for example, billing records, typically retained longer to meet accounting and tax obligations).

Not all information connected to a deleted account is removed. Consistent with HomeWise's Mixed Institutional Record Principle, we distinguish between personal data that can be separated from a record without destroying its institutional meaning — which is removed or redacted — and personal data that is itself part of a permanent institutional record, or that is independently protected by our governance rules regardless of separability — which is preserved. In particular, Home Passport records (the permanent history associated with a confirmed home, including steward and homeowner-submission history) are preserved under HomeWise's Passport governance doctrine and are not deleted or anonymized by a personal-data deletion request, even where they include information you originally submitted. The record of the deletion request itself, and property- or institution-level information that does not depend on your personal identity, are also preserved.

Document content you upload — for example, to your Home Passport or document vault — is subject to the same deletion process: personal content within a document is removed or redacted, while the underlying document record may be preserved where it reflects institutional or property history rather than content specific to you. Certain document metadata, including filenames, remains subject to our ongoing privacy and records-governance review and is not currently addressed by the deletion process described above.

Home address and identity information confirmed as part of a Home Passport is retained as part of that home's permanent record for as long as it is relevant to your HomeWise account or the associated home. If you correct information you previously confirmed, the earlier version may be preserved as part of the home's historical record rather than deleted, consistent with the Home Passport's design as a permanent, append-only record of a home's history.

We implement industry-standard security measures including:

• Passwords stored as bcrypt hashes — never in plain text.
• All data transmitted over HTTPS/TLS encryption.
• Optional two-factor authentication (TOTP) for all accounts.
• Database access restricted to application services via private network.
• Regular security reviews and dependency updates.

No security system is perfect. If you discover a vulnerability, please report it responsibly to security@homewise.estate.

We use the following types of cookies and local storage:

• Authentication cookies — HttpOnly, Secure session cookies that keep you logged in. These are essential and cannot be disabled.
• Preference storage (localStorage) — used to remember whether a buyer has already submitted their email on a listing, avoiding repeated prompts.

We do not use advertising cookies, cross-site tracking pixels, or third-party analytics that profile you across websites.

Depending on your location, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — update inaccurate or incomplete data via your account settings.
• Deletion — request deletion of your personal data. We commit to responding within 30 days; depending on your account type, this results in removal or redaction of your personal data as described in the Data Retention section above. Some information may be preserved where it forms part of a permanent institutional record (for example, Home Passport history) or where retention is required for legal, compliance, or fraud-prevention purposes.
• Portability — request an export of your data in a machine-readable format.
• Objection — object to certain processing activities.

To exercise any of these rights, contact us at privacy@homewise.estate. We will respond within 30 days.

HomeWise AI is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided personal information, we will delete it promptly.

HomeWise AI operates from the United States. If you access the platform from outside the U.S., your information may be transferred to and processed in the U.S., where data protection laws may differ from those in your country. By using the platform, you consent to this transfer.

We may update this Privacy Policy periodically. We will notify you of material changes by email or by posting a prominent notice on the platform at least 14 days before changes take effect. The "Effective date" at the top of this page reflects the date of the latest revision.

For privacy-related questions or to exercise your rights, contact: