Privacy Policy

1. Privacy by Default

HomeScout is designed with privacy by default. Your account starts with the most restrictive privacy settings. We collect only the minimum data necessary to provide our service. No data is shared unless you explicitly take an action that requires it (such as sending an inquiry to a property agent or explicitly enabling Auto Apply).

2. Information We Collect

We collect only what we need to operate the service:

• Account information — name, email address, and hashed password for password-based accounts
• Search preferences — your saved searches and property preferences
• Viewing data — appointments you schedule and feedback you provide
• Payment information — processed securely by Mollie (we never store card details)
• Private search quality — a limited, masked copy of search prompts, parsed filters and city scope, status and timing, first-page listing IDs/scores and result counts, plus optional useful/not useful feedback and explanation. These records are linked to your account for ownership and deletion, accessible only to HomeScout admins, and retained for 30 days with bounded daily cleanup. Expired records cannot be viewed or updated; a cleanup backlog may delay physical deletion. Email addresses, phone numbers, links and tokens are masked on a best-effort basis; this is not complete anonymization. Please avoid personal details in prompts or feedback.
• Usage data — with analytics consent, interaction events and timing to improve the service. Events may be linked to your account when you are signed in, or to a browser session when you are not. These records are private operational analytics, not anonymous data.
• Onboarding diagnostics — with analytics consent, fixed step names, client-reported time while the tab is visible, server receipt times and fixed failure codes help us identify possible stalls. Explicit tour finish or skip observations are separate from a successful Welcome save. The functional Welcome save marker does not depend on analytics consent. Dedicated journey diagnostics are linked privately to your account, accessible only to HomeScout admins, deleted with your account, and retained for 30 days with bounded daily cleanup; a backlog may delay physical deletion, but expired journeys cannot be reported or updated. They contain no date of birth, phone number, destination, form text, agent description, URLs or session replay.

3. How We Use Your Information

Your data is used exclusively to provide and improve HomeScout:

• Deliver property search results and personalized recommendations
• Generate AI-powered inquiry drafts for your review, or send eligible applications using an active template you have approved after explicitly enabling Auto Apply
• Process your subscription and payments
• Send service notifications you have opted into
• Improve the platform based on usage patterns and private search feedback

4. We Do Not Share Your Data

We do not sell, rent, lease, or trade your personal information to any third party. Your data is disclosed only in these limited circumstances:

• When you choose to contact an agent — your name and message are shared when you explicitly send an inquiry, or when an eligible application is sent under your standing authorization after you enable Auto Apply and approve an active template. You can disable Auto Apply at any time.
• Infrastructure providers — our hosting and service providers process data on our behalf under strict data processing agreements and have no right to use your data for their own purposes
• Legal obligations — only when compelled by valid legal process (court order, subpoena) under applicable law

5. International Data Transfers

HomeScout is operated from Ireland for users in the European Union. However, some of the infrastructure providers we use to operate the service are based in the United States. This means your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States.

Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including:

• EU Standard Contractual Clauses (SCCs) with our service providers
• Data processing agreements that contractually bind providers to protect your data
• Encryption of data in transit and at rest

Our payment processor (Mollie) is based in the Netherlands and processes payment data within the EU.

6. Data Security

We take the security of your data seriously. Measures include encryption in transit (TLS) and at rest, secure authentication with session-based cookies, and strict access controls. Passwords are hashed and never stored in plain text. No method of transmission over the internet is 100% secure, but we continuously work to protect your information.

7. Cookies

We use cookies to operate the service and, with your consent, to measure advertising performance. Below is a complete list of the cookies we set:

Essential / Functional Cookies (always active)

• Authentication cookies — to keep you signed in (session-based)
• Preference cookies — to remember your settings (e.g., language, locale)
• hs_attribution — first-party cookie, 90-day expiry. Stores campaign attribution parameters (utm_source, utm_medium, utm_campaign, gclid, etc.) so we can measure which channels bring users to HomeScout. This cookie is always set on first visit and does not require consent as it is strictly functional.
• hs_consent — first-party cookie, 365-day expiry. Stores your cookie consent preferences so we do not ask again on every visit.

Analytics Cookies (consent required)

These cookies are denied by default and only activated after you explicitly grant consent via our cookie banner.

• _ga — Google Analytics, used to distinguish unique users. Expires after 2 years.
• _gid — Google Analytics, used to distinguish unique users. Expires after 24 hours.

Marketing Cookies (consent required)

These cookies are denied by default and only activated after you explicitly grant consent via our cookie banner.

• _fbp — Meta (Facebook) Pixel, used to measure ad performance and deliver relevant advertisements. Expires after 90 days.

You can change your cookie preferences at any time by clearing your browser cookies and revisiting the site, which will re-display the consent banner.

8. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

• Access — request a copy of all personal data we hold about you
• Rectification — correct any inaccurate or incomplete data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — receive your data in a structured, machine-readable format
• Restriction — limit how we process your data
• Objection — object to processing based on legitimate interests
• Withdraw consent — at any time, without affecting prior processing

To exercise any of these rights, contact us at privacy@homescout.io. We will respond within 30 days.

9. Data Retention

We retain your personal data only for as long as your account is active and as needed to provide the service. If you delete your account, we will permanently delete your personal data within 30 days, except where retention is required by law (e.g., tax records for payment transactions).

10. Children's Privacy

HomeScout is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor, we will delete it immediately.

11. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Changes take effect immediately upon posting to this page. We will update the "Last updated" date at the top of this policy. For material changes that significantly affect how we handle your data, we will make reasonable efforts to notify you via email or through the service. Your continued use of HomeScout after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions, data requests, or to exercise your rights:

Email: privacy@homescout.io

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC) at www.dataprotection.ie.