Privacy Policy

1. Introduction

HomeFlyer AI ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

By accessing or using HomeFlyer AI, you agree to this Privacy Policy. If you do not agree, please do not use our services.

2. Information We Collect

2.1 Information You Provide to Us

Account Information:

• Name
• Email address
• Phone number
• Company/brokerage name
• Billing address

Payment Information:

• Credit card details (processed securely through Stripe — we never store full card numbers)
• Billing history
• Transaction records

Content You Create:

• Property listings and descriptions
• Email blast content
• Uploaded images and files
• Custom templates
• AI-generated content preferences

2.2 Information Collected Automatically

Usage Data:

• IP address (partially anonymized — we mask the last octet to prevent direct identification)
• Browser type and version, device information, operating system
• Pages viewed and time spent on site
• Click patterns and navigation paths
• Referral and exit pages
• Session timestamps

Geolocation Data (Generalized Only):

• We estimate your approximate location (city/state level) using your IP address
• We do not use GPS, Bluetooth, or device-level geofencing
• We do not track precise real-time location
• Generalized location helps us deliver region-relevant content and detect suspicious activity

Cookies and Tracking:

• Essential cookies for authentication and session management
• Preference cookies for your settings
• Analytics cookies for performance tracking
• We do not use third-party advertising cookies or cross-site tracking

You can manage cookie preferences through your browser settings or our cookie consent controls. Declining non-essential cookies will not affect access to our services.

3. How We Use Your Information

3.1 Provide Our Services

• Create and manage your account
• Process payments and transactions
• Send email blasts to selected MLS databases
• Generate AI-powered content suggestions
• Provide customer support

3.2 Improve Our Services

• Analyze usage patterns to enhance features
• Train and improve our AI models
• Fix bugs and technical issues
• Monitor service performance and security

3.3 Marketing (With Your Consent)

• Send promotional emails about new features
• Provide product updates and tips
• You can opt-out anytime via the unsubscribe link

4. How We Share Your Information

We do NOT sell your personal information to third parties.

4.1 Service Providers

We share information with trusted third-party providers who are contractually obligated to protect your data:

• Payment Processing: Stripe (PCI-DSS compliant)
• AI Services: Third-party AI providers for AI-powered features
• Email Delivery: Email infrastructure providers
• Cloud Infrastructure: Hosting and database providers
• Analytics: Privacy-focused analytics for website performance

4.2 Legal Requirements

We may disclose information if required by law, including in response to court orders, subpoenas, government investigations, or legal proceedings.

4.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, your personal information may be transferred as part of that transaction. In such cases:

• You will be notified in advance via email and/or prominent notice on our website
• The acquiring entity will be required to honor existing privacy commitments
• You will have the opportunity to review or delete your data before the transfer

5. Data Retention

• Active Accounts: We retain your information as long as your account is active
• Deleted Accounts: When you delete your account, we remove your personal information within 30 days
• Backups: Deleted data may persist in encrypted backups for up to 90 days

5.1 Exceptions to Deletion

We may retain certain data beyond the standard retention period in the following cases:

• Legal or Tax Compliance: Transaction records required for audits, tax obligations, or government reporting
• Fraud Prevention: Data linked to suspected fraudulent activity or misuse of services
• Active Disputes: Records related to pending refund, payment, or access-related disputes
• Order Fulfillment: Recent transaction records needed for support or delivery verification

Once these conditions no longer apply, the data will be securely deleted or anonymized.

6. Your Rights and Choices

6.1 Access and Update

You can access and update your personal information by logging into your account and visiting Settings.

6.2 Delete Your Account

You have the right to request deletion of your account and personal data:

• Go to Account Settings → Delete Account
• Contact support@homeflyerai.com

6.3 Data Portability

You can request a copy of your data in a machine-readable format by contacting support@homeflyerai.com

6.4 Marketing Communications

You can opt-out of marketing emails by clicking "Unsubscribe" in any marketing email or adjusting preferences in Account Settings.

7. Security

We implement industry-standard security measures to protect your data:

• SSL/TLS encryption for all data in transit
• Encryption at rest for sensitive data
• Secure authentication with magic links and optional passwords
• Role-based access controls for internal systems
• Regular security assessments and vulnerability scanning
• Real-time monitoring for suspicious activity and unauthorized access
• We do not store full credit card numbers (processed by Stripe)

Despite our efforts, no security system is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

8. AI and Privacy

What We Send to AI Providers:

• Property details you enter (address, price, features)
• Your prompts and questions to PAI (our AI assistant)
• Images you upload for analysis

What We Don't Send:

• Your email address or personal contact info
• Payment information
• Other users' data

Important: Data sent to third-party AI providers is subject to their respective privacy policies and terms of service. We recommend reviewing their data usage policies directly. Your AI interactions within our platform are stored securely and are private to your account.

9. Children's Privacy

HomeFlyer AI is not intended for users under 18 years of age. We do not knowingly collect information from children. In compliance with the Children's Online Privacy Protection Act (COPPA), if we discover that personal information has been collected from a minor, we will promptly delete that data and block further access from the associated account.

10. International Data Transfers

HomeFlyer AI is based in the United States. If you access our services from outside the U.S., your information may be transferred to, stored, and processed in the U.S.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to Know: What personal information we collect and how we use it
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do NOT sell your information — see our Do Not Sell My Data page
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, you may:

• Email us at support@homeflyerai.com with the subject "CCPA Privacy Request"
• Submit a request through your account dashboard under Settings

We will respond to verifiable requests within 45 days. If additional time is needed, we may extend the response period by up to 90 days total, with written explanation.

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under GDPR:

• Right to access your data
• Right to rectification (correction)
• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to object to processing

13. Cookies

Types of Cookies We Use:

• Essential Cookies: Required for authentication and basic site functionality (cannot be disabled)
• Preference Cookies: Remember your settings (can be disabled)
• Analytics Cookies: Help us understand site usage (can be disabled)

We do NOT use: Third-party advertising cookies or cross-site tracking cookies

You can manage your cookie preferences through your browser settings or through our cookie consent controls on the website.

14. CAN-SPAM Act Compliance

As an email blast service, we comply fully with the CAN-SPAM Act. All emails sent through our platform:

• Include accurate sender identification and contact information
• Contain a clear and functional unsubscribe mechanism
• Honor unsubscribe requests within 10 business days
• Do not use deceptive subject lines or misleading header information
• Identify the message as an advertisement where applicable

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or prominent notice on our website.

Your continued use of our services after changes constitutes acceptance of the updated Privacy Policy.

16. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights:

• Email: support@homeflyerai.com
• Support Portal: Available in your dashboard
• Response Time: Within 48 hours on business days

17. Unsubscribing

From marketing emails:

• Click "Unsubscribe" at the bottom of any email
• Visit Account Settings → Email Preferences

From MLS blast alerts (as a recipient):

• Click "Unsubscribe" at the bottom of any blast email

From free listing alerts (as a subscriber):

• Click "Unsubscribe" at the bottom of any listing alert email
• Update or cancel your preferences at any time