Privacy Policy
Our commitment to protecting your data and professional identity.
Last Updated: January 1, 2026 | Effective Date: January 1, 2026
Secure & Encrypted
Industry-standard security controls and working toward SOC 2 Type II.
Privacy Focused
Designed with CCPA and GDPR privacy principles in mind.
Transparent Ops
Zero hidden data usage. You control every bit of your info.
Introduction
Welcome to HomeLeafs. We are committed to protecting your privacy and being transparent about how we collect, use, and share your personal information. This policy explains our practices and your choices regarding your data.
Agreement
By using our Services, you agree to this Privacy Policy and our Terms of Service.
1. Information We Collect
1.1 Information You Provide Directly
Account Information:
- Full name, email address, and encrypted credentials
- Phone number and preferred contact methods
- Professional role (Homeowner, Investor, Agent, etc.)
- Business credentials and profile media
LinkedIn Data:
Optional social sync data includes:
- Professional headline, summary, and work history
- Verified skills, endorsements, and network metrics
- Public profile URL and industry data
Property Data:
- Addresses, mortgage details, and hardship narratives
- Financial status and auction timelines
- Property media and documentation
1.2 Information Collected Automatically
Discovery Feed & Behavioral Data:
To power our personalized feed, we automatically track:
- Interactions with property listings and posts (views, likes, saves, shares)
- Contact conversion events and lead interaction rates
- Derived preference profiles (location, price, urgency, and property affinities)
- A/B testing interactions used to optimize our ranking algorithms
Usage Data & Tracking Technologies:
- Pages viewed, features used, and time spent on Platform
- Click patterns, navigation paths, and search queries
- Device type, browser, operating system, and IP address
- Session cookies for authentication
- Analytics cookies (Google Analytics, Mixpanel)
- Marketing cookies (Facebook Pixel, LinkedIn Insight Tag)
- LinkedIn conversion tracking and share activity metrics
2. How We Use Your Information
LinkedIn Professional Trust Layer:
- Calculate LinkedIn Trust Scores (0-5.0 scale) based on connections, endorsements, recommendations, and HomeLeafs activity
- Display professional credentials and endorsements
- Show mutual connections between users
- Verify professional identity and credentials
Core Platform Operations & Algorithmic Discovery:
- Create and manage user accounts
- Connect homeowners with qualified service providers
- AI-Powered Discovery Feed: We analyze your viewing history, saved items, and interaction signals to dynamically personalize your property feed and connect you with the most relevant opportunities.
- Process subscription payments and send transactional notifications
- Direct messaging between users and appointment scheduling
Marketing Communications (with consent):
- Educational resources and tips
- Product updates and new features
- Promotional offers and discounts
- Newsletter and market insights
- LinkedIn-targeted advertising
9. LinkedIn Marketing Developer Program
LinkedIn Integration Details:
We participate in LinkedIn's Marketing Developer Program:
- LinkedIn OAuth 2.0 for authentication
- LinkedIn Insight Tag tracks conversions and engagement
- Trust score calculation using LinkedIn professional signals
- Mutual connection matching and professional credential verification
- Targeted advertising via LinkedIn Campaign Manager
Data Sharing with LinkedIn:
- Conversion events (sign-ups, subscriptions, shares)
- Aggregate engagement metrics
- Custom audience matching (hashed emails)
- NO direct sale of individual profile data
Your LinkedIn Privacy Controls:
- Control LinkedIn data sharing
- Opt-out of LinkedIn Insight Tag
- Disconnect LinkedIn account: Settings → Connected Accounts
- Request deletion of synced LinkedIn data: [email protected]
10. Subscription and Payment Privacy
Our Subscription Plans (as of January 2025):
Basic: $0/month
Unlimited listing access, direct messaging
Silver: $499-599/month
10 direct lead messages/month
Gold: $899-999/month Most Popular
20 direct lead messages/month
Platinum: $2,499-2,999/month
50 direct lead messages/month
Payment Security:
- All payments processed securely by Stripe (PCI DSS Level 1 certified)
- We do NOT store full credit card numbers
- Billing address and tax information retained for legal compliance
- Payment history available in account settings
14. Professional Trust and Verification
LinkedIn Trust Score Methodology (0-5.0 scale):
✓ LinkedIn connections / 20 (max 25 points)
✓ Endorsements × 2 (max 15 points)
✓ Recommendations × 5 (max 10 points)
✓ Years on LinkedIn × 1 (max 10 points)
✓ HomeLeafs activity (max 50 points)
✓ LinkedIn Premium bonus: +10%
✓ Company page bonus: +5 points
Public Display: Trust scores are displayed on user profiles, visible to all platform users, and updated every 30 days.
4. Your Privacy Rights
Access and Control:
- Access: Request a copy of your personal data
- Correction: Update inaccurate information
- Deletion: Request account and data deletion (subject to legal retention)
- Portability: Download your data in machine-readable format
- Objection: Opt-out of certain processing activities
How to Exercise Your Rights:
- Email: [email protected]
- In-app: Dashboard → My Account → Privacy Settings (for granular data visibility controls)
- Response time: 30 days maximum
California Residents (CCPA/CPRA):
- Right to know what personal information is collected
- Right to opt-out of sale of personal information
- Right to delete personal information (with exceptions)
- Right to non-discrimination for exercising rights
- Do Not Sell Notice: We do NOT sell personal information for money
🚫 Do Not Sell My Personal Information
HomeLeafs does NOT sell your personal information to third parties for monetary consideration. However, we may share data with partners for targeted advertising purposes, which may be considered a "sale" under CCPA.
If you wish to opt out of data sharing for advertising:
- Visit Cookie Preferences to disable marketing cookies
- Opt out of LinkedIn ads: LinkedIn Ad Settings
- Email us: [email protected] with subject "Do Not Sell My Info"
5. Data Security
Technical Safeguards:
- Encryption protocols for sensitive data
- TLS/SSL encryption for data in transit
- Strong encryption standards for data at rest
- Multi-factor authentication (MFA) available
- Regular security audits and reviews
- We follow industry-standard security controls and are working toward SOC 2 Type II
Organizational Safeguards:
- Employee background checks
- Data access controls and logging
- Security awareness training
- Incident response procedures
- Regular security policy reviews
Data Breach Notification:
In the event of a data breach, we will notify affected users within 72 hours of discovery via email and in-app alerts, coordinate with law enforcement if necessary, and implement remediation steps.
6. Data Retention
Retention Periods:
- Active Accounts: Account data retained for duration of account + 90 days
- Transaction Records: 7 years (legal requirement)
- Communications: 3 years
- Analytics Data: 2 years
- LinkedIn Data: Until disconnection or deletion; Trust scores recalculated every 30 days
- Inactive Accounts: Deletion after 180 days of inactivity (with notice)
7. Children's Privacy
Age Restriction:
- Platform is NOT intended for children under 18
- We do not knowingly collect data from minors
- Immediate deletion if minor use discovered
If you believe a minor is using our Platform, contact: [email protected]
8. International Data Transfers
Data Location:
- Primary servers: United States (Railway, MongoDB Atlas)
- CDN: Global (Cloudflare)
- Backup storage: Multi-region (Firebase)
GDPR (European Users):
- Lawful basis for processing
- Data Protection Officer: [email protected]
- Right to lodge complaint with supervisory authority
Transfer Mechanisms:
- Standard Contractual Clauses (EU-US)
- Data Processing Agreements with vendors
- Privacy Shield principles (where applicable)
11. Changes to This Privacy Policy
Update Process:
- Material changes: 30-day advance notice via email
- Minor updates: Posted on Platform with updated date
- Continued use constitutes acceptance
- Option to delete account if you disagree
12. Contact Information
Privacy Team:
Email: [email protected]
Mail: HomeLeafs Privacy Team
131 Continental Drive, Suite 301
Newark, DE 19713-4323
County: New Castle
Response Time: 30 days maximum
Data Protection Officer (GDPR):
Email: [email protected]
Responsible for GDPR compliance and EU representative coordination