Privacy Policy

Last updated September 26, 2026

This Privacy Policy explains how Homesolo (“we”) collects, uses, and protects your information, and the rights you have under the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Homesolo is not available in California.

Information we collect

  • Name and email address
  • Property information you enter (addresses, attributes, notes)
  • License numbers (for brokers)
  • AI-generated outputs (pricing analyses, descriptions, offer evaluations)
  • Payment information (processed by Stripe; we do not store full card numbers)
  • MLS data, used temporarily for display only (see below)
  • Your Bright MLS member ID, which we check to verify your licence, and the licence number and state you give us
  • Information about other people that you enter: your clients, prospects and other contacts (name, email, phone, role, notes, activity, follow-up dates), their saved search criteria and labels, and offer details that name a buyer. You are responsible for having a right to enter it; we keep it only to provide the service to you and do not use it for any other purpose
  • Technical and security records: IP address and sign-in attempts, and a record that an AI question was asked and what it cost (not its text)
  • In your browser: your session cookies, your cookie preference, your theme, and, in the tab, the conversation you have had with Joy, which can contain client names. It is removed when you sign out or close the tab

Third parties we share data with

We use the following sub-processors, each only for the purpose stated:

  • Anthropic — AI processing (inference only). No MLS data is sent to Anthropic.
  • Bright MLS — source of property listing data. Bright requires usage monitoring on pages that show its data; when that is enabled, a script supplied by Bright runs on those pages
  • Quoin — looks up DC public records (assessor, permits, sales) for a property address you enter
  • Google — converts a property address to map coordinates (geocoding)
  • Stripe — payment processing
  • Resend — transactional email delivery
  • Supabase — application data hosting and authentication
  • Sentry — error monitoring (with PII scrubbing)
  • Upstash — rate limiting and caching
  • Vercel — application hosting and delivery (processes requests and request logs, including IP addresses)

MLS data

Property listing data from Bright MLS is used solely to display real estate information within our platform. MLS data is not transmitted to any AI provider. Bright MLS data is not used to train or improve any AI model.

AI processing

We use Anthropic’s API for inference only. Your content — the information you provide and the AI-generated outputs you receive — is not used to train any AI model, by Anthropic or anyone else. MLS listing data is never sent to any AI provider; the AI receives only abstracted summaries.

Joy, the in-app assistant, works from Homesolo’s own figures and placeholders. Client names, email addresses, phone numbers and property addresses that you have saved in Homesolo are replaced with placeholders before anything is sent, and we put the real details back into her answer after it returns. Text you type yourself is sent as you wrote it, so a name that is not saved in Homesolo, or a spelling that differs from the saved one, may not be replaced: say “my seller” instead of a name. The same is true of other AI features that take free text or a document you upload (listing descriptions, counter-offers, questions about an analysis, contract reading), which send what you give them. We keep a record that a question was asked and what it cost, not its text.

Your rights

Subject to applicable law, you have the right to access your data, to rectify inaccurate data, to request erasure of your data, and to portability (a machine-readable export). You can export or delete your data at any time from Settings → Privacy.

Data retention

  • Active data is retained while your account is active.
  • When you delete your account, your profile and the records you own — properties, listings, analyses, documents, and the transactions attached to your properties — are deleted immediately.
  • Where you were a counterparty to another user’s transaction, that transaction record remains with the other party, with your link to it removed.
  • Security logs (sign-in attempts) are kept for 7 days, and payment-webhook records for 90 days, after which they are purged automatically.

Contact

For privacy requests, contact privacy@homesolo.app.