Privacy Policy

We collect information you provide, information generated through use of the Service, and information received from integrated service providers. Depending on how you use Homee, this may include:

• Account data, such as name, email address, password credential handled through Better Auth, email-verification state, profile image, role, account timestamps, and any account restriction information.
• Authentication and session data, such as account or provider identifiers, session tokens, login time, IP address, user agent, OAuth scopes and token metadata, and security or access events.
• Property activity, such as saved homes, save dates, property pages viewed, pseudonymous viewer keys, aggregate view counts, and timestamps used to avoid counting repeated views within a 24-hour window.
• Subscription and transaction data, such as Stripe customer, checkout, subscription, Price, invoice, and webhook identifiers; subscription status and period end; cancellation state; currency; amount due, paid, or remaining; payment outcome; attempts; and event timestamps.
• Communications, including your name, email, selected subject, message, language, and technical delivery information when you use the contact form.
• Preferences and device data, including language, display currency, measurement system, theme, browser storage identifiers, device and browser type, IP address, requested pages, and security or diagnostic records.
• Administrative records, where relevant, including actions affecting an account or content, actor details, before-and-after values, IP address, user agent, and timestamps.

We collect information directly from you when you register, sign in, choose preferences, save a home, subscribe, manage billing, or send a message. We collect technical and activity information automatically when your browser requests pages, uses a session, or records a qualifying property view.

We may receive information from service providers, including identity information from Google if you choose Google sign-in, subscription and payment status from Stripe, delivery status from communications providers, and security or infrastructure records from providers that host or protect the Service.

We use personal information only for legitimate business and legal purposes connected with Homee.

• Provide, localize, personalize, maintain, and improve property search, account, saved-home, VIP, and preference features.
• Authenticate users, manage sessions and roles, prevent unauthorized access, enforce limits, investigate abuse, and protect users and infrastructure.
• Create and administer subscriptions, confirm entitlement, reconcile invoices and payment outcomes, provide billing support, and prevent duplicate checkout or webhook processing.
• Respond to messages, privacy requests, billing issues, complaints, and legal notices.
• Measure aggregate property interest, deduplicate repeated views, diagnose performance, and understand which Service features are useful.
• Comply with law, accounting and tax obligations, lawful requests, dispute handling, audits, and enforcement of our agreements.
• Send service-related communications. We will seek consent where required before sending promotional marketing.

Where applicable law requires a legal basis, we process information as necessary to perform our contract with you, take steps you request before entering a contract, comply with legal obligations, and pursue legitimate interests such as security, fraud prevention, service administration, improvement, and establishment or defense of legal claims. We rely on consent where required, including for optional functionality or marketing governed by consent.

You may withdraw consent at any time for future processing based on consent. Withdrawal does not affect processing already performed or processing supported by another lawful ground.

Stripe processes payment methods, billing addresses, checkout, recurring charges, promotion codes, invoices, and the customer portal. We send Stripe account details such as your name, email, and internal user identifier and receive identifiers and transaction status needed to administer Homee VIP.

Homee does not store full payment card numbers or card security codes. Stripe processes payment information under its own privacy policy and may act as an independent controller or service provider depending on the activity and applicable law.

Homee uses first-party cookies and browser storage to operate the Service, retain preferences, maintain security, and measure property views. Browser settings can block or delete storage, but doing so may sign you out, reset preferences, or impair features.

• Authentication cookies maintain your signed-in session. Configured sessions generally expire after 24 hours, subject to security invalidation and Better Auth behavior.
• NEXT_LOCALE and ADMIN_LOCALE remember language choices for up to one year.
• homee_unit and homee_currency remember display preferences for up to one year. These preferences do not change Stripe billing currency.
• The theme provider uses a cookie to prevent a visual theme flash and remember your selected appearance.
• homee_property_viewer stores a random guest identifier for up to one year. Homee transforms this identifier, or a signed-in user identifier, into a pseudonymous key to deduplicate a property's views within 24 hours.
• Local storage may hold a per-property last-view timestamp. Administrative users may also store unpublished blog drafts locally in their browser.

We do not sell personal information for money. We disclose information only as needed to operate the Service, complete your requests, protect legal interests, or comply with law. Recipients may include:

• Stripe for checkout, subscriptions, invoices, payment methods, promotions, fraud prevention, and billing support.
• Better Auth and configured identity providers, including Google when you choose Google sign-in, for authentication and account security.
• Google services for embedded maps, directions, nearby-place information, and externally opened map links. Requests may include a property address, coordinates, or selected destination.
• Resend and our designated business mailbox provider for delivery and handling of contact-form messages.
• Hosting, database, object-storage, content-delivery, security, logging, and technical support providers that process data on our behalf.
• Gravatar, when a signed-in profile requests an avatar derived from a one-way hash of the normalized account email; Gravatar also receives ordinary browser request data.
• Professional advisers, auditors, insurers, authorities, courts, or counterparties where reasonably necessary for compliance, claims, safety, corporate transactions, or protection of rights.
• A successor or relevant counterparty in a merger, financing, reorganization, sale of assets, or transfer of the Service, subject to confidentiality and applicable law.

Property pages may load listing images or other media from Homee infrastructure or external source hosts. Those hosts can receive normal web-request information such as IP address, user agent, referrer information permitted by the browser, requested resource, and time.

Property consultation, agency, source, or map links may take you to an independent third party. Information you provide after leaving Homee is governed by that third party's privacy policy, not this Policy.

Homee serves users internationally and uses providers that may process information in Japan, the United States, or other countries where they or their subprocessors operate. Those countries may have privacy laws different from the laws where you live.

Where required, we use contractual, organizational, or other lawful safeguards for cross-border transfers and provide information about applicable safeguards upon a verified request, subject to legal and confidentiality limits.

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including providing an account or subscription, maintaining security and audit records, resolving disputes, enforcing agreements, and satisfying tax, accounting, payment, and legal requirements. Retention depends on the type of record, account status, sensitivity, legal obligations, and risk.

When information is no longer required, we delete it, anonymize it, or isolate it from active use. Account deletion may remove account credentials, sessions, saved properties, and subscription entitlement records, while payment, invoice, security, audit, publication, or legal records may be retained or de-identified where needed. Stripe, email providers, and other independent providers apply their own retention schedules. Backup copies may persist for a limited period before routine deletion.

We use administrative, technical, and organizational measures designed to protect personal information, including authenticated access controls, role checks, secure session management, rate limits, security headers, signed Stripe webhooks, restricted administrative functions, and redaction of sensitive log fields.

No online system is completely secure. You are responsible for choosing a strong, unique password, protecting your device, signing out of shared devices, and notifying us promptly of suspected unauthorized use.

Depending on your location and subject to legal exceptions, you may have rights to request confirmation of processing, access, correction, updating, deletion, cessation of use, restriction, objection, data portability, withdrawal of consent, or information about disclosures and cross-border transfers. You may also have the right to complain to a competent privacy authority.

You can update certain preferences in Homee, manage payment information through Stripe, cancel future subscription renewals through the Stripe portal, and control cookies or local storage through your browser. To exercise another privacy right, use the Homee contact form and identify the right requested. We may need to verify your identity and authority before responding. We will not discriminate against you for exercising a privacy right.

Homee may not provide self-service account deletion in every interface. You may request deletion through the contact form. Before completing a request, we may require identity verification and resolution or cancellation of an active subscription, open payment issue, security investigation, or legal hold.

Deletion does not require us to erase information that applicable law permits or requires us to retain, including transaction, invoice, fraud-prevention, security, audit, dispute, and compliance records. Where appropriate, we will disconnect retained records from the active account or otherwise limit their use.

Homee is intended for people capable of conducting property research and entering applicable agreements. We do not knowingly request personal information directly from a child who lacks legal capacity to consent. A minor should use Homee only with a parent or legal guardian as permitted by applicable law.

If you believe a child provided personal information without appropriate consent, contact us so we can review and take appropriate action.

Homee uses automated rules to manage authentication, rate limits, saved-home limits, subscription entitlement, campaign access, and property-view deduplication. We do not use these rules to make decisions producing legal or similarly significant effects about an individual.

Browsers may transmit Do Not Track or similar signals. Because no uniform response standard applies to the first-party operational measurement used by Homee, the Service does not currently respond to those signals. You may control cookies and local storage through browser settings.

We may update this Policy as the Service, providers, law, or our practices change. We will post the revised Policy and update its effective date. If a change materially affects how we use personal information, we will provide additional notice or request consent when required by law.

For privacy questions, requests, complaints, or concerns about this Policy, contact House Forward Co., Ltd. through the Homee contact form. Please select the most relevant subject and do not include passwords, full payment-card details, or other unnecessary sensitive information.

We will review your request, verify identity where appropriate, and respond within the period required by applicable law.