Privacy Policy

1. Introduction

My Home Hero Pty Ltd ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services, including our mobile and web applications (collectively, the "Service").

Please read this Privacy Policy carefully. By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you provide directly to us, including:

• Contact Information: Name, email address, phone number, and other contact details you provide when using our lead capture forms or registering for our Service
• Property Information: Information about properties you are interested in, including property addresses, inspection preferences, and property-related inquiries
• Lead Information: Information collected during open home visits, including your preferences, interests, and responses to our decision-tree questionnaires
• Account Information: If you create an account, we collect your username, password, and profile information
• Communication Preferences: Your preferences for receiving email and SMS communications, including consent timestamps

2.2 Information Collected Automatically

When you use our Service, we automatically collect certain information, including:

• Device Information: IP address, browser type, operating system, device identifiers, and mobile network information
• Usage Data: Information about how you access and use our Service, including pages visited, features used, and time spent on the Service
• Location Data: General location information based on your IP address or device settings (with your permission)
• Offline Data: Information stored locally on your device when using our offline-capable features, which is synchronized when connectivity is restored

2.3 Information from Third Parties

We may receive information about you from third-party services, including:

• Authentication Providers: When you sign in using Google OAuth or other third-party authentication services, we receive your basic profile information, including:
  • Your name (first name and last name)
  • Your email address
  • Your profile picture (if available)

  This information is used solely for authentication and account creation purposes. We do not access or store any other data from your Google account. You can revoke access to your Google account at any time through your Google account settings.

• CRM Integration: Information from VaultRE and other CRM systems that you have authorized us to access
• Property Data Providers: Property listings and related information from real estate data providers

2.4 Information Collected by the HQ Loop Browser Extension

HQ Loop is an optional Chrome browser extension for signed-in HQ and SecretHomes team members that lets you report bugs and share feedback. It is used only to diagnose and resolve the issues you report, and collects only the information described below.

• Screenshots and screen recordings you capture: When you choose to take a screenshot or record your screen, the resulting image or video — including any annotations you add, and microphone audio if you enable it for a recording — is sent to us with your report.
• Files you upload: Any image or video you choose to attach to a report.
• Technical diagnostics: While you have an HQ or SecretHomes page open, the extension keeps a small rolling buffer of recent browser console errors and failed network requests in your browser's memory, so that useful diagnostics can be attached if you choose to report an issue. This buffer stays on your device and is only sent to us when you submit a report — if you do not submit a report, it is not transmitted. When you submit, the extension also attaches the page URL and basic browser and viewport information.
• Connection token: The extension stores a connection token and your basic profile locally in your browser so you do not have to reconnect each time.

Screenshots, recordings, and uploads are only captured when you explicitly start a report. The extension does not record your keystrokes, page content, or form inputs, does not access your browsing history, and does nothing on websites other than HQ and SecretHomes unless you explicitly start a report there.

We use this information solely to triage and fix the issues you report. We do not sell it, use it for advertising, or share it beyond the service providers described in Section 4 (for example, our cloud storage provider, Supabase). Screen recordings are automatically deleted once the related report is resolved, or within 30 days — whichever comes first. The extension requires a signed-in HQ account to function.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide Our Service: To operate, maintain, and provide the features and functionality of our Service, including lead capture, contact management, and property tracking
• To Process and Route Leads: To process lead information collected at open homes, route leads to appropriate real estate agents, and manage lead assignments
• To Communicate with You: To send you confirmation emails, respond to your inquiries, provide customer support, and send you important updates about our Service
• To Send Marketing Communications: With your consent, to send you marketing emails and SMS messages about properties, services, and promotions that may interest you
• To Improve Our Service: To analyze usage patterns, understand how our Service is used, and make improvements to enhance user experience
• To Ensure Security: To detect, prevent, and address technical issues, fraud, security breaches, and other potentially prohibited or illegal activities
• To Comply with Legal Obligations: To comply with applicable laws, regulations, legal processes, and governmental requests
• To Sync with CRM Systems: To synchronize your information with authorized CRM systems, including VaultRE, to ensure accurate and up-to-date contact management

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 With Real Estate Professionals

We share your contact and lead information with real estate agents, agencies, and professionals who are part of our Service network and who may assist you with your property needs.

4.2 With CRM Systems

We integrate with CRM systems, including VaultRE, and may share your information with these systems to facilitate contact management and lead tracking.

4.3 With Service Providers

We may share your information with third-party service providers who perform services on our behalf, including:

• Cloud hosting and data storage providers (including Supabase)
• Email and SMS service providers (including Resend and Twilio)
• Authentication service providers
• Analytics and monitoring services
• Customer support platforms

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.4 For Legal Reasons

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of My Home Hero Pty Ltd, our users, or others.

4.5 With Your Consent

We may share your information with other parties when you have given us explicit consent to do so.

4.6 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.

5. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: We use encryption technologies to protect data in transit and at rest
• Access Controls: We implement role-based access controls and authentication mechanisms to restrict access to your information
• Secure Infrastructure: We use secure cloud infrastructure providers with industry-standard security practices
• Offline Data Protection: Data stored locally on your device is protected by device-level security measures
• Regular Security Assessments: We conduct regular security assessments and updates to address potential vulnerabilities

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Your Rights and Choices

You have certain rights regarding your personal information:

• Access: You can request access to the personal information we hold about you
• Correction: You can request that we correct inaccurate or incomplete information
• Deletion: You can request that we delete your personal information, subject to certain legal and operational requirements
• Opt-Out: You can opt out of receiving marketing communications from us by following the unsubscribe instructions in our emails or SMS messages, or by contacting us directly
• Data Portability: You can request a copy of your data in a structured, machine-readable format
• Withdraw Consent: Where we rely on your consent, you can withdraw it at any time
• Google OAuth Data: If you signed in using Google OAuth, you can revoke our access to your Google account at any time through your Google Account permissions page. This will prevent future access but will not delete data we have already collected with your consent.

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

We use cookies for purposes such as authentication, session management, and analyzing usage patterns. You can control cookie preferences through your browser settings.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.

Factors that determine how long we retain information include:

• The nature of the information and the purpose for which it was collected
• Legal and regulatory requirements
• Our legitimate business interests
• Your consent and preferences

9. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our Service, you consent to the transfer of your information to these countries.

We take appropriate safeguards to ensure that your information receives an adequate level of protection in the countries in which we process it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this policy.

We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For information about our terms and conditions, please see our Terms of Service.