Privacy policy

Last updated: July 29, 2026

This Privacy Policy explains how HomeyGroup, Inc. (“Homey,” “we,” “us,” or “our”) collects, uses, and shares information when you use homey.io and the Homey Reserve service (the “Service”). By using the Service, you agree to the practices described here.

Information we collect

Information you provide

  • Account information. Your name, email address, and password when you create an account. Passwords are handled by our authentication provider and are never visible to us in plain text.
  • HOA information. Your association’s name, address, and details such as unit count that you provide during onboarding or in settings.
  • Uploaded documents. Reserve studies and other documents you upload, which may contain information about your association’s property, finances, and planning. You can upload a document for free analysis without creating an account.
  • Workspace content. Projects, components, comments, calendar events, and other content you and your board members create in the Service.
  • Payment information. If you subscribe to a paid plan, payments are processed by Stripe. We receive billing details such as your plan, payment status, and the last digits of your card, but full card numbers never touch our servers.
  • Communications. Messages you send us through support chat or email.

Information collected automatically

  • Usage data. Actions you take in the Service (such as uploading a document or creating a project), pages visited, and general product usage.
  • Device and log data. IP address, browser type, operating system, and timestamps, collected for security, debugging, and abuse prevention.
  • Cookies and similar technologies. See the Cookies section below.

How we use your information

  • To provide, maintain, and improve the Service;
  • To analyze your uploaded reserve studies using AI and generate extractions, summaries, and project recommendations;
  • To process payments and manage subscriptions;
  • To send transactional emails such as invitations, notifications, and reminders;
  • To respond to support requests;
  • To understand how the Service is used and improve the product;
  • To protect the Service against fraud, abuse, and automated attacks; and
  • To comply with legal obligations.

AI processing of your documents

When you upload a reserve study, we send its contents to Anthropic’s Claude API to extract components, financial figures, and metadata and to generate analysis. Anthropic processes this data as a service provider and, under its commercial terms, does not use API inputs or outputs to train its models. We do not use your documents to train AI models of our own, and we do not sell your documents or data.

How we share information

We share information only as described below. We do not sell your personal information.

  • Within your HOA workspace. Content you add to a workspace is visible to other members of that workspace according to their roles.
  • Service providers. We use third-party providers to operate the Service: Google Firebase / Google Cloud (hosting, authentication, database, and file storage), Anthropic (AI document analysis), Stripe (payments), Resend (transactional email), Mapbox (address autocomplete), Intercom (support chat and product analytics), Slack (internal operational notifications), Cloudflare (bot protection), and Google Tag Manager / Google Analytics (site analytics). These providers process data on our behalf and are bound by their own contractual and legal obligations.
  • Legal requirements. We may disclose information if required by law, legal process, or to protect the rights, safety, or property of Homey, our users, or the public.
  • Business transfers. If Homey is involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.

Cookies and tracking

We use the following cookies and similar technologies:

  • Session cookie. A first-party cookie that keeps you signed in. This is essential to the Service.
  • Analytics. Google Tag Manager and Google Analytics help us understand site traffic and product usage on our production site.
  • Support and engagement. Intercom sets cookies to power support chat and associate conversations with your account.

You can control cookies through your browser settings. Blocking the session cookie will prevent you from staying signed in.

Data retention

We retain your account data and workspace content for as long as your account is active. If your subscription lapses, your data is preserved on the free tier. Free analyses uploaded without an account are retained so you can return to your results and claim them later. You can request deletion of your account and associated data at any time by contacting support@homey.io; we will delete it except where retention is required by law (for example, billing records).

Security

We protect your data using industry-standard measures, including encryption in transit and at rest, role-based access rules on all database and storage access, and bot protection on public upload endpoints. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security — but we work to protect your information and will notify you of any breach as required by law.

Your rights and choices

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you;
  • Correct inaccurate information;
  • Delete your personal information;
  • Receive a copy of your data in a portable format; and
  • Object to or restrict certain processing.

To exercise any of these rights, contact us at support@homey.io. We will respond within the timeframe required by applicable law and will not discriminate against you for exercising your rights.

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you the rights above with respect to your personal information. As noted, we do not sell your personal information and have not done so in the preceding 12 months.

Children’s privacy

The Service is intended for adults managing homeowners associations and is not directed at children under 18. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

International users

The Service is operated from the United States, and your information is processed and stored in the United States. If you use the Service from outside the U.S., you consent to the transfer of your information to the U.S., which may have different data protection laws than your jurisdiction.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or an in-app notice before the changes take effect. The “Last updated” date at the top reflects the most recent revision.

Contact

Questions about this policy or your data? Contact us at support@homey.io. See also our Terms of Service.