Privacy Policy

This Privacy Policy explains how Homr Solutions Pty Ltd (ABN 41 690 199 805) (“Homr”, “we”, “us”, “our”) collects, uses, discloses and protects your personal information when you use the Homr platform at homr.com.au and related services (the “Platform”).

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using the Platform you agree to the collection and use of information in line with this policy.

From consumers (property seekers):

• Email address, full name, and a hashed password (we never store passwords in plain text)
• Phone number (optional — for example, when you make an enquiry to an agent)
• Location data — suburbs of interest, search coordinates and search radius
• Financial information you choose to provide — budget range, pre-approval status, deposit amount
• Property preferences — property types, bedrooms, bathrooms, features and deal-breakers
• Investment goals and life stage, and your buying timeline
• Search history and AI chat conversations
• Technical data — IP address, user agent, device/browser information, and usage activity (searches, saves, views)

From agencies and agents (business customers):

• Agency details — name, brand, suburb, state, postcode, phone, email and website
• Agent profile details — display name, bio, photo, phone, email, licence number, title, specialisations, suburbs served and years of experience
• Billing information — processed by Stripe; we store Stripe customer/subscription identifiers, not your card numbers
• Agency user roles and permissions

We collect personal information:

• Directly from you — sign-up forms, the onboarding wizard, chat messages and profile settings
• Automatically — via cookies and similar technologies (auth tokens, usage logging). See our Cookie Policy.
• From third parties — Supabase (identity) and Stripe (payment status)

We use this information to:

• Provide the Platform — property search, AI recommendations and investment analysis
• Personalise your experience — AI memory and preference-based search
• Process agency payments and manage subscriptions
• Communicate with you — notifications and forwarding enquiries to agents
• Improve our services — analytics and conversation-quality metrics
• Connect buyers with listing agents (lead delivery), and meet our legal obligations

We disclose personal information to the service providers we rely on to run the Platform, only as needed to provide our services:

• Supabase — identity, authentication and database hosting
• Stripe — payment processing (PCI-DSS compliant)
• OpenAI, Anthropic, AWS Bedrock — AI model inference and embeddings for the assistant and analysis
• Mapbox and Google Maps/Places — map rendering and geocoding
• Resend — transactional email delivery
• Typesense — fast search/typeahead
• Real estate agents/agencies — your enquiry and contact details, with your consent, so they can respond to you

We do not: sell your personal information, use it for third-party advertising, share it with data brokers, or use your conversations to train AI models.

Some of our service providers process data outside Australia (for example, Supabase, OpenAI, Anthropic, Stripe, Resend and Mapbox may process data in the United States; AWS uses the Sydney region where practical). Where information is disclosed overseas, we take reasonable steps to ensure it is handled consistently with the APPs, including under each provider’s data-processing terms.

• Data stored in PostgreSQL databases hosted on Supabase
• Passwords hashed; never stored in plain text
• HTTPS/TLS encryption in transit and authenticated APIs (JWT)
• Role-based access control for agency users, and short-lived caches with expiry for temporary data
• All payment card data is handled by Stripe — we never see or store card numbers

No method of transmission or storage is completely secure; while we work to protect your information, we cannot guarantee absolute security.

• Account and profile data — until you request deletion
• Conversation history — retained until you request deletion
• Billing records — 7 years (Australian tax law)
• Notifications — 90 days, then automatically purged
• Email consent logs — retained for Spam Act 2003 compliance
• Usage analytics — retained in aggregated/anonymised form

Under the Australian Privacy Act, you may:

• Access the personal information we hold about you
• Request correction of inaccurate or out-of-date information
• Request deletion of your information
• Opt out of marketing communications at any time

To exercise any of these rights, email contact@homr.com.au. If you are not satisfied with how we handle your request, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Homr is not directed at individuals under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be notified via the Platform or by email. The “last updated” date above reflects the current version.

For any privacy question or request, contact Homr Solutions Pty Ltd (ABN 41 690 199 805) at contact@homr.com.au.