Privacy & Data Usage Policy

1. What we collect

To provide Home Manager, we collect what you give us directly and a limited amount that the service itself creates as you use it:

• Account information — your name and email, via our sign-in provider.
• Your home records — property address, room and item records, appliance and maintenance history, documents, and photos you upload.
• Transaction records — for a home being bought or sold, records shared between buyer, seller, and their agents, and anything a connected inspector, agent, or loan officer sends into your account (only after you accept it).
• Usage and security information — sign-in timestamps, IP address, and basic device information, used to keep your account secure and to operate our append-only security audit log.

We only collect what we need to run the features you use.

2. Why we use it

1. To run the service — show your records back to you, run the features you request, and let you export or share what you've created.
2. To keep your account secure — authenticate you and maintain our security audit log.
3. To communicate with you — service and security notices, and, only if you opt in, product updates.
4. To meet legal obligations.

We do not sell your personal information. We do not use your documents, photos, or records to train unrelated products or for advertising.

3. Who else sees it

• Service providers who help us run Home Manager — our identity provider (Auth0), our hosting provider (Vercel), our database provider (Neon), and our file-storage provider (AWS S3, with KMS encryption). Each is bound by its own security and confidentiality commitments and may not use your data for its own purposes.
• People you explicitly invite — a co-owner or household member, or a buyer or seller you choose to hand records to. You control these invitations.
• Services you choose to connect — if you, or a real estate agent, inspector, or loan officer on your transaction, connect Spectora or Keller Williams Command to send information into Home Manager, we receive only what that connection is scoped to share, and nothing enters your account until you accept it. These are sources you may connect to send information to us, not vendors we send your data to. Inspection-report content received this way is not currently processed by artificial intelligence.
• When the law requires it, or to protect the rights, safety, or property of Scale-Right, Inc., our users, or the public.

We never sell or rent your personal information for third-party marketing.

4. How long we keep it

We keep your information for as long as your account is active, plus a limited period afterward to meet legal, security, and audit obligations. You can ask us to delete your account and personal data sooner, subject to the exceptions in Section 5.

5. Your choices and rights

• See what we have — request an export of your personal data.
• Fix it — correct inaccurate account information.
• Delete it — request deletion of your account and personal data. Some records may be kept in de-identified form where we're legally required to (for example, our security audit log preserves that an event happened without keeping your identity attached to it after erasure).
• Take it with you — export your records before you delete your account.
• Say no — opt out of any non-essential communications at any time.

6. Changes to this policy

If we materially change what we collect or how we use it, we'll update this page and, where required, ask for your acceptance again before the change applies to you.

7. Contact

Scale-Right, Inc. — William.Anthony@scaleright.com