HomeFlow ("HomeFlow", "we", "us" or "our") is a UK property transaction tracking platform used by estate agents, buyers, sellers, solicitors and mortgage brokers. This Privacy Policy explains how we collect, use, share and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data controller
HomeFlow is the data controller for personal data processed through the HomeFlow service. You can contact us at hello@homeflow.app.
2. Personal data we collect
- Account data: name, email address and encrypted password.
- Profile data: professional role (estate agent, solicitor, mortgage broker, buyer, seller) and firm or contact details you provide.
- Case data: property addresses, transaction status, milestones, tasks, documents you upload, messages and notifications.
- Billing data: subscription plan, billing status and limited Stripe identifiers. Card details are processed directly by Stripe and never stored by HomeFlow.
- Technical data: IP address, device, browser and usage logs needed to run and secure the service.
3. How we use your data
- Provide and operate the HomeFlow platform (contractual necessity).
- Authenticate accounts and protect against fraud and abuse (legitimate interests).
- Process subscription payments through Stripe (contractual necessity).
- Send transactional emails, notifications and case updates (contractual necessity).
- Improve the service via aggregated analytics (legitimate interests, subject to your cookie choices).
- Comply with legal obligations (legal obligation).
4. Sharing with third parties
We share personal data only with processors that help us run HomeFlow:
- Supabase — secure cloud hosting, database and authentication.
- Stripe — subscription billing and payment processing.
- Email and notification providers used to deliver service messages.
- Analytics providers (only where you have accepted analytics cookies).
We do not sell your personal data.
5. International transfers
Some of our processors may transfer data outside the UK. Where this happens we rely on appropriate safeguards such as UK Addendum to the EU Standard Contractual Clauses or adequacy decisions.
6. Data retention
We keep personal data for as long as your account is active and for as long as needed to provide the service, resolve disputes and comply with legal obligations. Case data may be retained by professional users to meet conveyancing and regulatory record-keeping requirements.
7. Your rights
Under UK GDPR you have the right to access, rectify, erase, restrict or object to processing of your personal data, and the right to data portability. To exercise these rights contact hello@homeflow.app. You may also complain to the Information Commissioner's Office (ICO) at ico.org.uk.
8. Security
We use industry-standard measures including encryption in transit, access controls and audit logging. No internet service is completely secure, and you remain responsible for keeping your password confidential.
9. Changes
We may update this Privacy Policy from time to time. Material changes will be notified by email or in-app.
10. Governing law
This Privacy Policy is governed by the laws of England and Wales.