Privacy Policy

This Policy applies to personal data we process when you visit our marketing pages, sign in to a HomeWiseWatch workspace, or otherwise interact with the Service.

When HomeWiseWatch processes data on behalf of a customer workspace (for example, inspection media uploaded by that workspace’s surveyors), we act as a data processor. The workspace administrator is the data controller, and their own privacy notice applies in addition to this one.

Account information. Name, email, workspace role, avatar URL and hashed credentials you provide at sign-up or via your administrator.

Workspace content. Projects, home records, tasks, inspection sections, photos, annotations, review notes, generated reports and share links. Photos captured through the mobile app include timestamp, GPS coordinates and device heading as part of the watermark.

Device and log data. IP address, user agent, language, referrer, pages visited, requests made, and error traces. We use this to operate, secure and debug the Service.

Cookies and similar technologies. A session cookie for authentication, a short-lived cookie for CSRF protection, and a preferences cookie (for example, your chosen interface language). We do not use third-party advertising cookies.

Communications. If you email or message support, we retain your message and our response.

To provide and maintain the Service, including authentication, RBAC checks, storage and rendering of inspection content, and generation of H5 reports.

To secure the Service — detect, investigate and prevent fraud, abuse and unauthorised access.

To improve the Service — diagnose bugs, measure feature usage in aggregate, and prioritise improvements.

To communicate with you — respond to support requests and send essential service notices (for example, security alerts or material changes to these policies).

To comply with legal obligations or enforce our Terms.

We rely on the following legal bases where applicable:

• Contract: to provide the Service you or your administrator signed up for.
• Legitimate interests: to keep the Service secure, debug issues, and improve functionality (balanced against your rights).
• Consent: where required, for example when you opt in to optional analytics or communications. You may withdraw consent at any time.
• Legal obligation: to comply with applicable law.

Within your workspace. Content you create is visible to members of the same workspace according to their role.

Share-link recipients. If a reviewer or administrator publishes an H5 report via a share link, anyone who holds the link can view the report until it expires or is revoked.

Service providers. We use a limited set of vendors to host infrastructure, deliver email, process payments and monitor errors. They are bound by contracts that restrict use of your data to what is necessary to provide services to us.

Legal and safety. We may disclose information when required by law, to respond to lawful requests from public authorities, or to protect the rights, property or safety of HomeWiseWatch, our users or the public.

Corporate transactions. In a merger, acquisition or asset sale we will provide notice and ensure any successor honours this Policy.

We do not sell your personal data.

HomeWiseWatch operates globally. Personal data may be transferred to and processed in countries other than the one in which it was collected.

When we transfer personal data out of the EEA, UK or Switzerland, we rely on recognised transfer mechanisms (for example, the EU Standard Contractual Clauses) and, where appropriate, supplementary measures.

We retain account information for as long as the account is active and for a reasonable period after closure to comply with legal and accounting obligations.

Workspace content is retained for the duration of the workspace’s subscription. On termination, you have 30 days to export data before we delete it in the ordinary course of business.

Logs are typically retained for up to 90 days, unless a longer period is required for security investigations or legal compliance.

We apply administrative, technical and physical safeguards designed to protect personal data, including encryption in transit (TLS), at-rest encryption of media storage, role-based access control, principle-of-least-privilege for staff access, and automated audit logging.

Every photo captured through the mobile app is watermarked with timestamp, GPS and heading at capture time to preserve evidentiary integrity.

No system is 100% secure. If we become aware of a breach that affects your personal data, we will notify you and the relevant authorities in accordance with applicable law.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Request erasure of personal data, subject to legal exceptions;
• Restrict or object to certain processing;
• Data portability — receive your data in a structured, machine-readable format;
• Withdraw consent, where processing is based on consent;
• Lodge a complaint with a supervisory authority.

To exercise these rights, email privacy@homewisewatch.com. If your data lives in a customer workspace, we may redirect you to the workspace administrator, who controls access to that content.

HomeWiseWatch is not directed to children under 16 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact privacy@homewisewatch.com and we will take appropriate steps to remove it.

We use the minimum set of cookies necessary to operate the Service:

• Authentication session cookie — keeps you signed in.
• CSRF protection token — prevents cross-site request forgery.
• Locale preference cookie (“hw_locale”) — remembers your chosen interface language.

You can block or delete cookies through your browser settings, but doing so may prevent you from using the Service.

We may update this Policy to reflect changes in the Service, our practices, or the law. When we do, we will revise the “Effective” date at the top of this page and, for material changes, provide additional notice.

Privacy questions or requests? Reach our Data Protection contact at privacy@homewisewatch.com. Postal mail: HomeWiseWatch Inc., Attn: Privacy, [Street Address], [City], [Country].

If you are in the EEA or UK and we cannot resolve your concern, you have the right to contact your local data-protection authority.