Privacy Policy
Last updated: July 25, 2026
HomeSavvy is committed to protecting your privacy. This policy explains what we collect, how we use it, when we share it, and the choices you have. It applies to homesavvydeals.com and related services.
Scope
This policy covers information collected when you visit our site, create an account or sign in (including with providers such as Google, Facebook/Meta, or Apple), submit product links, interact with features, or contact us. It also covers information we receive from analytics and service providers we use to operate the service.
Information We Collect
- Account and Authentication Data. If you create an account or sign in with a provider like Google, Facebook/Meta, or Apple, we may receive your email address, display name, profile image (if available), provider/user ID, and authentication data needed to complete sign-in. We use Supabase to store account metadata (e.g., email, username, provider ID). We do not store passwords in our application tables; authentication secrets are securely handled by Supabase.
- Content You Submit. Product links, preferences, feedback, and other content you provide while using the service.
- Device and Usage Data. Pages viewed, clicks, session duration, approximate location, device/browser type, and similar usage data. We use consent-gated first-party analytics stored in Supabase, along with Google Analytics 4 (GA4) and PostHog. If you grant analytics/statistics or marketing consent, PostHog may collect page views and autocaptured interactions and provide aggregated heatmaps and session replays that help us understand how the service is used. PostHog is configured to avoid or mask sensitive form inputs and private user-submitted content. When marketing consent is granted, we may use first-party website behavior, such as product views, searches, clicks, and browsing sessions, to personalize HomeSavvy recommendations.
- Cookies and Similar Technologies. We use cookies that are strictly necessary to operate the site and (with your consent) analytics, preference, and marketing cookies. Cookiebot manages consent and cookie categories.
Google User Data (Required Disclosures)
When you choose to sign in with Google, our application may access limited Google user data via Google APIs, in accordance with the Google API Services User Data Policy.
- Data Accessed. Basic profile information permitted by the scopes you approve (e.g., email address, name, profile image) and an ID necessary to authenticate you. We do not request access to your Gmail, Drive, Calendar, or other Google data beyond basic profile/identity info.
- Data Usage.We use Google user data only to authenticate you, create and maintain your account, personalize your experience, and provide support. We do not use Google user data for advertising or to build profiles unrelated to the app's core functionality.
- Data Sharing. We do not sell Google user data. We share it only with service providers (processors) that help us operate the service (e.g., hosting, authentication, analytics) under confidentiality and data protection agreements, and only for the purposes described here.
- Storage & Protection. Google user data is stored securely with our cloud providers. We use transport-layer security (HTTPS), encryption at rest where supported, access controls, and least-privilege practices. Tokens, if used, are stored and transmitted securely.
- Retention & Deletion.We retain Google user data for as long as your account is active or as needed to provide the service, then delete or anonymize it within a reasonable period unless a longer retention period is required by law. You may request deletion at any time (see "Your Choices").
- Revoking Access.You can revoke this app's access to your Google account at any time via your Google Account settings (Security → Third‑party access). Revoking access may prevent you from signing in with Google.
Facebook/Meta Login Data
When you choose to sign in with Facebook, our application may access limited information made available by Meta through Facebook Login ("Platform Data"), subject to the permissions you approve and Meta's Platform Terms and policies.
- Data Accessed. We request only the permissions needed for login: email and public_profile. This may include your primary email address, name, profile image (if available), app-scoped Meta user ID, and authentication data needed to complete sign-in. We do not request access to friends, birthday, location, photos, posts, likes, or other extended Facebook profile data.
- Data Usage.We use Facebook/Meta Platform Data to authenticate you, create and maintain your HomeSavvy account, prevent duplicate accounts, provide a basic personalized in-app experience, support account and security requests, and process deletion requests. We do not sell Facebook/Meta Platform Data or use it to build profiles unrelated to HomeSavvy's core functionality.
- Analytics and Marketing. We may use aggregated, de-identified, or anonymized reporting to understand and improve signup flows. Where marketing consent is required, conversion or advertising events are sent only after consent is granted and are limited to the event data needed to measure the signup or related website action.
- Data Sharing. We share Facebook/Meta Platform Data only with service providers that help us provide authentication, hosting, database, security, consent management, email/service communications, analytics, and consented conversion measurement. These providers process data on our behalf under contractual obligations and only for the purposes described in this policy.
- Retention & Deletion.We retain Facebook/Meta Platform Data for as long as your account is active or as needed to provide the service, then delete or anonymize it within a reasonable period unless a longer retention period is required by law. You may request deletion at any time (see "Your Choices").
- Revoking Access.You can remove HomeSavvy's access from your Facebook account settings. Revoking access may prevent you from signing in with Facebook.
How We Use Information
- Provide, maintain, and improve the service and features you use.
- Authenticate users and secure accounts (including fraud prevention).
- Respond to support requests and communicate service updates.
- Analyze aggregated usage to improve performance and usability.
- When you consent to marketing cookies, personalize first-party website recommendations and HomeSavvy email recommendations or offers based on your consented website behavior.
- Comply with legal obligations and enforce our terms.
When We Share Information
- Service Providers (Processors). We use trusted vendors to operate our service, including hosting and serverless infrastructure (Vercel), database and authentication (Supabase), email and service communications (Brevo), first-party analytics storage (Supabase), analytics (Google Analytics 4), behavioral and session/UX analytics (PostHog), consent management (Cookiebot), and consented conversion measurement or advertising analytics (Meta, Google Ads, Pinterest, TikTok, and OpenAI Ads where configured). PostHog acts as a processor on our behalf for the consented analytics data we send to it. These providers process data on our behalf or according to their service terms and only for the purposes described here.
- Legal and Safety. We may disclose information if required by law or to protect rights, safety, and the integrity of our services.
- Business Transfers. In a merger, acquisition, or asset sale, we may transfer information as permitted by law and will provide notice where required.
We do not sell your personal information.
Public Authority Requests
If we receive a request from a public authority for personal information, we review the request for legal validity, seek to disclose only the minimum information necessary, document the request and our response, and may challenge requests that we believe are unlawful, overbroad, or otherwise improper.
Cookies and Consent
We use Cookiebot to display a consent banner, classify cookies, and respect your choices. You can change or withdraw your consent at any time via the cookie settings link typically available in the site footer. Cookie categories include strictly necessary, preferences, analytics or statistics, and marketing. If you do not grant either analytics/statistics or marketing consent, or later withdraw both, PostHog does not capture new autocaptured interactions, heatmap data, or session replays from your browser. If you withdraw marketing consent, we also stop using the marketing session id for future behavior-based personalization. We may keep a consent event record so we can prove and honor your latest consent choice.
Data Storage, Security, and International Transfers
We store data with reputable cloud providers and protect it using administrative, technical, and physical safeguards, including encryption in transit (HTTPS) and access controls on a need‑to‑know basis. Where data is processed outside your country, we rely on appropriate safeguards as required by applicable law.
Data Retention
- Account data is retained while your account is active. If you request deletion, we delete or anonymize within 30 days, subject to legal holds or backup retention.
- Analytics data from our first-party event stream is kept for up to 180 days and then deleted. Aggregate dashboards reflect that retained window; analytics vendors apply their configured retention periods.
- Server logs and backups are retained for a limited period to ensure security and reliability.
Your Choices and Rights
- Access, Correction, Deletion. You can request a copy of your data, ask us to correct it, or delete it.
- Revoke Google Access. Manage or revoke access via your Google Account settings (Security → Third‑party access).
- Revoke Facebook Access.Manage or remove HomeSavvy's Facebook Login access from your Facebook account settings under Apps and Websites.
- Cookie Preferences. Manage consent via the Cookiebot banner or cookie settings link.
- Email Preferences. Opt out of non‑essential emails via the unsubscribe link where applicable. Email opt-out choices are separate from cookie consent, and withdrawing marketing cookie consent stops behavior-based email personalization even if you remain subscribed to receive emails.
Children's Privacy
Our service is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided personal data, please contact us so we can delete it.
Third‑Party Information
Contact Us
If you have questions or requests related to privacy, data access, or deletion, please contact us.
We may update this policy from time to time. If changes are material, we will provide notice (e.g., via the site or email) as required by law.
