Privacy Policy

Attorney-review draft revised: September 6, 2026

This Privacy Policy explains how Nestura Digital, LLC (“Nestura,” “Homerfy,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects information when you use homerfy.com, the Homerfy web application, future mobile applications, and related services (collectively, the “Service”).

1. Information We Collect

• Account and contact information: name, email address, authentication status, communications, waitlist submissions, and support requests.
• Home and property information: addresses, property details, appliance information, warranties, maintenance records, renovations, reminders, notes, purchase information, and information you choose to associate with a home.
• Documents and media: receipts, invoices, warranties, manuals, photographs, appliance labels, and other files you upload. These files may contain personal information about you or others.
• SmartFill information: documents submitted for automated analysis, extracted text and suggested fields, confidence information, your corrections, and your decisions to accept or reject suggestions.
• Subscription and transaction information: plan selection, billing status, transaction identifiers, and limited payment-related information supplied by a payment processor. We do not intend to store complete payment-card numbers.
• Device, security, and usage information: IP-derived security identifiers, browser and device information, session and authentication events, timestamps, error information, and interactions needed to operate, secure, and improve the Service.
• Information from connected services: for example, verified email and profile information from Google when you choose Google sign-in, and address results when you use address search.

2. Sources of Information

We receive information directly from you, from household members or other people you authorize to contribute to a home, automatically from your device when you use the Service, and from services you choose to connect, such as Google. Do not upload information about another person unless you are authorized to do so.

3. How We Use Information

• provide, personalize, maintain, and secure the Service;
• store and display your home records and files to you and authorized home members;
• authenticate users, prevent fraud and abuse, and investigate security events;
• process documents and generate SmartFill suggestions at your request;
• administer plans, usage allowances, subscriptions, and support;
• communicate about the Service and send marketing only as permitted by law and your choices;
• comply with law, enforce our Terms, and protect users, Nestura, and others; and
• improve the Service using feedback and aggregated or de-identified information where reasonably feasible.

4. Homerfy SmartFill and Automated Analysis

SmartFill is optional. When you affirmatively initiate a scan, Homerfy sends the selected document to Amazon Web Services (“AWS”) Amazon Textract in the United States region configured for the Service so AWS can extract text and structured information. Before scanning, the interface identifies the purpose and provider, warns that results may be inaccurate, and asks you to confirm that you are authorized to submit the document. Homerfy displays the resulting suggestions for your review. Suggestions do not change a record unless you choose what to accept or correct. We record the notice and policy versions, time, account, scan identifier, and consent result; if that consent record cannot be created, processing must not begin.

Before publication, Homerfy must verify and document the production region (currently intended to be us-east-1), the effective scope of its AWS Organizations AI-services opt-out policy, AWS contractual terms, and the absence of raw responses from logs, queues, files, monitoring, analytics, and support tools. Once verified, the public version will accurately describe those controls. AWS may process and retain content as necessary to provide, maintain, secure, or comply with legal obligations applicable to its service, subject to our agreement with AWS and applicable data-protection terms.

Homerfy does not retain the complete raw Textract response after producing the limited suggestions needed for review. Unconfirmed suggestions are scheduled for deletion within 30 days. Rejected suggestion values are scheduled for deletion within 30 days. Values you confirm become part of your Homerfy record and are retained with that record. We may retain a limited audit entry showing whether a suggestion was accepted, corrected, or rejected for security, metering, and dispute-resolution purposes; the audit should not contain the complete source document.

5. How We Disclose Information

We do not sell personal information or share it for cross-context behavioral advertising. We may disclose information:

• At your direction: to household members, recipients, or other people you authorize.
• To service providers: companies that provide hosting, private object storage, email, authentication, address search, document analysis, security, support, and payment processing. Current providers may include IONOS, Cloudflare, AWS, and Google. They may process information only to provide contracted services to us, subject to their agreements and applicable law.
• For legal and safety reasons: when reasonably necessary to comply with law or valid legal process, enforce agreements, investigate abuse, or protect rights, safety, and the Service.
• For a business transaction: in connection with financing, merger, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality protections and applicable notice requirements.

Our service-provider register identifies each live provider's purpose, data categories, processing location, contractual and security review status, subprocessors, deletion and backup terms, incident duties, and escalation contacts. Before publication, we will verify the providers actually in production and publish material categories and names where appropriate. We do not authorize a provider to use personal information for its independent advertising purposes.

6. Retention and Deletion

We retain information only for as long as reasonably necessary for the purposes described here, including providing the Service, maintaining security, resolving disputes, enforcing agreements, and meeting legal obligations.

• Account and home-record information is generally retained while your account is active.
• An original document saved as a Homerfy attachment remains in Homerfy’s private storage until you delete the attachment or applicable home/account data, subject to limited backup and legal-retention exceptions.
• Submitting a stored attachment to SmartFill does not create a second permanent document copy in Homerfy; temporary in-memory processing data is discarded after the request completes.
• SmartFill suggestions follow the periods described in Section 4.
• When Homerfy successfully deletes an attachment from Cloudflare R2, the object is removed from the active private bucket. Cloudflare may retain limited information as required by our agreement, security needs, or applicable law.
• IONOS currently creates daily backups of Homerfy's database and webspace and makes those backups restorable for up to 14 days. Information deleted from active IONOS systems may therefore remain in protected backup copies until that backup window expires. We do not restore deleted user information to active use except when necessary for disaster recovery, security, legal compliance, or resolving an active dispute; if a broad restoration occurs, deletion requests must be reapplied where technically feasible.
• Homerfy may create restricted manual backups immediately before material releases. Those temporary release backups are scheduled for deletion within 30 days unless a shorter period applies or preservation is reasonably necessary for an active security incident, dispute, or legal obligation.
• Homerfy may retain limited records longer when reasonably necessary for security, fraud prevention, legal compliance, enforcing agreements, or resolving an active dispute. We minimize those records and restrict their use to the applicable purpose.

You may submit a verified deletion request through My Account or email info@homerfy.com. Account and home requests are reviewed before fulfillment because a home may contain information shared with other authorized members. We generally aim to complete verified requests within 30 days. If applicable law permits an extension, we will notify you with the reason and revised deadline. We may deny or limit a request where identity or authority cannot be verified, another person's rights would be impaired, or retention is permitted or required by law; when required, we will explain the decision and available appeal method.

7. Security

We use administrative, technical, and physical safeguards designed to protect information, including encrypted connections, access controls, private storage, limited service credentials, multi-factor authentication for administrative systems, logging, and vendor security controls. No system can guarantee absolute security. You are responsible for protecting your credentials and promptly notifying us of suspected unauthorized access.

8. Cookies and Similar Technologies

We use cookies and similar technologies necessary for authentication, security, preferences, and operation of the Service. If we introduce non-essential analytics or advertising technologies, we will provide any notice and choices required by applicable law. Browser controls may affect Service functionality.

9. Your Choices and Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a portable copy of personal information; object to or restrict certain processing; withdraw consent where processing is based on consent; or appeal a denied request. You may unsubscribe from marketing communications at any time. We will not discriminate against you for exercising an applicable privacy right.

Submit a request through My Account or to info@homerfy.com. We log the request, scope, receipt date, verification status, deadline, decision, appeal, and fulfillment evidence without retaining unnecessary document contents. We verify identity using information reasonably related to the account and sensitivity of the request. Authorized agents may submit requests where applicable; we may verify the agent's authority and the user's identity directly. Shared-home requests may require confirmation of the requester's role and review of other members' rights. We will acknowledge, respond, extend, deny, and process appeals within the deadlines applicable to the requester, and our internal request procedure will be updated as laws and launch states change.

10. International Use

Homerfy currently operates from the United States. If you use the Service from another country, information may be processed in the United States and other locations where our service providers operate, subject to applicable safeguards.

11. Children’s Privacy

The Service is not directed to children under 13, and people under 18 may not create an account. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided information, and we will take appropriate steps to delete it.

12. Changes to This Policy

We may update this Policy as the Service changes. We will update the date above and provide additional notice when required. If a change materially affects how we use previously collected information, we will request consent when applicable law requires it.

13. Contact Us

Nestura Digital, LLC
Homerfy
Email: info@homerfy.com
Website: homerfy.com
Legal mailing address: to be inserted and verified before publication.