Privacy Policy

Last updated: August 17, 2026 · version 13 · what changed

Who we are

HomeSynk is operated by 5004812 Ontario Inc., o/a Dezfoundry Labs ("we"), based in Ontario, Canada. Contact: support@homesynk.ca · +1 (808) 800-8064

What we collect and why

  • Account data: Your email address and name when you sign in (via Google or email magic link). Required to provide the service.
  • Property data: Listings, ratings, notes, and photos you add. Stored in our Supabase database (hosted on AWS us-east-1). This data belongs to you.
  • Subscription data: If you subscribe to a paid plan (Pro, Pro 10, or Pro 25), your email and payment status are stored. Payment processing is by Stripe — we never see your card number.
  • Error logs: When something breaks, Sentry receives a stack trace so we can fix it. We don't attach your name or email to error reports. A report can still include the page you were on and technical details of what the app was doing at the time, which may reference a workspace or listing by its internal ID.
  • Bot protection: When you sign in we use Cloudflare Turnstile to verify you're not a bot. It processes limited technical signals (e.g. browser characteristics) and does not track you across other sites. The Turnstile script loads on every page, but it only runs a check on the sign-in form. Turnstile runs in invisible mode; your use of it is also governed by Cloudflare's Turnstile Privacy Addendum.
  • Addresses you import: To place a listing on the map we look up its address with Nominatim, run by the OpenStreetMap Foundation. The address is sent; your IP address is not, because our server makes the request rather than your browser.
  • Feedback you send: When you use "Send feedback", we store your message with your account, and email a copy of it and your email address to our support inbox so we can reply. We also email a copy of your message back to your own account address, so you have a record of what you sent and a reference number for it. Email is delivered by Resend, which also delivers your sign-in magic links.
  • Email you send to our support address: If you email support@homesynk.ca directly, your message is delivered to our support mailbox, and we send you an automatic acknowledgement so you know it arrived. To avoid replying to you over and over in one conversation, we keep a one-way hash of your email address — a scrambled form we cannot turn back into an address — for 24 hours, and then it is deleted. Your address itself is not stored by that mechanism. We do not auto-reply to bounces, mailing lists or automated mail. This applies to email you send us; it is separate from the "Send feedback" form above.
  • Your rating of HomeSynk: Once you've got some use out of the app, we may ask you once how many stars you'd give it. We store the score, any comment you write with it, and the date — against your account. We also store which answer you gave to the prompt itself (answered, "not now", or "don't ask again"), so we don't ask you again. You never have to answer, and you can turn the question off for good with one tap.
  • Permission to quote you: We'd like to show real feedback on our website. We will only ever do that if you tick the box that says "You can quote my feedback and first name on the HomeSynk website." — it is never ticked for you, and it is only offered when you've given a positive rating and written a comment. We store your answer together with the exact wording you agreed to, so what you consented to is a record rather than our recollection. If you change your mind, email support@homesynk.ca and we will remove the quote and your consent — there is no deadline on that.
  • Profile photo: If you upload one, it is stored in a public bucket and served from a URL that anyone holding the link can open. It is not listed or indexed anywhere, but it is not access-controlled either — please don't upload anything you'd mind being seen.
  • Usage analytics: We use Cloudflare Web Analytics, which records page views, referrer and country. It sets no cookies and does not follow you across other sites or build a profile of you.
  • Which link brought you here: If you reached HomeSynk through one of our campaign links (for example a link we posted to a Facebook group), we store which one against your account when it is created — just the page, such as "/together". It tells us which channels actually work so we don't keep advertising where nobody signs up. It records nothing about you, it is set once and never updated, it is not shared with anyone, and it is deleted with your account.
  • How you heard about us, if you tell us: Shortly after you first sign in we ask, once, "How did you hear about HomeSynk?", and offer a short list — a Facebook group, Telegram, WhatsApp, Instagram, a friend, a search engine, or "Somewhere else". If you pick "Somewhere else" you can add a short note of your own, up to 60 characters, and whatever you type there is stored exactly as you wrote it. Answering is entirely optional: tap Skip and we never ask again. We store your choice, and the fact that you answered or skipped, against your account. We use it only to work out which channels bring people here, so we don't keep advertising where nobody signs up — it is never used to profile you, to target advertising, or to decide anything about your account. It is not shared with anyone, and it is deleted with your account. It is separate from the campaign link above: that one is worked out from the address you arrived on, this one is simply what you told us, and the two are read side by side rather than merged.
  • Your notification settings: For each house hunt you're in, we store which kinds of activity you want to be told about, whether you want them by email, and the moment you last opened your notifications. Until now these lived only in the browser you set them in. They sit with your account so they follow you between devices — and so that when email notifications start, the server sending them knows what you have already switched off. It is not shared with anyone, and it is deleted with your account.
  • Which version of these policies you've seen: When you accept a notice that this policy or our Terms have changed, we store which version you last acknowledged against your account — one version number per document, and nothing else. We do not record the date or time you acknowledged it, so we cannot tell you when you accepted, only what. It tells us whether to show you a notice, and it means we can answer "what did I agree to?" with a record rather than a guess. It is not shared with anyone, and it is deleted with your account.
  • Cost figures you type in: The carrying-cost estimate uses assumptions you set for a hunt — the down payment, which you can enter either as a percentage or as an amount you have saved, plus mortgage rate and amortisation — and optional per-listing figures for property tax and condo fee. They are stored with the hunt and the listing, and everyone in that hunt can see and change them. They are numbers you enter, not information we obtain about your finances: we do not ask for, receive or verify your income, credit, or any actual mortgage. Nothing is sent to any lender, broker or third party, and it is deleted with the hunt.
  • Maps: Property locations are shown using OpenStreetMap. When a map loads, OpenStreetMap's servers receive your IP address and the map area you're viewing. Property pages also embed a small OpenStreetMap frame, which does the same. Your use of it is governed by the OpenStreetMap Foundation Privacy Policy.

What we do NOT collect

  • We do not sell your data to third parties.
  • We do not use tracking cookies, and we do not track you across other websites.
  • We do not use your listing data for advertising profiling.
  • We do not show ads.
  • We do not access your Google account beyond authentication.

What other people in your workspace can see

HomeSynk is built for house-hunting together, so a workspace is a shared space by design. Everyone in a workspace can see your display name, your profile photo, and everything you contribute to it — the listings you add, your star ratings, your notes, your pros and cons, your tags, and your activity in the workspace history.

Two things worth knowing before you write something you'd rather others didn't read:

  • There is no private note. Everything you add to a workspace is visible to every member of it.
  • Leaving a workspace does not remove what you contributed. Your listings, notes and ratings stay with the workspace for the people still using it. If you want them removed, delete them before you leave, or ask the workspace owner.

Anyone who joins later can see everything already in the workspace, including contributions made before they joined.

Who else processes your data

We use a small number of service providers to run HomeSynk. They act on our instructions and are not permitted to use your data for their own purposes.

  • Supabase — database, sign-in and file storage
  • Cloudflare — hosting, edge delivery, bot protection and analytics
  • Stripe — payments, including your billing address and tax location
  • Resend — sign-in emails, feedback emails and support acknowledgements
  • Sentry — error reports
  • OpenStreetMap Foundation — map tiles and address lookups

Signing in with Google sits outside that list, because Google is not acting on our instructions — it is your own Google account, and your use of it stays governed by Google's Privacy Policy. If you choose that button, Google tells us your email address and your name, and Google learns that you signed in to HomeSynk — it may email you to say so. We ask for nothing else, and we cannot see anything else in your account. If you would rather Google were not involved at all, use the email magic link instead: it creates exactly the same account.

Security

Access to your data is enforced at the database level, so a workspace's contents are only readable by its members. Traffic is encrypted in transit. No system is perfectly secure, and we don't claim otherwise — if we ever become aware of a breach affecting your personal information, we will notify you and the Office of the Privacy Commissioner of Canada as required by law.

Data retention

Your data is kept as long as your account is active. If you cancel a paid plan, workspaces over the free limit are paused rather than deleted, and their contents are kept indefinitely so you can restore them by resubscribing. If you would rather they were erased, delete the workspace or your account — both take effect immediately.

You can delete a workspace and all its data from the workspace panel (tap the workspace name in the top bar → Delete workspace). To delete your account entirely, tap your avatar in the top bar → Delete my account, or email us.

Your rights (PIPEDA / GDPR)

  • Access: request a copy of your data
  • Correction: update incorrect data in-app or by emailing us
  • Deletion: tap your avatar in the top bar → Delete my account, or email us
  • Portability: tap the workspace name in the top bar → Export listings as CSV
  • Withdraw consent: if you agreed to let us quote your feedback, email us and we will remove the quote and your consent

Data location

Data is stored on Supabase (AWS us-east-1, USA). Cloudflare handles edge delivery from servers worldwide. If you require Canadian data residency, contact us.

Because your data is held outside Canada, it can be accessed by foreign courts and law-enforcement bodies under the laws of those countries. Questions about how it is handled abroad, and about our policies for service providers outside Canada, go to our Privacy Officer at 5-1450 North Wenige Drive, London, ON N5X 0L6, Canada, support@homesynk.ca or +1 (808) 800-8064.

CASL (Canadian Anti-Spam)

We send transactional emails only — sign-in magic links, and billing receipts from Stripe. We do not send marketing emails without explicit opt-in.

Every message we send identifies us as 5004812 Ontario Inc., o/a Dezfoundry Labs and carries our mailing address, 5-1450 North Wenige Drive, London, ON N5X 0L6, Canada, together with a way to contact us — support@homesynk.ca or +1 (808) 800-8064. Any message that isn't purely transactional also carries an unsubscribe link that we honour within 10 business days.

Children

HomeSynk is not intended for anyone under 16, and paid plans require you to be at least 18 (or the age of majority where you live, if higher). We do not knowingly collect data from anyone below these ages. If you believe a child has given us personal information, email support@homesynk.ca and we will delete it.

Changes to this policy

A change is material if it adds a service provider that handles your data, adds a kind of data we collect, changes how long we keep something, changes where it is stored, or changes how you exercise a right. Fixing a typo or making a sentence clearer is not.

When something material changes we tell you twice: a banner in the app the next time you open it, and an email. You dismiss the banner by acknowledging it, and we record that you did — see "Which version of these policies you've seen" above. If a change would put your personal information to a genuinely new use, the notice asks you to accept it rather than simply dismiss it.

Every version of this policy and of our Terms is listed at /legal-changes, with the date it took effect and a plain-language summary of what moved. Non-material changes appear there too — they just don't interrupt you.

Contact

5004812 Ontario Inc., o/a Dezfoundry Labs
Privacy Officer
5-1450 North Wenige Drive
London, ON N5X 0L6
Canada

support@homesynk.ca
+1 (808) 800-8064