Privacy Policy

HomePins.ai is a product of LumoraRealty (India). This policy explains what personal information we collect, how we use it, and your rights as a user. By using HomePins.ai, you agree to the practices described here.

1. Information we collect

We collect the following information when you use HomePins.ai:

• Phone number — collected during OTP sign-in to verify your identity. We do not collect passwords.
• Name — optionally provided during sign-up, used to personalise your experience.
• Property preferences — area, configuration (2BHK/3BHK), and budget range, used to generate your personalised project shortlist.
• Lead information — if you book a call or advisory session, we collect name and phone to connect you with our team. This data is also synced to our CRM (Zoho) for follow-up.
• Usage data — pages visited, time on site, features used. Collected via Vercel Analytics and used only for product improvement.

2. How we use your information

• To authenticate you via OTP and maintain a secure session.
• To generate your personalised project shortlist on the /discover page.
• To connect you with our advisory team when you request a call or site visit.
• To send transactional WhatsApp messages (OTP only — no marketing without consent).
• To improve our products and fix bugs using anonymised usage analytics.

3. What we do not do

• We do not sell your personal data to third parties.
• We do not share your information with builders, brokers, or real estate companies without your explicit consent.
• We do not send unsolicited marketing messages.
• We do not use your data to train AI models.

4. Data storage and security

Your data is stored in Supabase (hosted in the EU/US region) with row-level security enabled. Session tokens are HMAC-signed and stored as HTTP-only cookies. We do not store OTP codes — they are verified in memory and discarded immediately after use.

We use Twilio Verify for OTP delivery. Twilio processes your phone number for the purpose of sending the verification SMS only.

5. Third-party services

HomePins.ai uses the following third-party services that may process your data:

• Twilio Verify — OTP delivery via SMS/WhatsApp
• Supabase — database and authentication infrastructure
• Zoho CRM — lead and advisory session management
• Cal.com — booking calls with our advisory team
• Vercel — hosting and analytics
• Google Maps — map rendering on the /discover page

Each of these providers has their own privacy policy governing how they process data on our behalf.

6. Cookies

We use a single HTTP-only cookie (hp_session) to maintain your login state. No tracking cookies. No third-party advertising cookies. We do not use Google Analytics or Meta Pixel.

7. Your rights

You have the right to:

• Request a copy of all personal data we hold about you.
• Request deletion of your account and associated data.
• Withdraw consent for marketing communications at any time.
• Lodge a complaint with the relevant data protection authority.

To exercise any of these rights, contact us at the address below.

8. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you via the email or phone number on your account. Continued use of HomePins.ai after changes constitutes acceptance of the updated policy.