HomesRunner
Legal

Last updated May 19, 2026 · Effective May 19, 2026

Privacy Policy

How HomesRunner collects, uses, shares, and protects personal information — your rights, our retention, and TCPA-compliant SMS practices.

This policy is written for HomesRunner’s launch in May 2026. It is not legal advice. Please have counsel licensed in your operating jurisdiction confirm before relying on it.

Summary

  • We collect what we need to operate the marketplace: account details, the jobs you post or quote on, messages between Homeowners and Contractors, payment information, background check status (Contractors), and basic device data.
  • We do not sell your personal information. We do not share it for cross-context behavioral advertising. We honor browser Global Privacy Control (GPC) signals.
  • We share information only with the vendors we need to run the service (Stripe, Twilio, Checkr, Google, our hosting provider) and when required by law.
  • You have rights under U.S. state privacy laws and, where applicable, GDPR/UK GDPR. See “Your privacy rights” below.

1. Who we are and what this covers

HomesRunner, Inc. (“HomesRunner,” “we”) is the controller of personal information collected through homesrunner.app and related services (the “Platform”). This policy explains what we collect, why, how we share it, your rights, and how to contact us. It applies to Homeowners, Contractors, and visitors.

2. Information we collect

We collect the following categories (CCPA/CPRA category identifiers in parentheses):

  • Identifiers (A): name, email, phone number, postal/ZIP code, account ID, IP address.
  • Customer records information (B, Cal. Civ. Code § 1798.80(e)): business name and trade for Contractors, license and insurance details, payment instrument identifiers held by Stripe.
  • Protected classifications (C): we do not intentionally collect protected classifications. Background-check vendors may collect date of birth and government identifiers from Contractors solely to run authorized checks.
  • Commercial information (D): jobs posted, quotes sent and received, bookings, refunds, reviews.
  • Internet or other electronic activity (F): pages viewed, links clicked, device and browser type, language, approximate location derived from IP.
  • Geolocation data (G): approximate location derived from IP and the ZIP code you provide. We do not collect precise (GPS) geolocation.
  • Audio, electronic, visual information (H): photos you upload (e.g., job photos, contractor portfolios) and SMS/call content sent through our messaging relay.
  • Professional information (I): Contractor trade, years of experience, certifications, license number, insurance carrier and expiry, background-check status.
  • Inferences (K): matching Contractors to jobs based on trade, ZIP, ratings, availability.

We do not knowingly collect “sensitive personal information” beyond what is required to run an authorized background check, and we do not use any such information for inferring characteristics about you.

3. Where it comes from

  • Directly from you (signup, profile, posts, messages).
  • Automatically through your device (cookies, log data, device identifiers).
  • From our service providers: Stripe (payment outcomes), Twilio (SMS delivery status), Checkr (background-check results), Google (sign-in profile and reCAPTCHA risk score).
  • From other Users (e.g., reviews a Homeowner writes about a Contractor).

4. How we use information

  • Operate the marketplace and match Homeowners with Contractors.
  • Process payments, deposits, refunds, and platform fees via Stripe.
  • Deliver transactional and operational SMS and email (confirmations, quote responses, reminders, dispute communications, security alerts).
  • Verify Contractor identity, license, insurance, and run background checks.
  • Detect, prevent, and respond to fraud, abuse, security incidents, and TCPA/A2P 10DLC compliance issues.
  • Improve, debug, and develop the Platform.
  • Send service announcements and, with your separate consent or where permitted by law, marketing emails. You can opt out at any time.
  • Comply with law and enforce our Terms.

5. Legal bases (GDPR / UK GDPR)

For users in the European Economic Area, the United Kingdom, or Switzerland, we process personal data on these legal bases: performance of a contract (operating your account, fulfilling bookings); legitimate interests (security, fraud prevention, product improvement) balanced against your rights; consent (for marketing and for non-essential cookies, where required); and compliance with legal obligations (tax, AML, court orders).

6. How we share information

We share personal information with:

  • The other party in a transaction: limited contact details necessary to complete a job (for example, a Homeowner’s first name and ZIP code shown to invited Contractors; a Contractor’s business contact details shown to a Homeowner who has hired them).
  • Service providers under contract that restricts use to providing services to us: Stripe (payments), Twilio (SMS, voice, messaging relay), Checkr (background checks), Google (authentication, reCAPTCHA), Cloudflare and our cloud hosting provider, transactional email provider, analytics tooling, customer-support tooling.
  • Legal and safety: to comply with law, valid legal process, or to protect rights, property, or safety of HomesRunner, Users, or the public.
  • Corporate transactions: in connection with a merger, acquisition, financing, or sale of assets, subject to continued protection of your information.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA and other U.S. state privacy laws.

7. SMS data

We do not sell, rent, or share SMS opt-in information, mobile phone numbers, or SMS consent data with third parties or affiliates for marketing or promotional purposes. Information related to SMS opt-in (phone number and consent status) is collected solely to operate our messaging program. Carriers receive only the information necessary to deliver messages. Twilio processes SMS as our service provider. Message content is retained as described in “Retention” below.

8. Cookies, analytics, and Global Privacy Control

We use strictly necessary cookies to keep you signed in and to prevent abuse, and analytics cookies to understand aggregate usage. We honor Global Privacy Control (GPC) signals as an opt-out of any sharing of personal information for targeted advertising. You can control cookies through your browser settings; disabling strictly necessary cookies will impact the Platform’s functionality.

9. Retention

We keep personal information for as long as your account is active and as needed to provide the Platform. After account closure, we retain certain information for legitimate business and legal purposes:

  • Transaction records (bookings, payments, refunds) for at least 7 years to comply with tax and accounting obligations.
  • Reviews and dispute records to maintain the integrity of the Contractor reputation system.
  • Message and call-relay metadata for 12 months; message media (photos sent via SMS) for 30 days, after which it is deleted from object storage.
  • Security and abuse-investigation logs as needed for an ongoing investigation.

We then delete or de-identify personal information.

10. Security

We use industry-standard administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, encryption at rest for stored data, row-level security on our database, access controls, and monitoring. No system is perfectly secure; please use a strong, unique password and notify us immediately at security@homesrunner.app if you suspect a security issue.

11. Your privacy rights

Depending on where you live, you may have the following rights:

  • Know / access: request a copy of the personal information we hold about you and information about how we process it.
  • Correct: ask us to correct inaccurate information.
  • Delete: ask us to delete personal information, subject to legal and operational exceptions (for example, we must retain certain transaction records).
  • Portability: receive your information in a portable format.
  • Opt out of sale, sharing for cross-context behavioral advertising, or profiling: we do not engage in these activities, but you may submit a request to confirm.
  • Limit use of sensitive personal information: we use sensitive personal information only to provide the requested service (e.g., to run a background check).
  • Non-discrimination: we will not deny service, charge a different price, or provide a lower quality of service because you exercised a privacy right.
  • Withdraw consent at any time where we rely on consent (e.g., marketing emails, SMS opt-in, non-essential cookies).
  • Lodge a complaint with your state attorney general (U.S.) or your supervisory authority (EEA/UK).

To exercise a right, email privacy@homesrunner.app from the email associated with your account, or write to the address in “Contact” below. We may verify your identity before responding. You may use an authorized agent (with written authorization). We will respond within the time required by applicable law (generally 45 days under U.S. state laws; 30 days under GDPR).

California Shine the Light. California residents may request information about disclosures of personal information to third parties for those parties’ direct marketing purposes. We do not make such disclosures.

12. State-specific disclosures (U.S.)

This policy serves as the notice at collection under California law (CCPA/CPRA) and the comparable notices required under the Virginia CDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, Texas TDPSA, Oregon OCPA, Montana MCDPA, Delaware DPDPA, New Hampshire NHPA, New Jersey NJDPA, and other U.S. state privacy laws. Categories of personal information collected and the purposes are described in Sections 2 and 4. We do not sell or share personal information for targeted advertising, and we do not engage in profiling that produces legal or similarly significant effects.

13. International transfers

HomesRunner is based in the United States, and personal information is processed in the U.S. If you access the Platform from outside the U.S., you understand your information will be transferred to and processed in the U.S., which may not have the same data-protection laws as your jurisdiction. Where required, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses and UK Addendum) with our service providers.

14. Children

The Platform is not directed to children under 18, and we do not knowingly collect personal information from children under 18. If you believe a child has provided us personal information, contact privacy@homesrunner.app and we will delete it.

15. Changes to this policy

We may update this policy from time to time. If we make material changes, we will provide reasonable notice (email or in-app) before the change takes effect and update the “Last updated” date above.

16. Contact

HomesRunner, Inc. · Privacy Team · 111 Marquette Ave, Minneapolis, MN 55401, USA · privacy@homesrunner.app.

For SMS-related questions, reply HELP to any HomesRunner message or email support@homesrunner.app. To opt out of SMS, reply STOP.