Privacy Policy

1Information We Collect

HCFX collects information to provide and improve our property management platform. The categories of data we collect include:

Account Information

When you create a HCFX account, we collect your name, email address, and password. If you sign up through a third-party authentication provider (such as Google), we receive the profile information you authorize that provider to share.

Property Data

You may voluntarily provide information about your property, including address, square footage, year built, home systems (HVAC, plumbing, electrical, roofing, etc.), maintenance records, project details, permits, warranties, contractor information, and uploaded documents or photographs. This property-centric data is core to how HCFX works — it follows the property, not the individual user, enabling a complete historical profile of the home.

Usage Data

We automatically collect certain technical information when you use the platform, including your IP address, browser type and version, device information, pages viewed, features used, timestamps, and referring URLs. This data helps us understand how the platform is used and where we can improve.

Communications

If you contact us via email, in-app messaging, or support channels, we retain the content of those communications along with your contact details so we can respond and maintain a record of the exchange.

2How We Use Your Information

We use the information we collect for the following purposes:

• Provide and maintain the platform — including storing your property data, generating maintenance calendars, managing documents, and delivering the core HCFXexperience.
• Improve and develop features — analyzing aggregate usage patterns to identify bugs, optimize performance, and build new capabilities that serve homeowners and professionals.
• Communicate with you — sending transactional emails (account verification, password resets, maintenance reminders), responding to support requests, and, with your consent, delivering product updates or announcements.
• Ensure security — detecting and preventing fraud, unauthorized access, and other harmful activity on the platform.
• Comply with legal obligations — meeting applicable regulatory requirements and responding to lawful requests from governmental authorities.

3Data Storage & Security

HCFX takes the security of your data seriously. We employ industry-standard measures to protect the information you entrust to us.

• Infrastructure — Our platform is built on Supabase, which runs on Amazon Web Services (AWS) infrastructure. Data is stored in SOC 2 Type II compliant data centers located in the United States.
• Encryption — All data is encrypted in transit using TLS 1.2 or higher. Data at rest is encrypted using AES-256 encryption.
• Access controls — We enforce role-based access controls internally. Only authorized personnel with a legitimate business need can access user data, and all access is logged and audited.
• Authentication — User authentication is handled through Supabase Auth with support for secure password hashing, multi-factor authentication, and OAuth-based single sign-on.
• Backups — Automated daily backups ensure data durability. Backups are encrypted and stored separately from the primary database.

While no system is 100% secure, we continuously monitor our infrastructure and update our security practices to protect against known vulnerabilities.

4Sharing Your Information

HCFX does not sell, rent, or trade your personal information to third parties for marketing purposes. We may share data only in the following limited circumstances:

• Service providers — We work with trusted third-party vendors who help us operate the platform (e.g., hosting, email delivery, analytics, payment processing). These providers are contractually obligated to handle your data securely and only for the purposes we specify.
• With your consent — If you choose to share your property profile with a contractor, inspector, real estate agent, or other party through the platform, we will share the specific data you authorize.
• Legal requirements — We may disclose information if required by law, subpoena, or other legal process, or if we reasonably believe disclosure is necessary to protect the rights, property, or safety of HCFX, our users, or the public.
• Business transfers — In the event of a merger, acquisition, or sale of all or a portion of our assets, user data may be transferred as part of that transaction. We will notify affected users before their data becomes subject to a different privacy policy.

5Your Rights

You have meaningful control over your data. Depending on your jurisdiction, your rights may include:

• Access — Request a copy of the personal data we hold about you.
• Correction — Ask us to correct inaccurate or incomplete information.
• Deletion — Request that we delete your personal data. Upon an account deletion request, we will remove your personal data within 30 days, subject to any legal retention requirements.
• Data export — Download your property data and documents in a standard, portable format at any time from your account settings.
• Opt out of communications — Unsubscribe from marketing emails at any time using the link in each message. Transactional emails (security alerts, account notifications) cannot be opted out of while your account is active.
• Withdraw consent — Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, contact us at hello@hcfx.us. We will respond to your request within 30 days.

6Cookies & Tracking

HCFX takes a minimal approach to cookies and tracking technologies.

• Essential cookies — We use strictly necessary cookies to maintain your session, remember your authentication state, and ensure the platform functions properly. These cannot be disabled.
• Analytics — We use privacy-focused analytics to understand aggregate usage patterns (such as which features are most popular and where users encounter issues). We do not use invasive tracking pixels or build advertising profiles.
• No third-party advertising — HCFX does not serve ads and does not allow third-party advertising trackers on our platform.

You can manage cookies through your browser settings. Note that disabling essential cookies may affect platform functionality.

7Children's Privacy

HCFX is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete that information promptly. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at hello@hcfx.us.

8Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Notify you via email or an in-app notification if the changes are significant.
• Provide at least 30 days' notice before material changes take effect, giving you time to review and, if necessary, adjust your use of the platform.

Your continued use of HCFX after any changes indicates your acceptance of the updated policy.

9Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out: