Hauslia Privacy Policy
Last updated: September 25, 2026
Hauslia LLC ("Hauslia," "we," "us," or "our") operates Hauslia, a real estate client showroom platform that lets real estate agents ("Agents") curate homes for a household and share them with that household's members ("Participants"). This Privacy Policy explains what information we collect, how we use it, and the choices available to you.
If you have questions, contact us at privacy@hauslia.com.
1. Who This Policy Covers
- Agents — real estate professionals who create an account, build collections of homes, and invite households to view them. Agents control what client information gets entered into Hauslia.
- Household Participants — the buyers an Agent invites. Participants do not create an account or a password, and in most cases never sign up for Hauslia or interact with us directly before their Agent enters their information. Each Participant is given a private link tied to a unique access token.
- Brokerage/Organization Contacts — people who submit our public brokerage inquiry form, or who are designated as an organization admin for a Team/Brokerage/Enterprise account.
- Visitors — anyone browsing our public marketing site or the public
/demoshowroom.
A note on Participant data specifically: because an Agent — not the Participant — typically decides to share a household member's name, email, or phone number with us, we consider the Agent responsible for having the right to do so (an existing client relationship is the expected basis), and we generally treat Hauslia's role with respect to that data as processing it on the Agent's behalf and according to the Agent's instructions. See our Terms of Service for the Agent's specific responsibilities here.
2. Information We Collect
From Agents
- Email and password, managed by our authentication provider (Supabase). Passwords are hashed; we never store or see them in plain text.
- Profile details you add: full name, brokerage name, headshot photo, brand color, tagline, and (optionally) a preferred lender to display to clients.
- Plan tier and subscription status; organization membership, if you're seated under a brokerage/organization account.
- Custom domain information, if you're on the Pro plan and choose to connect your own domain (for example,
homes.youragency.com) instead of a Hauslia subdomain: the domain name itself, a verification token, and a DNS record you publish to prove you control that domain. Once ownership is confirmed, we connect the domain to your account. We don't store anything about your domain beyond what's needed to verify ownership and route traffic to it. - If you use the native app: a push-notification device token and your notification preferences.
Provided by the Agent, About a Household Participant
- Display name — often a first name only.
- Optionally, an email address and/or phone number, entered individually or imported in bulk via CSV from the Agent's existing client list.
- Language preference.
- A "prequalified" flag, which is set by the Agent's own assertion only. Hauslia never receives, requests, or stores any supporting financial document, preapproval letter, income information, or credit data of any kind, for this or any other purpose.
Provided by the Agent, About Other Professionals Agents can optionally share other professional contacts with a household — for example, a preferred lender, title company, or inspector. This includes that professional's name and contact information, entered by the Agent, not by the professional themselves.
Generated by the Participant, Once They Use Their Link
- Reactions to properties (Love / Maybe / Pass).
- Comments and questions.
- Tour requests, including requested times.
- Last-seen timestamps, used to power the "what's new" activity indicator for other household members.
Content Created on the Platform
- Agent-written narratives about each property ("takes," in English and optionally Spanish).
- Welcome-page content — introductory text an Agent writes for a household's landing page.
- Photos uploaded for an Agent's own listings.
- Virtual-tour or video URLs an Agent adds to a property (for example, a Matterport or YouTube link). We store the URL only. Following such a link takes a Participant directly to the third party's own site, which has its own terms and tracking practices. Depending on browser settings, standard referrer information may pass to that site when you click through — this is ordinary browser behavior, not something Hauslia separately transmits. See our Terms of Service for more detail.
- Any comments either an Agent or a Participant adds.
From the Brokerage Inquiry Form (No Account Required) If you submit our public form to ask about a Team, Brokerage, Brokerage Plus, or Enterprise plan, we collect what you provide — typically your name, contact information, brokerage name, the tier you're interested in, and expected seat count. We use this only to respond to your inquiry. This form doesn't require an account; we protect it with origin allow-listing, a honeypot field, and rate limiting to reduce spam and abuse.
Automatically Collected Information
- Our hosting providers (Vercel and Supabase) log standard technical information for requests to our servers — IP address, browser/device type, timestamps — for security and troubleshooting.
- Vercel also provides us first-party, cookieless traffic analytics; this does not involve third-party ad trackers or cookies.
- We keep a record of household reminder notifications sent (timestamp and which collection), to enforce a 24-hour rate limit and avoid over-notifying a household.
What We Deliberately Do Not Collect
- No financial documents, preapproval letters, income, or credit data.
- No Participant accounts, passwords, or logins — access is by possession of a private link only.
- We do not use browsing or search activity to build behavioral or advertising profiles.
- No third-party listing photos (a deliberate legal constraint on Agents; see Terms of Service).
- No advertising trackers, no ad networks, no sale of data.
3. How We Use Information
We use the information above to:
- Operate the core product: build and serve each household's private showroom, record reactions, and show an Agent where their household agrees.
- Communicate with Agents about their account and activity, including by email and native-app push notifications, and send Participants relevant email notifications about their household showroom.
- Respond to brokerage/organization sales inquiries.
- Maintain security, including preventing one Participant or Agent from accessing data that isn't theirs.
- Improve the product and diagnose problems.
- Enforce our Terms of Service and comply with legal obligations.
We do not use Participant or Agent data to train third-party AI models.
4. How Information Is Shared
- Within a household: a Participant's reaction is absent from what other household members can see until they've reacted themselves ("blind-first"). Comments may still be individually attributed.
- With the presenting Agent: the Agent who created a collection can see all activity within it — that's the core function of the product.
- With a brokerage/organization, if the Agent belongs to one: an administrator can see seat counts and aggregate adoption/usage metrics for their agents. An administrator never sees individual household content — no narratives, no reactions, no comments, no messages, and no Participant contact information. This is a deliberate product boundary, not a default that varies by plan.
- With service providers (subprocessors), listed below, solely to provide services to us.
- For legal reasons, if required to comply with law or a valid legal request.
- We do not sell personal information, and we do not share data between different Agents' households.
Current Subprocessors
| Provider | Purpose | Data Involved |
|---|---|---|
| Supabase | Database, authentication, file storage | All application data described above |
| Vercel | Hosting; first-party cookieless analytics | Standard request/traffic logs |
| Resend | Transactional email to Agents and Participants | Recipient email address, plus the notification content itself, which may reference the relevant collection, property, or household activity, and the Agent's name or brand |
| Mapbox | Static map images (photo fallback) | Property coordinates |
| Expo | Push notification delivery to Agents using the native app | Device push token, plus the notification title/body text displayed on your device, which may reference the relevant collection or activity |
| Square (selected, not yet active) | Payment processing, once billing goes live | Payment/card details — will be submitted directly to Square; Hauslia does not receive or store your full card number |
Virtual-tour/video hosts (e.g., Matterport, YouTube) that an Agent links to are not subprocessors — Hauslia does not separately transmit any data to them. A link directs a Participant's browser to that site directly, subject to ordinary browser referrer behavior.
5. Data Retention
- Agent accounts: retained while the account is active. If closed, we delete or de-identify profile data within a reasonable period, except where we must retain it for legal or accounting reasons. Closing your account is not, by itself, treated as a request to delete the client searches associated with it.
- Collections and listings are archived, not deleted, even when a collection is no longer active or an Agent moves to a lower plan tier — this is intentional: it's how we honor letting a household keep access to a search they've already invested time in.
- Deleting a specific Participant cascades to remove their comments and reactions, but not the rest of the collection.
- If you want data deleted rather than retained — for your own account, or on behalf of a Participant — you can make an explicit deletion request as described in Section 6. We will act on a verified request, subject to what we need to retain for legal or other legitimate business reasons. Ordinary account closure or a plan downgrade is not, by itself, treated as such a request.
- We don't currently run an automated data-expiration schedule beyond the above; deletion requests are handled manually today.
6. Your Choices and Rights
Regardless of where you live, you can ask us to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Delete your information, subject to what we need to retain for legitimate business or legal reasons, and subject to the archival practice described above for collections a household is actively using.
To make a request, email privacy@hauslia.com. We may ask you to verify your identity or authority — for example, confirming you're the Agent account holder — before acting on a request, particularly a deletion request. If you're a Household Participant, you don't have an account through which to make this request yourself. The right route is to contact the Agent who invited you, since they entered and control your information — or to contact us directly at the address above, and we'll coordinate with the Agent as needed.
The rights and protections available to you may vary depending on your jurisdiction — for example, under frameworks like GDPR or CCPA. We respond to privacy requests as required by applicable law. This section will be updated as our legal obligations are confirmed with counsel, particularly as our apps are distributed through app stores with global reach.
7. Children's Privacy
Hauslia is intended for use by adults engaged in a real estate search. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us at privacy@hauslia.com and we will delete it.
8. Data Security
We use reasonable technical and organizational measures appropriate to the sensitivity of the data, including encrypted connections (HTTPS/TLS), database-level access controls, and role-based restrictions so that household data is only reachable through validated, per-household access tokens rather than general-purpose accounts. No system is perfectly secure, and we cannot guarantee absolute security.
9. Where Data Is Stored
Our database and file storage are hosted in the United States (AWS us-east-1, via Supabase). If you access Hauslia from outside the United States, your information will be transferred to and processed in the United States.
10. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, provide additional notice.
11. Contact Us
Hauslia LLC privacy@hauslia.com