Privacy Policy

TODO_LEGAL_ENTITY_NAME (“HomeRun”, “we”) operates the HomeRun real estate CRM, available as a mobile application and a web application. This policy explains what we collect, why, who we share it with, and the choices you have. It applies to both the app and this website.

Account details. Your mobile number is required to create an account and is verified by a one-time password. You may also add your name, email address, profile photo, company name, RERA registration number, years of experience, service areas, specialisations and a short bio.

Business records you enter. The CRM stores the working data you put into it: your leads and their contact details, budgets and preferred locations, notes, follow-ups, site visits, deals, commissions, marketplace posts and inventory listings. This data is yours. We process it only to provide the service to you.

Payment details. Subscription payments are collected by Razorpay. We receive and store only the payment reference, order reference, plan and amount. Card numbers, UPI PINs, CVV and bank credentials never reach our servers.

Push notification token. Used to send you follow-up reminders and alerts.

Call activity. If you grant call log permission, the app records the time, direction and duration of calls with your saved leads so your call history stays accurate. We do not record call audio.

Microphone. Used only while you are dictating a voice note, and only after you grant permission.

Technical logs. Standard server logs including IP address, request time and error diagnostics, retained for security and debugging.

We use a small number of processors, each for a specific purpose:

• Razorpay — subscription payments and refunds.
• Google Cloud Platform — application hosting and the primary database, located in the Mumbai (asia-south1) region.
• Google Firebase — push notifications and in-app messaging.
• Cloudinary — storage and delivery of images you upload.
• Twilio — delivery of one-time password SMS.
• Google Gemini — powers the optional AI assistant. Only the text of your request and the records needed to answer it are sent.

We do not sell your personal data, and we do not share it for advertising. We disclose data to authorities only where required by Indian law.

Account and CRM data is retained while your account is open. Delete your account from Profile → Delete Account, or email us, and we erase your account and business records within 30 days, except records we must keep for tax and accounting purposes (invoices and payment references, retained as required by law).

Traffic is encrypted in transit with TLS. Access to production data is restricted to authorised personnel, authentication uses signed tokens, and payment authorisation is verified cryptographically. No system is perfectly secure, but we take reasonable technical and organisational measures appropriate to the sensitivity of the data.

You can access and correct your details in the app, export your leads, withdraw call log or microphone permission in your device settings at any time, and delete your account. To ask what we hold about you, or to complain, contact us at TODO_SUPPORT_EMAIL.

The service is intended for real estate professionals and is not directed at anyone under 18. We do not knowingly collect data from children.

If we change this policy we will update the date above and, for material changes, notify you in the app. Questions and requests go to TODO_SUPPORT_EMAIL or TODO_LEGAL_ENTITY_NAME, TODO_ADDRESS_LINE_1, TODO_ADDRESS_LINE_2, TODO_CITY, TODO_STATE TODO_PIN, India.