Privacy & Legal

Who We Are

Home Anywhere ("Company", "we", "us") is a short-term rental property management platform headquartered at 1400 Fallenleaf St, La Habra, CA 90631-3123, United States. We provide channel management, AI-powered guest messaging, revenue management and booking engine software for property managers and vacation rental hosts worldwide.

This Privacy & Legal document describes how we collect, use, store and protect the personal data of our customers, platform users and website visitors in compliance with the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), GDPR and other applicable regulations.

Personal Data We Collect

We collect personal data necessary to deliver our property management platform with quality, security and personalisation:

• Account & Identity Data — Name, email address, phone number, profile photo and login credentials.
• Property & Business Data — Property addresses, listing details, availability calendars, pricing rules and occupancy data.
• Guest Data (processed on behalf of hosts) — Guest names, contact details, booking dates, payment references and communication history.
• Usage & Platform Data — Channel sync activity, automation rules, dashboard interactions, API calls and feature usage logs.
• Payment & Billing Data — Subscription details and payment records processed by PCI-DSS certified partners.
• Technical Data — IP address, browser type, device identifiers, operating system and session logs.
• Channel Integration Data — OAuth tokens, API keys and listing data from connected OTA accounts (Airbnb, VRBO, Booking.com etc.).
• Communication Data — Guest messages managed through our AI inbox, automated messaging templates and review management.

How We Use Your Data

We use your data exclusively for legitimate, specific and informed purposes with the appropriate legal basis:

Data Sharing & Disclosure

Home Anywhere does not sell your personal data. We share information only where necessary to deliver our services and with appropriate safeguards:

• OTA channel partners — Airbnb, VRBO, Booking.com and 200+ other channels to synchronise listings, availability and bookings on your behalf.
• Payment processors — Stripe and other PCI-DSS certified processors for subscription billing and payout management.
• Cloud infrastructure providers — AWS and Google Cloud for platform hosting, data storage and processing.
• Platform integrations — PriceLabs, RemoteLock, Safely, Rentability and other partner tools connected via our integration marketplace, subject to their privacy policies.
• Analytics and monitoring tools — Under appropriate Data Processing Agreements for platform performance and error monitoring.
• Regulatory and legal authorities — Where required by US federal or state law, court order, or regulatory investigation.
• International transfers — Data may be transferred outside the US using Standard Contractual Clauses (SCCs) or other approved mechanisms.

Cookies & Tracking

Our website and platform use cookies and similar technologies to improve user experience, analyse platform usage and support marketing activities.

Manage your cookie preferences via the consent banner on our website or through your browser settings. Disabling essential cookies may prevent access to your Home Anywhere account.

Data Retention

We retain personal data only as long as necessary to provide our services and meet legal obligations:

• Active account and property data: for the duration of the subscription, plus 3 years after termination.
• Booking and guest data: 5 years for financial record-keeping and dispute resolution purposes.
• Channel integration tokens and API keys: for the duration of the integration, securely deleted on disconnection.
• Payment and billing records: 7 years per IRS requirements and California tax law.
• Access logs and security records: 12 months for security monitoring and incident investigation.
• Marketing consent and lead data: 3 years from last engagement or until opt-out.
• AI messaging conversation logs: 2 years or as configured by the property manager in platform settings.

Your Privacy Rights (CCPA / CPRA)

As a California-based company, we uphold all rights under the CCPA and CPRA. Depending on your location, additional rights may apply under GDPR or other laws:

1. Right to Know — Request disclosure of the categories and specific pieces of personal data we have collected, used, disclosed or sold.
2. Right to Access — Obtain a copy of your personal data in a portable, machine-readable format.
3. Right to Delete — Request deletion of personal data we hold, subject to applicable legal retention obligations.
4. Right to Correction — Request correction of inaccurate or incomplete personal information in our records.
5. Right to Opt-Out of Sale/Sharing — Home Anywhere does not sell personal data. This right is upheld by default.
6. Right to Limit Use of Sensitive Data — Limit our use of sensitive personal information to purposes strictly necessary to provide services.
7. Right to Non-Discrimination — Exercising your privacy rights will not result in denial of service or any adverse treatment.
8. Right to Withdraw Consent — Withdraw marketing consent at any time without affecting prior lawful processing.

Security Measures

Home Anywhere implements enterprise-grade security measures to protect your data and your guests' data:

• TLS 1.3 encryption for all data in transit between users, platform components and channel APIs.
• AES-256 encryption for sensitive data at rest, including OAuth tokens and API credentials.
• Role-based access control (RBAC) ensuring only authorised personnel can access user data.
• Multi-factor authentication (MFA) required for all employee and administrator access to production systems.
• Regular SOC 2 Type II audits and penetration testing by accredited independent firms.
• 24/7 automated security monitoring, intrusion detection and alerting.
• Data breach notification within 72 hours to regulatory authorities and affected parties as required by applicable law.
• Secure isolated environments for channel API integrations to prevent cross-tenant data exposure.

External Links & Channel Integrations

Home Anywhere integrates with 200+ OTA channels, payment processors, smart home devices and partner tools. When you connect a third-party integration, you are subject to that provider's own privacy policy and terms of service.

Home Anywhere is not responsible for the privacy practices of OTAs, channel partners or third-party integrations, even those connected directly through our platform. This Privacy & Legal document applies exclusively to data processed by Home Anywhere within our own systems.

Children's Privacy

Home Anywhere's platform and services are directed exclusively at property managers, vacation rental hosts and business professionals. We do not knowingly collect personal data from individuals under the age of 13.

If you believe a minor has provided data through our platform without appropriate consent, contact us immediately at privacy@homeanywhere.com and we will take prompt action to delete the data.

Changes to This Policy

We may update this Privacy & Legal document periodically to reflect changes in our services, legal obligations or business practices. When material changes are made:

• The "Last Updated" date at the top of this page will be revised accordingly.
• Registered customers will be notified by email with at least 30 days advance notice for material changes.
• A prominent notice will be displayed on our homepage and within the platform dashboard for a minimum of 30 days.
• Previous versions of this policy are available upon request from our Privacy Team.

Continued use of the Home Anywhere platform after the effective date of any updates constitutes your acceptance of the revised policy.

Contact & Privacy Team

For any questions, rights requests or concerns regarding how Home Anywhere processes your personal data, please reach out through any of the following channels: