Privacy policy

1. Introduction

We're OTwoOne Limited, the company behind HomeGenie.ie. We're based in Dublin. This policy explains what personal data we collect when you use homegenie.ie and the HomeGenie service, why we collect it, who we share it with, and what rights you have over it.

We've tried to write this in plain English. There's a more technical companion document — our Data Protection Impact Assessment (DPIA) — that covers the same ground in regulator-friendly language. Same facts; the DPIA is just for the auditors.

2. What information we collect

When you join the waitlist: your email address, the role you picked (buyer / renter / agent), and an optional county.

When you register interest as an agency: your agency name, PSRA licence number, your name, your email, and optional estimates of how many branches and active listings you have.

When you enquire about a listing:your name, email, an optional phone number, and the message you write. We pass these to the estate agent for that listing so they can reply to you directly. We don't require a phone number, and we ask for your consent on the form before you send.

When you sign in:your email address. We use magic-link sign-in, so there's no password to store.

Automatically, when you visit the site:a hashed fragment of your IP address (the network portion only — we can't identify you from it, we use it to spot abuse patterns like bulk signups from a single subnet), your browser's user-agent string, and anonymous pageview data. See the Cookies and tracking section below for how the pageview data works.

3. Why we collect it

• Waitlist + agency lead: because you asked to hear from us at launch. We need your email to do that. (GDPR Article 6(1)(b) — contract.)
• Listing enquiries: because you asked us to put you in touch with an agent about a specific property. You give consent on the form, and the enquiry is a first step towards a possible transaction. (GDPR Article 6(1)(a) — consent, and Article 6(1)(b) — contract.)
• Sign-in: because you need to authenticate to use the service. (Article 6(1)(b).)
• Analytics: because we have a legitimate interest in understanding how the site is used so we can build a better product. The data is anonymous — see Section 6 below. (Article 6(1)(f).)
• Error monitoring: because we need to know when things break. Personal data is stripped before any error report leaves your browser. (Article 6(1)(f).)

4. Who we share it with

We use a small set of EU-based service providers to run HomeGenie. We don't sell your data. We don't share it for advertising. We don't share it with anyone else.

The one exception you control: when you send an enquiry about a listing, the contact details and message you provide are passed to the estate agent responsible for that listing, so they can respond to you. That's the whole point of the enquiry, and you consent to it on the form.

• Supabase Inc. — database and authentication. Hosted in Dublin, Ireland.
• Resend — transactional email (waitlist + agency confirmations, magic links). Hosted in Ireland.
• PostHog Cloud EU — privacy-first analytics. Hosted in the European Union.
• Vercel Inc.— hosting and CDN. Production region is Dublin (Vercel's dub1).
• Sentry — error monitoring. Hosted in Frankfurt, Germany.

5. How long we keep it

• Waitlist signups: until launch plus 12 months from our last contact with you.
• Agency leads: until launch plus 12 months from our last contact with you.
• Listing enquiries: while the listing is live plus 12 months, then deleted (sooner if the listing or agency is removed).
• Sign-in sessions: 30 days from last activity.
• Analytics events: 90 days.
• Error reports: 90 days.

We'll send you a re-confirmation email before deletion so you can choose to stay on the list.

7. Your rights

You have the following rights over your data. Email us to exercise any of them.

• Access: ask for a copy of what we hold on you. Email hello@homegenie.ie and we'll send it over.
• Correct:tell us what's wrong and we'll fix it.
• Delete:tell us to remove your record. We'll do it subject to any legal-retention obligations (we'll explain if so).
• Restrict, object, or port:describe what you want and we'll work with you.
• Complain to the regulator: our lead supervisory authority is the Data Protection Commission Ireland. You can lodge a complaint with them at any time.

8. International transfers

We don't make any. Every service provider listed in Section 4 stores your data inside the European Union. If that changes — for example when we add payments (Stripe) or AI features (Anthropic) later in our roadmap — we will update this page first, and we'll let you know by email if your data is affected.

9. Security

• All data is stored in EU regions.
• Everything is encrypted in transit (HTTPS) and at rest.
• We hash the network portion of IPs before storing them — we can't link an IP-hash back to an individual person.
• Personal information is scrubbed from our error reports before transmission.

10. Contact

Controller: OTwoOne Limited, registered in Ireland. Registered office: [registered address — pending company sign-off].

Email: hello@homegenie.ie.

We don't have a designated Data Protection Officer at this stage — we're below the GDPR Article 37 threshold for mandatory appointment. We re-evaluate that when our processing surface grows (listings, search, AI).

11. Changes to this policy

We'll update this page when our processing changes. Current version is v0.2 (updated 2026-06-16, adding in-app listing enquiries). Material changes — anything that affects how your data is used — will be flagged at the top of this page and we'll email anyone with an active waitlist or agency-lead record.

Previous versions are available on request.