Privacy notice

The short version

This is a courtesy translation. The Spanish version (hausiomx.com/privacidad) is the binding one; Mexican law applies.

We keep what's needed for Hausio to work: your account, the properties you publish, your conversations and, if you're an agent, your site and the status of your subscription.

We keep the link or campaign you came from and the promotion code you used at checkout, to know what brings us agents and to pay rewards and commissions.

Your email and phone number are not shown to other users. A property's exact address is only seen by agents with an active subscription, and it never appears on public sites.

There's no advertising inside Hausio and we don't sell data to anyone. Unless you object, we use Google Analytics to count visits and we let Meta (Facebook and Instagram) and TikTok know when you create your account or subscribe, to find out whether our ads bring in agents. You can say no in the cookie notice, when you sign up or in My account, and Hausio works just the same.

Your card details never reach our servers: Stripe captures and stores them.

You can delete your account and everything in it yourself, from My account.

Who is responsible

The developer of Hausio ("Hausio", "we", "us") is responsible for processing the personal data described here, under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares).

For anything related to this notice, including your ARCO rights, email hausiomx@gmail.com.

What data we collect

From every account: your name, your email, your phone number if you give it, whether you're an owner or an agent, and your bio and profile photo if you decide to add them. Your password is stored encrypted and no one —not even us— can read it.

If you publish a property: its exact address and location, its features, its price, the commission you offer and the photos you upload.

If you're an agent: your headline, your bio, your brokerage, your city, your site's address, the WhatsApp number you decide to show on it and the listings you upload to your site, with their features, price and photos. From your subscription we keep the plan, its status and its dates, and the customer ID Stripe gives us.

If you're an agent, also your leads: the name and mobile number of people who leave their details through the "I'm interested" button on your site or that you add by hand, the listing they're interested in, the stage each one is at and the notes you write; and your sales: what you closed, with whom, the price and your commission, to show you your income. That data belongs to those people: you decide how to use it and Hausio only stores it for you.

What you do inside Hausio: chat messages and whether they've been read, the properties you save, the reports you send with their reason and details, and which agent opened each property's listing and on what day, which is used to show the owner how many times it's been viewed.

Technical data: IP address, browser type and date and time of access, which our providers log for the security of the service; whether you've confirmed your email and when you last signed in; and the date of your payment attempts, which we use to stop abuse and is deleted the next day.

Where you came from: when you create your account we store the code or campaign of the link you came in through (utm_source, utm_medium and utm_campaign). It's only used for measurement; it doesn't give a discount or a reward.

The promotion code you enter at checkout (HAUSIO, a fellow agent's or a partner's): we store it only once, on your first purchase, and it's what the Invite & earn reward or the partner's commission comes from.

From each paid charge: the amount, the date and the code or campaign you came in with. If you're an agent and your colleagues pay with your code, also the months you earn for each one and their amount.

If you're a partner (for example, a real estate coach with your own code): your name, your email, your WhatsApp, your commission terms, the commissions generated by the charges of people who paid with your code, the payments we make to you with their reference and the payout details you give us.

For hausiomx.com/r/ links we count how many visits each one gets per day: just the number, without the IP address or anything about the person who opens it.

One piece of data we infer: your country, from your phone number's country code or from your billing address in Stripe.

We don't collect sensitive personal data.

What we use it for

To provide the service: create and manage your account, publish your properties and show them to agents, enable chat between owners and agents, and show each agent's site.

To bill and manage agents' subscriptions.

To communicate with you about your account: email confirmation, password recovery, notices about your subscription —including the email we send you at least 5 calendar days before each automatic charge—, a single email reminder if you created your agent account and didn't activate your plan, and replies to whatever you write to us.

To keep the platform secure, handle reports and prevent fraud and abuse.

To run Hausio as a business: count sign-ups, payments and cancellations, see how much each account is used and notice when someone stops using it, to offer them help. We do this with an internal tool that only runs on our computer; it isn't published or shared with anyone.

To measure which channel brings in agents and to pay commissions and rewards: know which link or campaign each account came from and which code it paid with, give whoever invited you the months they earned, and calculate and pay partners' commissions (we only tell the partner how many accounts paid with their code and how much was billed, never who you are). This is necessary for the Invite & earn and partner programs, so it isn't a secondary purpose.

Secondary purposes, which aren't necessary for the service and which you can refuse without it affecting your use of Hausio:

Measuring our advertising: telling Meta that you created your account or paid for a plan, to know which ads bring in agents, and showing Hausio ads to people who already visited the site; and counting visits with Google Analytics to know which pages are useful. You can refuse with "No, thanks" in the cookie notice, with the checkbox "I don't want my data used to measure ads" when you sign up, or in My account → Ad measurement.

Showing your property on an agent's public site, only if you turn on "Allow on agent sites"; you can turn it off for each property.

Sending you news or surveys about Hausio from time to time; to stop receiving them, email us.

We don't sell your information or use it for third-party advertising.

Who sees what inside Hausio

Agents with an active subscription see the full listing of published properties, including the exact address. Agents without a subscription don't.

The people you chat with see your name, your photo and your bio. Your email and your phone number aren't shown to anyone.

An agent's site is public while their subscription is active and they have it published: it shows their photo, name, headline, bio, brokerage, city and WhatsApp, the listings they uploaded and those of owners who allowed it, always without the exact address, commission or owner details. The PDF catalog is built in the agent's browser with that same information, and they decide who to share it with.

We don't routinely review your conversations. We would only look at them to handle a report involving them or a request from a competent authority. To measure activity we only use the date of each message, never what it says.

If you leave your name and mobile number through the "I'm interested" button on a site, only the agent of that site receives them, to help you; Hausio stores them for that agent and doesn't use them for anything else. You can ask the agent to delete them, or email us. The conversation that follows happens on WhatsApp, outside Hausio, and is governed by WhatsApp's privacy notice: Hausio doesn't see it or keep it.

If you paid with an agent's code, that agent only sees how many colleagues used their code and how many are already paying. If you paid with a partner's code, the partner only knows how many accounts paid with their code and how much was billed. Neither sees your name or your email.

Who we share it with

With the providers that make the service work (processors), only with what each one needs and only to provide it to us:

With Supabase, which hosts the database, sign-in, photos and chat on servers located in the United States, and which sends your account emails.

With Resend, in the United States, which sends account emails, such as the notice before each charge, and receives your email and your name.

With Vercel, which serves the site and its functions.

With Stripe, which processes subscription payments and receives your name, your email, the billing details it asks you for and your card details, which it captures directly. It also receives the promotion code you enter at checkout and the discount applied to your first month and, if you earn months with Invite & earn, the credit added to your account.

We don't upload your name or your email to artificial intelligence tools: when we use them to analyze the business's numbers, it's with reports that don't include your name or your email.

And, to measure our advertising (a secondary purpose), with three third parties that also use that information under their own terms, and not only on our behalf:

With Meta Platforms (Facebook and Instagram), through its Pixel and its Conversions API: it receives the pages you visit, your browser and your IP address and, when you create your account or pay for a plan, your email, your user ID and your country, encrypted (hashed, not in plain text). Never your name or your phone number. Agents' public sites don't carry the Pixels or Google Analytics: we don't measure anything about the people who visit them.

With TikTok, through its Pixel and its Events API: it receives the pages you visit, your browser, your IP address and the ID of the TikTok ad you came from and, when you create your account or pay for a plan, your email and your user ID, encrypted (hashed, not in plain text). Never your name or your phone number.

With Google, through Google Analytics: it receives the pages you visit, your browser, your device, your approximate city and where you came from, but not your name, your email or your phone number.

Transfer to Meta, TikTok and Google: unless you object, you agree that we transfer that data to them for that purpose. If you don't agree, say "No, thanks" in the cookie notice, check the box when you sign up or choose "Don't use my data to measure ads" in My account: from that moment on we don't send them anything of yours.

With authorities, when there is a duly founded and reasoned order that requires us to.

With no one else. All of them may process data outside Mexico. Sending it to processors is necessary to provide you the service; sending it to Meta, TikTok and Google isn't, and that's why you can refuse.

How long we keep it

As long as your account exists. Canceling your subscription doesn't delete your account: you keep your information in case you subscribe again.

If you delete your account from My account → Delete account, your profile, your properties and their photos, your saved items, your conversations and your reports are deleted immediately, and your subscription is canceled. Database backups roll over in the following days.

Photos you uploaded but never published, or that you removed from a listing, are deleted automatically within one or two days.

Our internal reports read the database in real time: if you delete your account, you stop appearing in them. Copies we download to analyze are deleted within 30 days at most.

Where you came from, the code you paid with and your Invite & earn rewards are deleted along with your account. If you paid with another agent's code, the reward they already earned stays with them, without your name or your email; if it was a partner's, so does the commission your charges already generated.

If you're a partner, your data and the record of your commissions and payments are kept while the agreement lasts and, afterwards, for the time tax laws require for accounting (five years).

The record of each paid charge (amount, date and source code) is kept if you delete your account, but without your name or your email: it's an accounting record and it's used to calculate partners' commissions.

The visit count for /r/ links doesn't store anything about anyone, so there's nothing of yours to delete.

Stripe keeps the record of your payments for as long as the law requires it to.

Your ARCO rights

Under Mexican law you have the right to Access your data, Rectify it if it's inaccurate, Cancel it when you consider it isn't needed and Object to its use for specific purposes (ARCO rights).

You can do much of this yourself: your name, your phone number and your bio can be corrected in My account, and you can delete your account right there. For everything else, email hausiomx@gmail.com from your account's email address, saying which right you want to exercise and over what data. We'll reply within 20 business days at most and, if it applies, we'll carry it out within the following 15 business days.

You can also withdraw your consent at any time, with the same procedure. If the withdrawal affects what we need to provide you the service, we'll have to close your account.

Minors

Hausio is for adults. We don't knowingly collect data from minors; if any reached us, we delete it.

Cookies

We use the cookies needed to keep you signed in. Without them you'd have to sign in again on every screen, so they can't be turned off.

If you come in through a hausiomx.com/r/ link or a link with a campaign code, we store that code in your browser for 60 days, to know where you came from if you create your account. It doesn't contain anything about you, doesn't give a discount and is only used to measure which channel brings in agents.

Unless you object, we also use Google Analytics cookies, to count visits and understand which pages are useful and which aren't, and the Meta and TikTok Pixel cookies, which tell us whether you came from one of our ads and let us show Hausio ads to people who already visited the site.

The first time you visit, we tell you in a notice at the bottom of the screen. If you choose "No, thanks", neither Google Analytics nor the Pixel loads in that browser, and we remember it for a year. If you have an account, you can change it whenever you want in My account → Ad measurement. Hausio works just the same.

Changes to this notice

If we change something important, we'll let you know by email or within Hausio before it takes effect, and the date above will change. The current version is always on this page.