Privacy & data
HomeStack collects only what is needed to analyze financing options, keeps each kind of data separate, and lets you delete it at any time.
What we never collect
- Social Security numbers
- Bank login credentials or passwords
- Credit-card numbers — any payment is handled entirely by Stripe's PCI-compliant checkout
Account information
- Your name, email address, and a securely hashed password. Used only to sign you in and to send password-reset emails.
Borrower information
- Credit score range, gross income, debts, assets, household size, and the other inputs you enter. Stored only when you save an analysis, and used only to produce and display your analysis.
Property information
- Address, price, and property details you confirm. Addresses are checked with the U.S. Census Bureau geocoder to identify the county and city limits.
Analysis data
- A saved analysis keeps a snapshot of your inputs and the calculated results so it does not change unexpectedly when program data is updated.
Payment information
- If paid plans are enabled, Stripe processes payment. HomeStack stores only purchase status, Home Search Pass dates and Pro subscription status — never card details.
Free-analysis counter
- To count free property analyses, HomeStack keeps a one-way fingerprint (hash) of each analyzed property's address, not the address itself: in a signed browser cookie if you are signed out, or on our server for your account. Deleting saved data keeps the counter; deleting your account removes it.
Unsaved analyses
- If you run an analysis without saving it, your inputs are sent to our server to calculate results and are not stored, apart from the free-analysis fingerprint described above. A draft is kept in your browser tab's session storage until you close the tab.
Logs
- Server logs record events such as “analysis executed” with timing and counts. Financial values and personal details are redacted from logs.
Deleting your data
- From Profile you can delete all saved data (properties, profiles, analyses, scenarios, reports) or delete your account entirely. Deletion is immediate and permanent.