Privacy Policy Homeward · NeotericX Incorporated Version 1 · 2026-10-30 00:00:00 How Homeward handles account information, home plans, inquiries, and optional analytics. ## Homeward and NeotericX Homeward is owned and operated by NeotericX Incorporated. This Homeward policy is effective October 30, 2026. Mandatory legal rights and applicable separate agreements take precedence. ## Who is responsible Homeward is owned and operated by NeotericX Incorporated. NeotericX Incorporated is responsible for the personal information described here. This notice covers Homeward’s public website, organizer, account services, and contact form. Contact info@neotericx.info with “Homeward privacy request”. Company information is available in the Impressum. ## Information you provide Account records include your name, email, password hash and salt, account role and status, creation and login dates, sessions, and a hashed recovery code if you generate one. Passwords and recovery codes are not stored as readable account credentials. Email addresses supplied during ordinary registration are not verified. Signed-in project and task records are stored in Homeward’s database and associated with your account. Guest plans stay in browser storage until you choose to import them into an account. Exports create copies on your device. Do not put passwords, payment details, health records, government identifiers, security access codes, or other highly sensitive information in home plans. Contact submissions include your name, email, optional company, topic, message, reference number, submission date, and the exact terms, privacy, and separate arbitration versions accepted. Administrators may keep relationship stages and internal follow-up notes. Sending an inquiry does not subscribe you to marketing. ## Technical information and optional analytics Cloudflare processes connection information such as IP addresses, request metadata, and security logs to host and protect the service. Application rate limits use hashed keys derived from request IP or account email and a time window. Audit records track actions such as account creation, login failures, permission changes, and policy publication. With optional consent, Homeward records approved public page paths, event timestamps, and a hashed random browser identifier. It counts consented page views; it does not collect form contents, home plans, full referrer URLs, URL queries, precise location, device fingerprints, session recordings, advertising profiles, or cross-site journeys. This pseudonymous history is distinct from security logs. Historical aggregate homepage request counts from before this release include bots and reloads and have no browser identifiers. ## Purposes and legal grounds We process account and organizer data to provide the service you request, inquiries to review and respond, technical information to operate and protect the service, and relevant records to meet legal duties or address claims. Where applicable, legal grounds include performance of a contract or requested pre-contract steps, legitimate interests in security and business communications subject to balancing your rights, and legal obligations. Optional analytics relies on consent where required. Privacy notices are information about processing, not blanket consent. ## Providers and sharing Homeward uses Cloudflare Workers and D1 for hosting and database services. Public pages may request Google Fonts; Google receives the connection information needed for those font requests. Email correspondence uses the company mailbox and its provider. Contact form submissions are saved in Homeward’s management portal; automatic email delivery is not currently connected. Google, Apple, Facebook, X, and Microsoft sign-in buttons remain unavailable until their connection is configured. When enabled, the selected provider handles its own sign-in and returns the identity information described by that provider’s consent screen, such as an identifier, name, and email where available. We do not receive your provider password. Choosing email registration does not require a social account. Authorized personnel and providers may access records needed for operations, support, legal obligations, security, or a business transfer subject to applicable protections. We do not sell personal information, share it for cross-context behavioral advertising, or use your home plans or inquiries to train our own general-purpose AI models. Home plans and inquiry messages are not publicly listed. ## Retention and security We retain account records and plans while needed to provide the service, handle requests, comply with applicable duties, or establish and defend claims. You can request deletion through the privacy request channel. Limited records may remain for a lawful retention reason, and backups may persist under provider retention processes. We do not promise a fixed automatic deletion period for account, inquiry, or audit records. Optional analytics events older than 90 days and aggregate counts older than 13 months are removed during subsequent analytics collection, history deletion, or management analytics requests. Deleting this browser’s analytics history removes identifiable event rows linked to its current key. Previously combined totals cannot be isolated to a person. See the Security Policy for current safeguards; no service is absolutely secure. ## Your controls and rights Use Privacy choices to reject analytics, change consent, or delete this browser’s analytics history. Analytics is off before consent; Global Privacy Control or Do Not Track keeps it off even after an earlier opt-in. Withdrawal stops future optional collection without changing the lawfulness of prior processing. Clearing browser storage first can prevent us from linking prior history to this browser. Email info@neotericx.info to request access, correction, deletion, portability, restriction, objection, withdrawal, or an appeal where available. We may seek proportionate identity or agent verification; do not send identity documents unless a suitable method is arranged. We respond within the applicable legal deadline and explain permitted extensions or refusals. You may complain to a competent regulator without contacting us first. We will not unlawfully discriminate for exercising rights. Privacy requests do not require a Homeward account or acceptance of terms or arbitration. ## International processing and children NeotericX is based in the United States. Providers may process data in other countries. Where applicable law requires international transfer safeguards, those safeguards must cover the processing; this notice is not a transfer agreement or unrestricted transfer consent. Regional supplements explain rights where applicable and do not claim that every regional law applies. Homeward is intended for adults able to manage an account and is not directed to children under 13. Contact us if a child has provided personal information so we can investigate and remove it where appropriate. We do not make solely automated decisions with legal or similarly significant effects about users. ## Changes Effective October 30, 2026. Material changes will be described here or communicated where required. New processing that requires consent is not authorized merely by updating this notice. The contact form preserves the specific version acknowledged with each submission.