Privacy Policy for HomePays

Introduction

M&H Home Solutions LLC ("we," "our," or "us") operates the HomePays mobile application (the "App"). HomePays is a referral program app: referral partners refer home-improvement projects to M&H Home Solutions and earn rewards when those projects close, and sellers recruit and manage referral partners. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the App.

By using the App you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not access or use the App.

1. Information We Collect

1.1 Account & Profile

• Account Information: email address, first and last name, and phone number. HomePays is passwordless — you sign in with a one-time code sent to your phone or email, so we do not collect or store a password.
• Profile Information: mailing address, profession, your role (referral partner or seller), and an optional profile photo.
• Authentication Data: secure tokens and session information.

1.2 Referral & Reward Data

• The referrals you submit, which may include the prospective customer's name, phone number, and the type of home project.
• Your referral activity, the status of each referral (submitted, sold, paid), and your reward/earnings history.

1.3 Payment Information

• Payout details (such as your chosen payout method and the associated account/handle) used to pay your referral rewards.
• Tax information (e.g., a W-9) where required to issue payments.

1.4 Usage Data

• Device Information: device type, operating system version, and unique device identifiers.
• App Usage & Performance: features accessed, interactions, crash reports, and error logs.

1.5 Camera, Photos & Contacts

• Camera: to scan a referral partner's invite QR code at sign-up and to take a profile photo.
• Photo Library: to let you choose a profile photo.
• Contacts: accessed only when you choose to autofill a referral or partner from your contacts. Your contacts are not uploaded or stored — only the entry you select is used to fill the form.

1.6 Location

We do not collect your device's GPS location. We use your IP address (read server-side) to attribute a referral sign-up to the correct inviter and to help prevent fraud.

2. How We Use Your Information

• Operate the referral program: register your account, record your referrals, and track their status.
• Calculate and pay your referral rewards, including processing payouts and required tax forms.
• Authenticate you and keep your account secure.
• Communicate with you about your account, referrals, promotions, and support requests.
• Analyze usage to maintain and improve the App and fix technical issues.
• Detect and prevent fraud, abuse, and security incidents.

3. Third-Party Services

The App relies on the following third-party services, each with its own privacy policy:

We do not sell your personal information.

4. Data Storage and Security

• Your data is stored on AWS cloud infrastructure.
• In transit: all data between your device and our servers is encrypted with HTTPS/TLS.
• At rest: sensitive data is encrypted using AWS encryption services.
• On device: authentication tokens are stored using your device's secure storage (iOS Keychain / Android Keystore).

5. Your Rights and Choices

• Access & update: you can view and edit your profile information (name, phone, address, payout details, photo) from the Profile screen in the App.
• Account deletion: you can delete your account at any time from Profile → Delete Account. Your personal information is permanently deleted within 30 days. Referrals you previously submitted may be retained as business records, de-identified from your account where practicable.
• Data portability: you may request a copy of your personal data by contacting us at the address below.
• Communications: you may contact us to update your communication preferences.

6. Children's Privacy

The App is not intended for anyone under 18. We do not knowingly collect information from children under 18. If you believe a child has provided us information, contact us and we will delete it.

7. California Privacy Rights (CCPA)

If you are a California resident, you have the right to know what personal information we collect, to request its deletion, and to opt out of the sale of personal information (we do not sell personal information). We will not discriminate against you for exercising these rights. To exercise them, contact us using the information below.

8. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have the rights of access, rectification, erasure, restriction, portability, objection, and to withdraw consent. We process your data to perform our agreement with you, for our legitimate business interests, and to comply with legal obligations. To exercise these rights, contact us below.

9. International Data Transfers

Your information may be processed in the United States and other countries where our service providers operate, where data protection laws may differ. We take steps to protect your information consistent with this policy and applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy here and update the "Last Updated" date. Material changes may also be communicated in the App. Changes are effective when posted.

11. Contact Us

Appendix: Data Collection Summary