Privacy Policy

We collect information you provide to us and information generated while you use the Services. This includes:

• Identity & contact data: full name, email address, phone number, mailing address, and, for team members, professional title and photo.
• Property data: the address of the home you enroll, photos of the home, 3D walk-through tour URLs, and inspection records.
• Appliance & system inventory: make, model, serial number, install date, warranty expiration, location within the home, and uploaded warranty documents, receipts, or photos.
• Service & job data: the service requests you submit, notes and photos you attach, appointment times, work performed by our team or coordinated vendors, and status history for each job.
• Communications: messages you send us or that we send you through the member portal, email, SMS, or iMessage, including timestamps and delivery status.
• Payment data: your billing details, membership status, invoice history, and Stripe customer / subscription identifiers. Full payment card numbers are handled directly by Stripe and are never stored on Core Home Care systems.
• Account & authentication data: hashed credentials, session tokens, and sign-in events.
• Technical data: IP address, browser type, device, referring URL, and standard server logs collected when you use the website or portal.

We use the information above to:

• Deliver the Services and manage your membership.
• Schedule, dispatch, and oversee service appointments and vendor work on your property.
• Track appliances and warranties and send you proactive alerts (for example, when a warranty is nearing expiration).
• Process membership payments and issue invoices via Stripe.
• Send transactional communications (appointment confirmations, reminders, admin notices, warranty alerts, membership-status updates).
• Improve, secure, and troubleshoot the Services, including fraud prevention and system diagnostics.
• Comply with legal obligations.

Core Home Care does not sell your personal information for money and does not share it for cross-context behavioral advertising. We share only the minimum data necessary with the following service providers to deliver the Services.

• Supabase — our primary database, authentication, and file storage provider. Hosts your profile, homeowner record, appliance data, uploaded photos and documents, and messaging history.
• Stripe — processes membership subscriptions, one-off service charges, and invoices. Full card details are held by Stripe under PCI-DSS, not by us.
• Resend — delivers our transactional email (invitations, confirmations, reminders, notifications, and this policy's updates).
• Comms (osis.co) — delivers our SMS and iMessage notifications. Your phone number and message body are sent to Comms for delivery routing.
• CloudPano — hosts the 3D home tours embedded in the member portal. When you view your tour, your browser connects directly to CloudPano to load the interactive walkthrough.
• Vercel — hosts the website and member portal and runs the scheduled background jobs that power reminders and warranty alerts. Standard request logs are retained by Vercel.
• Google Workspace — hosts the Core Home Care team's email inbox that receives replies and inbound consultation requests.
• Coordinated home-service vendors — when we dispatch an external vendor to your home (plumber, electrician, HVAC, etc.), we share the minimum information needed to complete the visit: your name, home address, phone number, and the details of the service request. These vendors are independent contractors, not Core Home Care employees. Vendors we work with are contractually required to use the information we share only for the specific service requested and to protect it with reasonable security safeguards.

We may also disclose information if required by law, to enforce our Terms of Service, to protect the rights or safety of Core Home Care or others, or in connection with a business transfer (merger, acquisition, or asset sale) where the receiving party agrees to honor this policy.

Core Home Care used AI-assisted development tools (including large language models) to help design and build parts of the software that powers the Services. All code was reviewed by human operators before deployment. We disclose this because we believe our members deserve transparency about how our technology was created.

We do not currently use AI to make automated decisions about membership eligibility, billing, or vendor dispatch that would produce legal or similarly significant effects for you. If we introduce such automated decision-making in the future, we will update this policy and provide notice.

We do not send your personal information to third-party large-language-model providers as part of routine operation of the Services. We do not use your personal information to train our own AI or machine-learning models, and we do not permit our third-party providers to use it to train theirs. If this ever changes, we will notify you in advance and update this policy accordingly.

Your information is stored on servers operated by the providers named above, primarily in the United States. We use technical and organizational safeguards including encrypted connections (HTTPS), authentication controls, role-based access within our team, and short-lived signed URLs for private files.

No system is perfectly secure. If we become aware of a data incident that materially affects your information, we will notify you and any required regulators without undue delay, consistent with applicable law.

We retain your information for as long as your membership is active and for a reasonable period afterward to satisfy legal, tax, accounting, or dispute-resolution obligations, or to defend legal claims. As a general matter:

• Financial records (invoices, payment history, tax-relevant records): at least 7 years, as required by U.S. tax law.
• Job records and photos (service requests, before / after photos, work notes): duration of membership plus 3 years.
• Communications history (messages, SMS, email logs): duration of membership plus 2 years.
• Support and technical logs: approximately 12 months.
• Account & profile data on a deleted account: purged within 30 days of your deletion request, except records we are required to retain (e.g., financial history noted above).

On request, we will delete or anonymize information that we are not required to retain.

You may access, correct, or export much of your information directly through the member portal. To request deletion of your account, to withdraw a specific consent, or to exercise any privacy right available to you under applicable law, contact us at corehomecare@core-companies.com. We may need to verify your identity before acting on your request.

Depending on where you live, you may have additional rights under state privacy laws (including Colorado, Connecticut, Montana, Oregon, Texas, Utah, and Virginia) — such as the right to access, correct, delete, restrict processing of, or port your personal information, and to opt out of targeted advertising, sale, or profiling that produces legal or similarly significant effects. We honor those rights as required by applicable law. Contact us at the address in Section 13 to exercise any of them.

Global Privacy Control (GPC). Some browsers can send a Global Privacy Control signal that communicates an opt-out of sale and cross-context behavioral advertising. Because Core Home Care does not sell personal information or share it for cross-context behavioral advertising, there is nothing for us to opt you out of — but we recognize and respect the GPC signal as a valid opt-out preference.

We send you transactional communications (appointment confirmations, reminders, service updates, warranty alerts, membership notices) as part of the Services. These are not marketing and cannot be opted out of while you remain a member. You may reply STOP to any SMS to opt out of that specific stream, but doing so may impair our ability to deliver the Services.

Marketing communications (if we introduce them) will always include a one-click unsubscribe option.

We use a small number of first-party cookies and comparable storage (localStorage, session storage) to keep you signed in, remember your preferences, and secure the member portal. We do not currently use third-party advertising cookies. If that changes, we will update this policy and offer a cookie-management interface.

The Services are intended for adults responsible for a residential property. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with information, contact us and we will delete it.

Core Home Care operates from the United States and our service providers primarily store data in the United States. If you access the Services from outside the U.S., you consent to your information being transferred to and processed in the United States.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top and, for material changes, provide notice via email or in the member portal. Your continued use of the Services after the effective date constitutes acceptance.

Questions, concerns, or requests about your privacy should be directed to:

Core Home Care
4040 S Hawthorne Ave
Sioux Falls, SD 57105
privacy@core-companies.com (privacy requests)
corehomecare@core-companies.com (general)
(605) 438-2738