1. Who We Are

HomeInspect is a product of Sideon, LLC ("Sideon", "we", "us"). This policy describes how we collect, use, and protect your information when you use HomeInspect at sideon.io.

2. Information We Collect

Account information: your email address and password (stored as a salted hash — we never see your password).

Inspection content: photos you upload and the findings, reports, and project metadata generated from them.

Billing information: handled entirely by Stripe. We never store your card details — we retain only your subscription tier and Stripe customer reference.

Waitlist information: name, email, and the segment you optionally select (e.g. landlord, short-term-rental host) if you join our waitlist.

3. How Your Photos Are Handled

Photos upload directly from your browser to Amazon Web Services (S3) over an encrypted connection — they do not pass through our application servers. During analysis, photos are processed by Anthropic's Claude AI under their commercial terms, which prohibit training on customer data.

We use Cloudflare Web Analytics to count visits to our public pages. It is cookieless: it sets no cookies, does not fingerprint your device, and cannot follow you to other websites. It records aggregate information such as page URL, referring site, country, and browser type. We use it only to understand how many people find us and from where — there is no advertising or profiling, and nothing it collects is linked to your account.

When analysis completes, we render your report — with its photos embedded — and store that finished PDF in your account. We also keep a reduced-resolution copy (long edge roughly 1600 pixels) of every photo you uploaded, not only the ones that produced a finding, so you can see your whole set of photos in the app afterwards and check what the analysis did and did not flag.

The original full-resolution uploads are automatically deleted 7 days after upload. What we retain after that is: your report PDF, the findings, and the reduced-resolution copy of each photo. A photo that could not be analysed — an unreadable or unsupported file — has no reduced-resolution copy, so it is gone entirely once the 7-day window passes.

Retained items are kept for as long as your account exists, so that a report you may need months later — for a deposit dispute, for example — is still complete.

You can delete your account and all of its data yourself, at any time, from Settings → Delete Account. That permanently removes your inspections, findings, photos and reports. If you would rather we did it, email admin@sideon.io.

One thing we keep after you delete. If you used the free first report, we keep a one-way fingerprint of your email address — a scrambled value we can check a given address against, but which is not stored alongside your name, your account, or anything about your inspections. It exists only so the free report stays one per mailbox, and it is the single exception to the deletion described above. If you would like it removed too, just ask: admin@sideon.io.

Two things we want to be straight about rather than leave you to assume. Our encrypted database backups may contain a copy of your data for up to 90 days after deletion, after which they expire automatically — we deliberately cannot reach into those backups to delete individual records, because the same restriction is what stops an attacker destroying our backup history. And your billing records stay with Stripe, our payment processor, for as long as tax and accounting rules require; deleting your account does not erase invoices you have already been issued.

4. How We Use Your Information

To provide the service: generating findings and reports, managing your subscription, and responding to support requests. We do not sell your data, and we do not share it with anyone for advertising or profiling.

We use the following service providers to operate HomeInspect, and share with them only what each one needs:

• Amazon Web Services — stores your uploaded photos and your report PDFs.
• Anthropic — analyses your photos to produce findings, under commercial terms that prohibit training on customer data.
• Stripe — processes payments. Your card details go to Stripe directly and are never stored by us.
• Resend — delivers our email (password resets, and notifications to us about your enquiries). Receives your email address.
• Cloudflare — cookieless visit counting on our public pages, as described above.
• Sentry — error monitoring, so we can find and fix faults. It is configured to strip personal information, including email addresses, before any report leaves our servers.

5. Data Isolation

Your inspection data is accessible only to your account. Every data access in our system is scoped to the authenticated owner — no other customer can view your projects, photos, findings, or reports.

6. Data Retention & Deletion

Your data is retained while your account is active. You can delete your account and everything in it yourself, at any time, from Settings → Delete Account — it takes effect immediately, not on a queue. If you would rather we did it for you, email admin@sideon.io and we will process the request within 30 days.

What survives deletion, in full: encrypted backups for up to 90 days (above), your billing records at Stripe, and — if you used the free first report — a one-way fingerprint of your email address with the date it was used. Nothing else.

That fingerprint is a scrambled value, stored on its own: it is not kept next to your name, your account or your inspections, and there is no way for us to go from it back to a list of addresses. We keep it for one reason — so the free first report cannot be claimed over and over by deleting and recreating an account. You can ask us to delete it too, at admin@sideon.io, and we will.

7. Marketing Emails & Your Choices

If you joined our waitlist, we may email you about the product launch and related updates. Every marketing email contains a working unsubscribe link, and using it requires no account, no login, and no information beyond the link itself.

When you unsubscribe we keep a record that you opted out — we do not delete your entry. That is deliberate: it is what stops a later list import from accidentally signing you back up.

Unsubscribing applies to marketing email only. Service messages you have asked for — such as a password reset — will still reach you, because withholding them would break your own account.

8. Cookies

We use only essential cookies: an authentication cookie to keep you signed in and an anti-forgery token to protect form submissions. No advertising or cross-site tracking cookies.

9. Changes & Contact

We'll update this page when our practices change and adjust the date above. Questions? Contact admin@sideon.io.