Privacy Policy

Version 3 — Last Updated: May 20, 2026

OVERVIEW

This Privacy Policy describes the policies and procedures of House Fly Home Services Inc. (the “Company,” “We,” “Us,” or “Our”) on the collection, use, and disclosure of Your information when You use Our Service. It also explains Your privacy rights and how applicable law protects You.

By using the Service, You agree to the collection and use of Your Personal Data in accordance with this Privacy Policy.

This Privacy Policy is incorporated into and made a part of the House Fly Customer Terms of Service and the House Fly Service Provider Terms of Service (collectively, the “Terms of Service”). In the event of any conflict between this Privacy Policy and the Terms of Service, the Terms of Service control with respect to liability, indemnification, arbitration, and dispute resolution.

COLLECTING AND USING YOUR PERSONAL DATA

Types of Data Collected

Sources of Personal Data. We collect Personal Data:

(a) directly from you (e.g., account, bookings, communications, reviews, customer support inquiries, voice or chat interactions with our booking assistant);

(b) automatically from your device and use of the Service (e.g., cookies, analytics, logs, location, diagnostics, session replay, device identifiers);

(c) from Service Providers and Customers (e.g., job details, scheduling, confirmations, dispute submissions, photos, reviews);

(d) from identity verification, payment, and fraud-prevention partners (e.g., government ID images, selfie/liveness check results, transaction tokens, risk scores, chargeback data — collected only for Service Providers who go through our standard signup flow);

(e) from public sources for Pro Match Service Provider records (for example, Google Business, social media, professional directories, and licensing databases); and

(f) from AI-assisted tools used during chat or voice interactions with our booking assistant (Homer).

Personal Data. While using Our Service, We may ask You to provide certain personally identifiable information (“Personal Data”), which may include, but is not limited to:

• Email address
• Phone number (mobile and landline)
• First name, middle name, and last name
• Mailing address, service address, ZIP/Postal code, City, State
• Date of birth (where required by law or for identity verification)
• Social Security Number (Service Providers only, for tax reporting on IRS Form 1099-NEC)
• Government-issued photo ID and selfie (Service Providers who go through our standard signup flow, for identity verification; not collected from Pro Match VIP Account Service Providers)
• Profile photographs
• Payment and payout details

Payment and Transaction Data. We may receive and process payment and payout-related data, such as masked card details, network tokens, wallet identifiers, bank routing information, transaction identifiers, authorization/hold and capture amounts, refunds and chargebacks, risk scores, fraud signals, and dispute documentation. We do not store full primary account numbers.

Usage Data. Collected automatically when using the Service. Includes IP address, browser type/version, pages visited, time/date, time spent, device identifiers, mobile OS, browser, app version, crash reports, and diagnostic data.

Location Data and Media (With Your Consent). With Your prior permission, we may collect Your location (precise GPS coordinates, ZIP code, or general region) and pictures from Your Device’s camera/photo library.

Audio/Visual Communications and Records. Call recordings, voicemails, chat transcripts (including AI-assisted interactions with Homer), session replays, and related metadata for quality assurance, training, fraud prevention, dispute handling, collections, compliance, safety, and to operate and improve the Service.

Sensitive Personal Information — Inventory and Limit-Use Right. Under California Civil Code §1798.140(ae) and analogous state laws, “sensitive personal information” includes specific categories warranting heightened protection. House Fly collects the following:

Category	When Collected	Purpose	Limit-Use Right?
Social Security Number	Service Provider signup (1099 reporting)	Tax compliance	No — required for tax reporting
Government-issued ID number	Service Provider signup (identity verification)	KYC/identity verification	No — required for SP eligibility
Biometric data (selfie/liveness)	Service Provider signup (identity verification)	Identity verification	See BIPA section below
Account login credentials	Account creation	Authentication	No — required for account access
Precise geolocation	Customer or Service Provider app use (with permission)	Service Provider matching; dispatch	YES — can be limited
Contents of communications (chat, voice)	Customer/SP interactions with Homer	Booking, dispatch, dispute handling	YES — can be limited

We do not collect or process racial/ethnic origin, religious beliefs, mental/physical health diagnoses (other than as described in “Health-Related Information”), sex-life/sexual-orientation, union membership, or genetic data as sensitive categories.

Limit-use right. California residents and residents of other states granting analogous rights may request that House Fly limit the use and disclosure of sensitive personal information. Email Help@HouseFly.com with “Limit Sensitive PI” in the subject, identifying which categories. We will limit use to: (a) performing reasonably expected services; (b) fraud prevention and physical security; (c) resisting deceptive/illegal actions; (d) verifying or maintaining service quality/safety; (e) other uses permitted by CCPA/CPRA regulations. Some categories cannot be limited because collection is required for the Service itself (e.g., SSN for SP tax reporting).

Service Provider Identity Verification (Standard Signup Only)

Service Providers who sign up through our standard signup flow are required to submit a government-issued photo ID and complete an identity verification step (which may include a selfie/liveness check) before their account becomes eligible to receive job requests through standard signup. We use third-party identity verification vendors to process this information.

Pro Match Bookings and VIP Accounts (No Identity Verification Guarantee)

When a Customer books through Pro Match (the default booking model on the Platform), House Fly may dispatch any of the following: (a) a Service Provider who completed our standard signup flow and identity verification, or (b) a Service Provider whose business House Fly located through public sources (Google Business, social media, professional directories, or licensing databases) and who has not gone through our standard signup or identity verification. House Fly maintains operational records of these Pro Match Service Providers under the internal designation “VIP Account.” A VIP Account does not indicate that House Fly has verified the Service Provider’s identity or any other credential. Customers booking through Pro Match are not guaranteed to receive an identity-verified Service Provider.

What “Verified” or “Vetted” Means on the Platform

When the Platform refers to a Service Provider as “verified” or “vetted,” those words mean only that House Fly has located the Service Provider’s publicly available business profile. “Verified” and “vetted” do not mean House Fly has confirmed the Service Provider’s identity, licensure, insurance, bonding, criminal history, workmanship, or any other credential. House Fly does not currently perform criminal background checks on Service Providers.

Biometric Information Privacy Act (BIPA) and Analogous State Law Disclosure

For Service Providers who undergo House Fly’s standard signup flow, our third-party identity verification vendor collects “biometric identifiers” or “biometric information” as those terms are defined in the Illinois Biometric Information Privacy Act, 740 ILCS 14/ (“BIPA”), and analogous laws in Texas, Washington, New York City, Portland, and other jurisdictions (collectively, “Biometric Data”). This Biometric Data typically includes a selfie image, a liveness check, or a facial-geometry scan derived therefrom.

Purpose of collection. Biometric Data is collected solely to verify the Service Provider’s identity at signup, detect fraudulent or duplicate signups, and comply with House Fly’s identity verification obligations. Biometric Data is not used for marketing, profiling, sale, or any other purpose.

Vendor processing. Biometric Data is collected and processed by House Fly’s third-party identity verification vendor under a written contract requiring BIPA-compliant handling and adherence to House Fly’s retention and destruction schedule.

Retention schedule. Biometric Data is retained for the shorter of: (i) up to four (4) years from the date of collection to address fraud, audit, dispute, and legal-compliance needs; or (ii) any shorter period required by BIPA or applicable law. Upon expiration, Biometric Data is permanently destroyed by the vendor on House Fly’s instruction.

Written informed consent. Service Providers provide express, knowing, written informed consent to BIPA collection by proceeding with House Fly’s standard signup flow as described in Service Provider Terms of Service §2.7. Customers are not required to provide Biometric Data. Pro Match VIP Account Service Providers (who do not go through the standard signup flow) are not required to provide Biometric Data and are not subject to this section.

No sale, lease, trade. House Fly will not sell, lease, trade, or profit from Biometric Data and will not disclose Biometric Data to any third party except (a) the third-party identity verification vendor, (b) as required by law/court order/government request, or (c) with the individual’s separate written consent.

State-law analogs. If you are a resident of Texas (Tex. Bus. & Com. Code §503.001), Washington (Wash. Rev. Code §19.375), New York City (Local Law 3 of 2021), Portland (PCC Ch. 34.10), or any other jurisdiction with a biometric-privacy statute, the disclosures and consent in this section also apply to satisfy applicable requirements of that statute.

Health-Related Information; FTC Health Breach Notification Rule

Certain services available through the Platform may involve Customers providing or House Fly collecting limited health-related information. Examples include:

• Disclosures of contagious or infectious illness in the household (for Service Provider safety protocols)
• Disclosures of allergens or sensitivities (for cleaning-product selection)
• Disclosures of medication storage areas or controlled-substance presence (for security)
• Disclosures of mobility, accessibility, or other health-related considerations (for Service Provider preparation)

Health-related information collected through the Platform is treated as Sensitive Personal Information under this Privacy Policy. House Fly:

(a) does not use health-related information for marketing or profiling;
(b) shares health-related information with the matched Service Provider only as necessary to perform the booked service safely;
(c) does not sell or share health-related information with advertising vendors;
(d) retains health-related information only as long as necessary to perform the service and address related disputes or warranty claims.

FTC Health Breach Notification Rule. To the extent the FTC’s Health Breach Notification Rule (16 C.F.R. Part 318) applies to any health-related information collected through the Platform, House Fly will provide notice of any breach to affected individuals, the FTC, and (for breaches affecting 500 or more individuals) the media as required by the Rule. House Fly is not a “Covered Entity” or “Business Associate” under HIPAA and Platform interactions are not covered by HIPAA.

COOKIES POLICY

Introduction. Our Website uses cookies to enhance the user experience, provide essential functionality, and gather usage data. By using Our Website, You consent to the use of cookies in accordance with this Cookies Policy.

Types of Cookies We Use:

• Essential Cookies — basic Website functioning
• Performance Cookies — pages visited, error messages
• Functional Cookies — language, location, preferences
• Targeting/Advertising Cookies — more relevant advertising; may constitute “sharing” or “targeted advertising” under certain state laws

Third-Party Services We Use:

• Google Ads — opt out via Google Ads Settings
• Google Analytics (GA4) — opt out via Google Analytics opt-out browser add-on
• Google Tag Manager
• Google Search Console
• Google Firebase — chat and push notifications
• Microsoft Clarity — session replay and heatmap analytics
• Meta (Facebook) Pixel — conversion measurement and audience building
• Mailchimp — email marketing
• Make.com — workflow automation for tracking and integrations
• Other Third-Party Tools as described in Our Service

Cookie consent banner. Visitors from jurisdictions requiring affirmative cookie consent (EEA, UK, and certain California contexts) will be presented with a cookie consent banner before non-essential cookies are set. You may withdraw consent at any time through your browser settings or by clicking the “Cookie Preferences” link in our website footer.

Managing Your Cookie Preferences. Most browsers automatically accept cookies; You can modify Your browser settings to block them. Disabling essential cookies may affect functionality.

Opt-Out Preference Signals; Do Not Track. Where required, we honor browser or device-level opt-out preference signals (such as a Global Privacy Control). We do not currently respond to browser “Do Not Track” signals.

USE OF YOUR PERSONAL DATA

We may use Personal Data for the following purposes:

• To Provide and Maintain Our Service
• To Manage Your Account
• For the Performance of a Contract
• To Contact You via email, phone (SMS/voice), in-app message, push notification for booking updates, scheduling, dispatch, payment, security, and service notices
• To Verify Identity — for Service Providers who go through our standard signup flow, using government ID and selfie/liveness checks. Service Providers dispatched through the Pro Match model (VIP Accounts) are not required to complete identity verification and may not be identity-verified.
• To Match Customers with Service Providers — when a Customer requests a service, House Fly selects an available Service Provider from our queue and assigns the job; Customers do not browse profiles or choose providers themselves
• To Operate AI-Assisted Booking and Customer Service — chat (Homer) and voice (Homer Voice) interactions for service selection, scheduling, dispatch, dispute handling, customer support
• To Process Payments and Payouts — including fraud detection, authorization/capture management, refunds, chargeback response, KYC/AML compliance
• To Provide Marketing Information and Offers about goods/services similar to those You have shown interest in, unless You opt out
• To Manage Your Requests — inquiries, complaints, service issues
• For Business Transfers — merger, sale, asset transfer
• For Legal and Compliance Purposes — applicable law, subpoenas, government requests, agreement enforcement, claim defense
• For Safety and Security — fraud, abuse, security incident, harassment, unlawful conduct investigation and prevention
• For Other Purposes — data analysis, usage trends, promotional campaign evaluation, Service improvement

AI & AUTOMATED COMMUNICATIONS; RECORDING & TRANSCRIPTION

House Fly operates an AI-assisted booking experience (“Homer”) that may interact with You through chat (website and mobile app) and voice (when You call our published support number or are contacted by us regarding a booking). Homer may collect service type, ZIP code, job size, scheduling preferences, contact information, and other booking details necessary to generate a cart, dispatch a Service Provider, or complete a transaction.

We may use automated and AI-assisted tools to place or field calls, send SMS or chat messages, provide estimates or summaries, assist with account creation and booking, dispatch and route Service Providers, and detect fraud, abuse, or platform threats. Calls and chats (inbound and outbound) may be monitored, recorded, and transcribed. Consent to receive automated communications is not a condition of purchase or doing business on the Service. AI outputs may be inaccurate or out-of-date; you should verify material facts (e.g., licensing, insurance, pricing, availability) before relying on them.

At-Call-Start Recording Disclosure. At the beginning of any inbound or outbound voice call with House Fly, you will receive an audible disclosure that the call may be recorded. Continuation of the call after the audible disclosure constitutes your express, knowing consent to the recording for purposes of all applicable federal, state, and local laws governing the recording of electronic communications.

AUTOMATED DECISION-MAKING; PROFILING

House Fly uses automated and AI-assisted systems to:

• Match Customers with Service Providers (Pro Match dispatch)
• Generate pricing estimates
• Detect fraud and prevent abuse
• Recommend services based on past behavior
• Personalize content and offers

Significant-effects decisions. Some of the foregoing automated decisions may produce significant effects on you (Pro Match dispatch determines which Service Provider performs a Customer’s job; pricing estimates affect Customer payment amounts). House Fly makes these decisions using factors that do not include protected-class characteristics.

Right to opt out (where applicable). If you are a resident of California, Colorado, Connecticut, Virginia, Utah, Montana, Oregon, Texas, or another state whose comprehensive privacy law grants you a right to opt out of profiling or automated decision-making that produces legal or similarly significant effects, you may:

(a) Opt out by email — send a request to Help@HouseFly.com with “Opt Out of Profiling” in the subject line
(b) Request human review — ask for a human-reviewed re-decision of any specific automated decision affecting you

Limitations. Opting out of profiling may materially limit the Service. Customers who opt out of Pro Match profiling may experience delayed or unavailable matching. Service Providers who opt out of Pro Match dispatch profiling will not receive Pro Match offers.

No right to explanation of trade secrets. Where you have a right under state law to request information about the logic of an automated decision, House Fly will provide a meaningful explanation of the categories of factors considered without disclosing trade-secret algorithm details.

SMS MESSAGING PROGRAM

House Fly operates a transactional SMS program through Twilio. By providing a mobile phone number at signup, guest checkout, or during a booking call, and by checking the SMS consent box (or providing verbal consent during a recorded call), you opt in to receive transactional text messages from House Fly related to your booking.

Types of messages: booking confirmations, checkout links, appointment reminders, Service Provider ETA notices, payment receipts, dispute follow-ups, account/security notifications.

Message frequency: approximately 1–5 messages per booking for Customers; 1–20 per day for active Service Providers. We do not send marketing/promotional SMS from this program.

Message and data rates: standard rates may apply.

Opt-out: Reply STOP (or CANCEL, END, QUIT, UNSUBSCRIBE, STOPALL) at any time. You will receive one confirmation message and no further texts. Re-opt-in by replying START or re-checking the consent box.

Help: Reply HELP (or INFO), or email Help@HouseFly.com, or call (504) 420-7359.

Opt-in not a condition of purchase. Booking does not require SMS consent. If you decline SMS, we communicate through email and in-app/web notifications instead.

Data handling. Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. All categories exclude text-messaging originator opt-in data and consent — this information will not be shared with any third parties.

SHARING YOUR PERSONAL DATA

For the avoidance of doubt, mobile information will not be shared with third parties/affiliates for marketing/promotional purposes, and all categories exclude text-messaging originator opt-in data and consent.

We may share Your Personal Data:

• With Service Providers (matching). Job-relevant Customer information (name, service address, service type, scheduling, special instructions) is shared with the matched Service Provider to perform the job.
• With Customers (matching). Service Provider name and limited profile information may be shared with the Customer.
• With Vendors That Operate the Service. Hosting, analytics, communications, identity verification, payment processing, fraud prevention, customer support, infrastructure vendors who process Personal Data under contract on House Fly’s behalf.
• For Business Transfers. Merger, acquisition, financing, or asset sale.
• With Affiliates. Required to honor this Privacy Policy.
• With Business Partners. For certain products, services, or promotions.
• With Other Users. If You share publicly or interact with other users.
• For Legal Compliance. Legal process, government requests, court orders, subpoenas; agreement enforcement; rights/property defense; safety; fraud or abuse investigation.
• With Your Consent. For any other purpose You explicitly agree to.

To the extent any of our advertising or marketing arrangements may constitute “sharing” or “selling” under California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, Iowa, Indiana, Tennessee, New Jersey, or other state law, you may opt out as described in the California “Sale” and “Sharing” section below.

PROCESSORS AND SERVICE VENDORS

House Fly uses third-party vendors to operate the Service. These vendors process Personal Data on House Fly’s behalf under written agreements that restrict their use of Personal Data to performing services for House Fly. As of the Last Updated date, House Fly’s principal categories of vendors include:

Vendor Category	Examples	Purpose
Hosting and infrastructure	Amazon Web Services, WP Engine	Application hosting, content delivery
Communications	Twilio (SMS), voice telephony providers	SMS, voice calls, AI voice interactions
Email	Mailchimp, transactional email providers	Marketing and transactional email
Push notifications	Google Firebase	Mobile push notifications
Analytics	Google Analytics, Microsoft Clarity, Meta Pixel	Site analytics, session replay, conversion measurement
Advertising	Google Ads, Meta Ads	Display and search advertising
Identity verification	Third-party KYC/ID vendor (for SP signup)	Government ID verification, selfie/liveness
Payment processing	Stripe, PayPal, Apple, etc.	Payment card processing, wallets
Tag management	Google Tag Manager	Marketing tag deployment
Workflow automation	Make.com	Marketing tracking integrations
Error monitoring	Sentry	Application error tracking
AI services	Anthropic (Claude), OpenAI	AI-assisted booking and customer service

An up-to-date list of vendors and their privacy policies is available on request by emailing Help@HouseFly.com. House Fly may add, remove, or change vendors at its discretion.

RETENTION OF YOUR PERSONAL DATA

The Company will retain Your Personal Data only as long as necessary for the purposes set forth in this Privacy Policy or as required by law. General retention principles:

• Account information — life of your Account plus a reasonable period thereafter (typically 4 years)
• Booking and transaction records — life of your Account plus the longer of (i) 7 years for tax/financial recordkeeping or (ii) the period required by applicable law
• Identity verification records (government ID images, selfie/liveness, biometric data) — life of the Service Provider’s account plus a reasonable period (typically up to 4 years) for audit, dispute, fraud-prevention, and legal-compliance purposes
• Call recordings, chat transcripts, voicemails — typically 2 years; longer where required by law or for ongoing disputes
• Marketing data — until you opt out or the data is no longer relevant
• Usage and analytics data — typically 2 years in identifiable form; longer in aggregated/de-identified form
• Legal hold — when subject to a legal hold, subpoena, or pending investigation, retention periods are extended for the duration of the hold plus any reasonable period thereafter for compliance with legal obligations

Specific retention periods may vary based on legal requirements, the type and sensitivity of the data, and operational needs.

SECURITY AND DATA BREACH RESPONSE

Reasonable security measures. House Fly implements technical, administrative, and organizational measures designed to protect Personal Data in accordance with reasonable industry standards for an entity of our size and the nature of the Personal Data we process. These include encryption in transit (TLS), encryption at rest where appropriate, role-based access controls, multi-factor authentication for administrative accounts, employee training, vendor security due diligence, log monitoring, and incident response procedures.

No absolute security warranty. No security measures are absolute. House Fly does not warrant or guarantee that Personal Data will be free from unauthorized access, disclosure, alteration, destruction, or loss. You are responsible for maintaining the security of your account credentials, devices, and own networks. To the fullest extent permitted by law, House Fly disclaims all liability for any unauthorized access caused by your failure to maintain reasonable account or device security.

Breach notification. If House Fly experiences a security incident involving unauthorized access to or acquisition of your Personal Data that triggers breach notification obligations under applicable federal, state, or local law, House Fly will:

(a) Notify affected individuals as required by applicable law, in the manner required and within the time periods required (typically 30–90 days from discovery, varying by jurisdiction);
(b) Notify state attorneys general, federal agencies, consumer reporting agencies, and media as required by applicable law;
(c) Investigate the incident, take reasonable remediation steps, and (where appropriate) offer affected individuals identity-theft protection or credit monitoring services;
(d) Cooperate with law-enforcement investigations as required by law.

Limitation of liability for breach. Any claim arising from a security incident (whether under common law, statute, or the implied covenant of good faith) is subject to the limitation of liability cap, contractual one-year statute of limitations, arbitration agreement, class-action waiver, and other provisions of the Terms of Service.

Reasonable care defense. House Fly’s compliance with reasonable industry standards for security and breach response constitutes a complete defense to any claim that House Fly failed to implement and maintain reasonable security procedures and practices under California Civil Code §1798.150 or analogous statutes.

INTERNATIONAL DATA TRANSFERS AND SAFEGUARDS

Personal Data may be transferred to, processed in, and stored in countries other than the country in which you reside. Such countries (including the United States) may have data-protection laws that differ from those in your country.

U.S. residents. Personal Data collected from U.S. residents is primarily processed in the United States. Vendor processing may occur in other countries where the vendor operates infrastructure.

EEA/UK residents. For individuals in the European Economic Area, United Kingdom, or Switzerland, when House Fly or its vendors transfer Personal Data outside your jurisdiction, House Fly relies on:

(a) Standard Contractual Clauses approved by the European Commission (or analogous UK and Swiss versions)
(b) Adequacy decisions for transfers to jurisdictions deemed by the European Commission to provide adequate protection
(c) Derogations for specific transfer purposes (e.g., performance of a contract with the data subject) as permitted by GDPR Article 49

State-specific cross-border requirements. Where state law (including without limitation California Civil Code §1798.140) requires additional disclosures or safeguards for cross-border transfers, House Fly will comply.

Your consent to transfers. By providing Personal Data to House Fly, you consent to the transfer of that data to the United States and to such other countries as may be necessary to provide the Service, subject to the safeguards described above.

DISCLOSURE OF YOUR PERSONAL DATA

• Business Transactions — Personal Data may be transferred as part of a merger, acquisition, financing, or asset sale, with notice to You.
• Law Enforcement — disclosure if required by law or in response to lawful requests by public authorities.
• Other Legal Requirements — disclosure to comply with legal obligations, enforce Terms of Service, protect Our rights and property, ensure user safety, or protect against legal liability.

YOUR PRIVACY RIGHTS (US)

Depending on your state of residence and subject to verification and legal exceptions, you may have the right to:

• Know/Access — request information about the Personal Data we collect, use, share, and sell about you
• Delete — request deletion of Personal Data, subject to legal-retention exceptions
• Correct — request correction of inaccurate Personal Data
• Port — receive a copy of your Personal Data in a portable, machine-readable format
• Opt Out of Sale/Sharing — opt out of any “sale” or “sharing” for cross-context behavioral advertising
• Limit Sensitive PI — request that we limit our use and disclosure of sensitive personal information
• Opt Out of Automated Decision-Making/Profiling — where applicable
• Non-Discrimination — not be discriminated against for exercising privacy rights

HOW TO SUBMIT AND VERIFY PRIVACY REQUESTS

Submission methods. You may submit a privacy request by:

(a) Email — Help@HouseFly.com (subject line should describe the request type)
(b) Web form — https://housefly.com/privacy-request/
(c) Authorized agent — see below

Verification. Before processing a privacy request, House Fly will verify your identity to a reasonable degree of certainty using:

• For account holders: account credentials + verification of contact information on file
• For non-account holders: at least two data points that match information House Fly has on file (e.g., email address + phone number, or service address + booking date)
• For sensitive requests (deletion, opt-out of sale): higher level of verification may be required

Response timeline. House Fly will acknowledge your request within ten (10) business days and respond within forty-five (45) days. The response period may be extended by an additional forty-five (45) days where reasonably necessary, with notice to you of the extension and reason.

No fees for routine requests. Routine privacy requests (up to two requests per individual per twelve-month period) are processed at no cost to you. For excessive or manifestly unfounded requests, House Fly reserves the right to charge a reasonable fee or refuse the request.

Authorized agent. An authorized agent may submit a privacy request on your behalf with:

(a) signed permission from you (or power of attorney)
(b) the agent’s proof of identity
(c) your own verification of identity

Denial and appeal. If House Fly denies a request, you will receive a written explanation. Where state law provides an appeal right (Virginia, Colorado, Connecticut, Texas, others), you may appeal by replying with “Privacy Appeal” in the subject line. House Fly will respond within sixty (60) days. If denied, you may file a complaint with your state attorney general or with the California Privacy Protection Agency (if applicable).

US STATE PRIVACY DISCLOSURES AND RIGHTS

The following disclosures and rights apply to residents of states with comprehensive consumer privacy laws, including without limitation California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Montana (MTCDPA), Oregon (OCPA), Texas (TDPSA), Delaware (DPDPA), Iowa (ICDPA), Indiana (INCDPA), Tennessee (TIPA), New Jersey (NJDPA), and other states with analogous laws.

Categories of Personal Data Collected (Notice at Collection)

In the past 12 months, we have collected the following categories of Personal Data:

Category	Examples	Collected?	Sold/Shared?
Identifiers	Name, address, email, phone, IP address, device ID	Yes	Limited sharing for advertising — opt out below
Customer Records (Cal. Civ. Code §1798.80)	Phone, address, payment information	Yes	No
Protected Classifications	Age, gender (only where required)	Limited	No
Commercial Information	Bookings, transactions, payment history	Yes	No
Internet/Network Activity	Browsing history, app usage, interactions with ads	Yes	Limited sharing for advertising — opt out below
Geolocation	Precise location (with permission), general region	Yes (with permission)	No
Audio/Visual	Call recordings, chat transcripts, photos	Yes	No
Professional/Employment	License info, certifications (Service Providers)	Yes	No
Sensitive PI	SSN (SPs only), gov ID (SPs only), biometric (SPs only), precise location	Yes (limited)	No
Inferences	Service preferences, booking patterns	Yes	Limited sharing for advertising — opt out below

Purposes: We use these categories for the purposes listed in “Use of Your Personal Data” above.

Retention: See “Retention of Your Personal Data.”

California “Sale” and “Sharing” — Specific Inventory and Opt-Out

Under California’s Consumer Privacy Act and the California Privacy Rights Act (collectively, “CCPA/CPRA”), the terms “sale” and “sharing” have broad meanings that may include disclosures of Personal Data to certain advertising and analytics vendors even where no money changes hands.

Categories shared for cross-context behavioral advertising. In the past twelve (12) months, House Fly has shared the following categories of Personal Data with the following types of recipients for the following purposes:

Category Shared	Recipients	Purpose
Identifiers (cookie IDs, device IDs, IP address)	Google Ads, Meta (Facebook) Pixel, Microsoft Clarity	Cross-context behavioral advertising; conversion measurement; site analytics
Internet/network activity (pages visited, ads clicked)	Google Analytics, Google Tag Manager, Microsoft Clarity	Site analytics; ad attribution; A/B testing
Inferences (interest categories, service-likelihood signals)	Google Ads, Meta Pixel	Targeted advertising; audience-building
Approximate geolocation (city/region)	Google Ads, Meta Pixel	Regional targeting; market analytics

We do NOT share or sell: identity-verification documents, government IDs, biometric data, payment card numbers, Social Security Numbers, precise GPS coordinates (without consent), call recordings, chat transcripts, or sensitive personal information.

How to opt out. You may opt out of “sale” and “sharing” through any of the following methods:

1. Account setting — log in, go to Privacy Settings, toggle “Do Not Sell or Share My Personal Information”
2. Email — Help@HouseFly.com with “Do Not Sell or Share” in the subject line
3. Global Privacy Control (GPC) — we honor valid GPC signals from your browser or device. Visit globalprivacycontrol.org for supporting browsers and extensions.
4. Web form — https://housefly.com/privacy-opt-out/

Effect of opt-out. After processing an opt-out, House Fly will:

• Stop sharing your Personal Data with advertising vendors for cross-context behavioral advertising
• Maintain a record of your opt-out preference for at least twelve (12) months
• Continue to share data with operational vendors (hosting, communications, identity verification, payments) that act on House Fly’s behalf and that are not engaged in “selling” or “sharing” under CCPA/CPRA

Authorized agent. A consumer’s authorized agent may submit an opt-out request on the consumer’s behalf with appropriate proof of authority (signed permission, power of attorney) and verification of the consumer’s identity.

Non-discrimination. House Fly does not deny services, charge different prices, or provide different service quality to consumers who opt out, except where the difference is reasonably related to the value of the Personal Data and is part of a financial-incentive program disclosed at enrollment.

State-Specific Rights Summary

• California (CCPA/CPRA): Rights to know, delete, correct, port, opt out of sale/sharing, limit sensitive PI, non-discrimination, opt out of automated decision-making (where applicable). Authorized agent permitted. Appeals available.
• Virginia (VCDPA): Rights to access, delete, correct, port, opt out of sale, opt out of targeted advertising, opt out of profiling. Appeals required.
• Colorado (CPA): Rights to access, delete, correct, port, opt out of sale, opt out of targeted advertising, opt out of profiling. Universal opt-out mechanism required.
• Connecticut (CTDPA): Similar to Virginia and Colorado.
• Utah (UCPA): Rights to access, delete, port, opt out of sale and targeted advertising.
• Montana, Oregon, Texas, Delaware, Iowa, Indiana, Tennessee, New Jersey, and other states: Generally analogous rights; consult your state attorney general for specifics.

Non-Discrimination

We will not unlawfully discriminate against you for exercising any privacy right, including by denying services, charging different prices, providing different quality, or suggesting that you will receive different price/rate/quality.

Financial Incentives

If we provide a program that offers a price, rate, or service difference related to the collection, retention, or sale/sharing of Personal Data, we will disclose the material terms at the time of enrollment.

CHILDREN AND MINORS

Our Service is intended for users who are 18 years of age or older.

Under 13 (COPPA). Our Service is not directed at children under 13, and we do not knowingly collect Personal Data from children under 13 without verifiable parental consent in compliance with the Children’s Online Privacy Protection Act, 15 U.S.C. §§6501–6506, and the FTC’s COPPA Rule, 16 C.F.R. Part 312. If you are a parent or guardian and believe we have collected Personal Data from a child under 13 without your consent, contact Help@HouseFly.com immediately and we will delete the information.

Ages 13–17. For users between the ages of 13 and 17:

• We do not “sell” Personal Data without opt-in consent
• We do not “share” Personal Data for cross-context behavioral advertising without opt-in consent
• We do not engage in profiling for decisions that produce significant effects
• We apply heightened privacy defaults (no precise geolocation tracking by default, no marketing communications by default)

State-specific minor protections. Where required by applicable state law (including the California Age-Appropriate Design Code Act, Connecticut Data Privacy Act, Maryland Age-Appropriate Design Code, New York SAFE for Kids Act, or analogous law), additional protections apply to minors.

Parental contact. Parents or guardians may exercise privacy rights on behalf of a minor by contacting Help@HouseFly.com with proof of parental relationship and the minor’s account information.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. We will notify You of material changes by posting the revised policy on this page, updating the “Last Updated” date, and, if appropriate, notifying You via email, SMS, or within the Service. You are encouraged to review this Policy periodically.

Historical versions of this Privacy Policy are available on request by emailing Help@HouseFly.com.

PROPERTY MANAGEMENT SERVICES (COMING SOON)

House Fly intends to offer property management services in the future. Specific privacy practices for property management — including tenant/applicant data, screening, escrow and trust accounting, and adverse-action notices — will be added to this Privacy Policy at or before launch.

LIMITATION OF LIABILITY (PRIVACY)

This Privacy Policy is incorporated into and governed by the Terms of Service. Any claim arising under this Privacy Policy is subject to the arbitration agreement, class-action waiver, contractual one-year statute of limitations, limitation of liability cap, and indemnification obligations set forth in the Terms of Service. To the fullest extent permitted by law, our aggregate liability for any claim arising under or relating to this Privacy Policy (including any claim for breach, unauthorized disclosure, unauthorized access, or violation of any state or federal privacy law) is limited as set forth in the Terms of Service.

DEFINITIONS

• “Account” — a unique account created for You to access or use Our Service.
• “Affiliate” — any entity that controls, is controlled by, or is under common control with the Company.
• “Application” — the House Fly mobile application and website.
• “Biometric Data” — as described in the BIPA section.
• “Company” (also “We,” “Us,” or “Our”) — House Fly Home Services Inc., a Delaware Corporation, located at 7041 Canal Blvd. Ste 504, New Orleans, LA 70124.
• “Cookies” — small text files placed on Your Device by a website.
• “Cross-Context Behavioral Advertising” — has the meaning given in California Civil Code §1798.140(k).
• “Device” — any electronic device capable of accessing the Service.
• “DPA” — a Data Processing Addendum executed between House Fly and a vendor.
• “GPC” (Global Privacy Control) — a browser-or-device-level signal for opt-out preferences.
• “Homer” — House Fly’s AI-assisted booking and customer-service experience.
• “Personal Data” — any information that relates to an identified or identifiable individual.
• “Pro Match” or “Concierge Booking” — a booking in which House Fly selects an available Service Provider and assigns the job.
• “Profiling” — automated processing of Personal Data to evaluate, analyze, or predict aspects of an individual.
• “Sensitive Personal Information” — has the meaning given in California Civil Code §1798.140(ae) and analogous state laws.
• “Service” — the website(s), Application(s), and other related offerings operated by the Company.
• “Service Provider” — any natural or legal person who performs home services for Customers through the Platform.
• “Usage Data” — data collected automatically from your use of the Service.
• “VIP Account” — the internal operational designation House Fly uses for Service Provider records associated with the Pro Match booking model. VIP Accounts are not subject to standard signup flow or identity verification.
• “Website” — any website operated by the Company, including www.HouseFly.com.
• “You” — the individual accessing or using the Service.

MISCELLANEOUS

• Third-Party Links and External Sites — Our Service may contain links to third-party sites. We are not responsible for their content, privacy practices, or policies.
• Accuracy of Data — Notify Us promptly of any changes or inaccuracies in Your Personal Data.
• Compliance with Local Laws — This Privacy Policy is intended to comply with applicable data protection and privacy laws. If any provision conflicts with a non-waivable right under local law, local law prevails.
• Interpretation — Section headings are for convenience only. Words in the singular include the plural.

CONTACT US

For questions about this Privacy Policy or to exercise your privacy rights:

By Email:

• General/customer support and privacy requests — Help@HouseFly.com
• Legal matters — Legal@HouseFly.com
• Designated Privacy Contact — Privacy@HouseFly.com (forwards to Help@HouseFly.com)

By Mail:

House Fly Home Services, Inc.
ATTN: Privacy Policy
7041 Canal Blvd. Ste 504
New Orleans, LA 70124

By continuing to use the Service, You acknowledge that You have read and understand this Privacy Policy and agree to Our collection, use, and sharing of Your Personal Data as described herein.