Privacy Policy

• Full name, email address, and password (hashed — never stored in plain text)
• Date of birth and nationality
• Profile photo (optional)
• PPS number (for verification purposes only)
• If you set up passkey sign-in (Face ID / Touch ID): the passkey's public key, a credential identifier, the device name you give it, and when it was last used. The biometric itself — your face or fingerprint — is checked entirely on your device and is never sent to or stored by HomePass

• Current address, city, county, and Eircode
• Reason for moving, number of occupants, pet information
• Property search preferences you choose to set: preferred locations (country, province, county, town, or Dublin postal district), property type and specifications (rooms, size, age, BER rating, land area), property features (heating, furnishings, parking, outdoor space, accessibility, alarm), and monthly rent budget
• Properties you save (“heart”) while browsing the marketplace — your saved list is visible only to you and is never shown to landlords or letting agents

• Employment status, employer name, job title, and contract type
• Annual gross income (self-reported, cross-checked against the income documents you upload)

• Copies of documents you upload for verification purposes, which may include:
  • Identity documents: Passport or photo ID (driving licence)
  • Employment documents: Payslips, Employment Detail Summaries and Statements of Liability (Revenue), employment reference letters, job offer letters, employment contracts, tax returns (Form 11 for self-employed), accountant's letters
  • Financial documents: Bank statements (Irish or foreign), investment statements, pension statements or letters
  • Visa/residency documents: Work visa, IRP card, or other documents confirming right to reside in Ireland
  • Education documents: Student enrolment letters, college or university certificates, student cards
  • Support documents: Guarantor letters and details, government welfare letters (DSP, HAP), social support documentation from home country
  • Tenancy documents: Previous landlord references, letting agent confirmations, property addresses and tenancy dates

• The number of children who would live with you, if you choose to provide it (a count only — we never collect names, ages, or any other details about children)
• If you use partner linking: the relationship type declared between you and a linked partner, the declared number of children you have together, link status and history, and your approvals or declines of joint household applications
• The email address of a person you invite as a renting partner. If they already hold a HomePass account, it is used only to deliver the invite. If they do not, we store only a cryptographic hash of the address (not the address itself) so the invite can be matched if they sign up; it is deleted when the invite expires or is declined

• Payment is processed by Stripe. We do not store your card details. We keep a record of each payment's amount, date, purpose, and status (shown to you under Account Settings → Payments), together with Stripe's reference for it.

• Your name, email address, contact details, and PPS number (the same identity foundation as tenants; your PPS number is never shown to anyone)
• For letting agencies and property managers: your business name, PSRA licence number (checked against the public PSRA register), business email address, approximate team size, years of experience, and optionally a CRO company number. We may confirm your account by contacting your business through its publicly listed contact details
• For landlords letting through a company: the company name and CRO number (checked against the public CRO register), and where you are not a listed director, a letter of authority
• Documents you upload to verify your identity and, for landlords, your ownership of the property: a government-issued identity document, proof of your PPS number, proof of address, and one proof of property ownership (for example a land folio, mortgage statement, Local Property Tax receipt, or RTB tenancy registration — you may redact financial figures, as we only need the name and property address)
• Details and photographs of properties you list. Listing photographs are publicly visible; we resize them and remove hidden metadata (such as embedded GPS location) on upload

• IP address, browser type, and device information
• Pages visited and actions taken on homepass.ie

• Any feedback or suggestions you submit voluntarily via our feedback form, including an optional email address

• When you sign up, log in, reset your password, ask us to resend a confirmation or reset email, or submit the feedback form, we use Cloudflare Turnstile to check that you are a person rather than an automated program. Cloudflare processes your IP address and basic browser signals for this purpose only, and does not use them to build an advertising profile of you
• When you submit the feedback form we also store a scrambled, one-way fingerprint of your IP address (never the address itself) for one hour, solely to stop automated flooding. It is automatically deleted after that hour and is never linked to the content of your message

Database and file storage. Your profile data and uploaded documents are stored securely on Supabase infrastructure hosted in the EU.

Payment processing. Stripe handles all card transactions. We receive payment confirmation only — no card data is passed to or stored by HomePass.

Transactional email delivery. Used to send employer verification emails and system notifications from hello@homepass.ie.

Student email verification. If you verify on the student pathway, we collect your college or university student email address and your institution's name, and we send a one-time verification code to that address (delivered through Resend). We store the address and the institution to display your verification status; the code itself is never stored in readable form.

Email hosting. Our hello@homepass.ie mailbox — where you reach us with questions, data-protection requests and other correspondence — is hosted by Titan. When you email us, your email address and the content of your message are processed and stored by Titan in order to deliver and hold that correspondence.

SMS phone verification. If you choose to verify your mobile number, your phone number is shared with Twilio to deliver a one-time verification code by text message and to check that the number is a genuine mobile. This is optional.

Website hosting and content delivery. Vercel serves the HomePass application and processes technical data such as your IP address and browser information in order to deliver the site securely.

Bot protection. When you sign up, log in, reset your password, ask us to resend a confirmation or reset email, or send us feedback, we use Cloudflare Turnstile to check that you are a person and not an automated program. It processes your IP address and basic browser signals for that check alone. Cloudflare does not use this data for advertising and does not track you across other websites.

AI-assisted ad import. If a property professional chooses to pre-fill a property listing by pasting an advertisement they have written, the pasted ad text is sent to Anthropic's Claude AI service to extract the property details. This is optional and only happens when the professional pastes an ad. Ad text describes a property and should not contain personal data. Anthropic does not use this data to train its AI models and retains it only for a limited period for abuse monitoring before deletion.

When you share your HomePass Passport link, the recipient can view the information on your profile. You control who receives this link. HomePass does not proactively share your profile with anyone. You can choose in your settings whether your Passport displays your name or only your Tenant ID.

There is one situation where a letting agent, rather than you, passes information on: if you apply for a property and the agent shortlists you, they can send the property's owner a secure link so the owner can give their opinion on the shortlist. The owner sees only your Anonymous HomePassport — your Tenant ID, your verification badges, the details you have chosen to show, and the message you sent with your application. While you are only shortlisted, they never see your name, photo, date of birth, phone number, email address, street address or documents. If you book a viewing of the property (including RSVP-ing to an open viewing), your name is shared with the letting agency and, where the agent manages the property for an owner, may be shown to that owner — because you are about to meet in person. Booking also tells the agency how many people you said are coming with you, so they know how many to expect at the door. Everything else — your photo, date of birth, contact details, street address and documents — stays hidden. The link expires after 14 days, the agent can withdraw it at any time, and every time it is opened is logged. We tell you this before you apply, on your Applications page, and again by email at the moment you are shortlisted — so you know your profile may be shown to the owner before it happens.

You have two separate passports, each with its own on/off switch. If you opt in to the Tenant Marketplace, verified property professionals see an anonymised search card containing your Tenant ID (for example, "T-4K2P9X"), your employment category, and your income range. From that card they can open your Anonymous HomePassport: your verified credentials — employment, verification badges, references, and any optional details you switch on (annual income is hidden by default) — with your identity structurally excluded. It can never display your name, photo, date of birth, phone number, email address, street address, or documents, regardless of your settings. (Booking a property viewing shares your name with the letting agency through the viewing booking itself — see "Landlords and letting agents" above — never through your Anonymous HomePassport.) Your Live HomePassport is the fuller passport available only through the personal link you choose to share with a specific landlord or agent: you control each field, with date of birth, phone number, and email address hidden by default, and your name and current address shown by default (you can switch your name off to show your Tenant ID instead, and switch your address off to hide it). The photo on your Live HomePassport is the one our team extracted from your verified identity document — never the profile picture you upload yourself, which is visible only to you. No photo is shown until your identity photo is verified, and if you switch your name off, the photo is hidden along with it. The number of children who would live with you is shown only if you separately turn on the "Show relationship and children" setting, which is off by default. Your verified documents are never part of either passport — they have their own separate link (your Live Documents) with its own on/off switch, so you can choose to share them later, on their own, with a specific professional. Professionals can contact you through HomePass messaging only if you allow it. Pausing the marketplace switch removes you from the marketplace entirely, switching off your Live HomePassport disables your shareable link, and switching off your Live Documents disables the documents link — each independently, at any time in your settings.

If you link with a renting partner, professionals see your listings displayed together as a household with a combined household income range. Your relationship and any children (your own children, or children you have together with a linked partner) are shown to professionals only if you opt in via the "Show relationship and children" setting — which is off by default — and shared relationship/children details for a linked pair appear only when both of you have opted in. Household display appears only while every linked member is verified and visible, and stops immediately if either of you unlinks, opts out, or leaves the marketplace.

A HomePass user you link with can see your first name, Tenant ID, verification status, and the relationship and children details you both agreed to — never your email address, income details, or documents. Members of a joint household application can see that you have approved or declined that application. Landlords never learn your identity through a partner's actions: each member individually decides whether to share their own Passport.

When you request employer verification, the email address you provide for your line manager or HR contact is used to send the verification request. We keep a record of that address and of when requests are sent, both to carry out and evidence the verification and to prevent the same contact being emailed repeatedly. It is retained for as long as your account is active and is deleted when you delete your account.

When you request a landlord reference, the name and contact details you provide for your previous landlord or letting agent are used to send them a single verification request. The reference outcome, together with any rating or comments they choose to provide about your tenancy, is stored as part of your verification record for as long as your account is active or the reference is shown on your Passport. Their contact details are not retained beyond what is needed to obtain and review the response. This information is provided to us by you about a third party; we use it only to carry out the reference check you requested.

Your profile data and uploaded documents are stored on EU-hosted infrastructure. Some of our processors (for example Stripe, Resend, Titan, Twilio, Anthropic, Vercel and Cloudflare) may process limited data outside the European Economic Area. Where a processor transfers personal data outside the EEA, that transfer is protected by an adequacy decision or by Standard Contractual Clauses approved by the European Commission. You can request details of the safeguards in place by contacting hello@homepass.ie.