Privacy Policy

Haus Arena LLC operates Haus Arena and Haus Arena Pro, including hausarena.com, pro.hausarena.com, ops.hausarena.com, related applications, marketplace tools, support systems, and communications channels.

This Privacy Policy applies to homeowners, service professionals, employees, visitors, and other users of the platform.

We collect account and profile information such as name, email address, phone number, role, password or authentication data, profile preferences, saved properties, business details, service areas, licensing or verification materials you submit, and support messages.

We collect marketplace and workflow information such as quote requests, leads, messages, reviews, ratings, public profile content, promotions, business media, availability, lead budget settings, subscription tier, billing cycle, wallet balance, auto-refill settings, and operational audit records.

We collect technical and usage information such as device and browser details, IP address or IP hash, user agent, referrer, page views, feature events, diagnostics, crash reports, and security logs.

We collect communications information when you contact us or other users through email, SMS, voice, chat, in-app messaging, support forms, or assistant workflows. Calls may be recorded after a consent disclosure for quality, trust and safety, and dispute review.

We do not intentionally collect full payment card numbers through our application. Payment card processing and billing checkout are handled by Stripe or another payment processor, subject to that provider's own terms and privacy notices.

If you choose Google Sign-In, Google and Firebase Authentication provide identity information such as your Google account identifier, email address, email-verification status and, when available, name and profile-picture URL. We use authentication tokens to verify that you control that identity and establish a Haus Arena session. We do not receive your Google password. Our Google sign-in integration does not request access to your Gmail messages, Google Drive files, Calendar or contacts.

We use this information to create or locate your account, provide sign-in and account recovery, populate relevant account details, secure sessions and operate the features you request. Client and Pro accounts have separate roles and access controls even when you use the same Google email address. Signing into one does not authorize access to another user’s account.

Google identity information is processed in our Firebase/Google Cloud authentication and application infrastructure. Relevant account details may also be processed by providers supporting the features you use: for example, an email provider delivering an account message or Stripe managing a Pro billing account. Public profile details or information you include in a service request may be visible to the users you interact with as explained below. We do not sell Google sign-in data or use Google authentication tokens for advertising.

Where Facebook or Sign in with Apple is offered, we similarly receive the identity identifier and the basic profile or email information that the provider makes available with your authorization. Apple may supply a private relay email address and may provide your name only at the initial authorization. We do not receive your Facebook or Apple password. Linking a provider to an existing account requires proof of account ownership.

You can disconnect Haus Arena using your Google Account’s third-party connections settings, Facebook’s Apps and Websites settings, or Apple’s Sign in with Apple settings. Disconnecting a provider does not itself delete records already held by Haus Arena, cancel a subscription or guarantee that another existing sign-in method is removed. Use account settings or contact support to request account deletion; establish another supported sign-in method first if you want to keep using the account.

We receive information directly from you, from people you communicate or transact with, from your sign-in provider, from payment and communications providers reporting transaction or delivery status, and from your use of the service. Professional documents and business information may be reviewed by authorized operations staff.

Location information includes addresses and service areas you enter, place details returned by mapping services, approximate location inferred from an IP address, and device location if you choose a feature that requests it and grant permission. These help localize search and match a project to a professional’s coverage. A suggested location is not proof of your residence or a professional’s service eligibility.

Mobile and browser features may request notification, photo, camera, microphone or location permission when available and needed for the feature you select. Push delivery uses a device registration token associated with your account and session. You can manage permissions in device or browser settings; denying an optional permission may limit that feature without making unrelated account functions unavailable. We do not describe permissions as granted merely because an app is installed.

We use information to create and secure accounts, authenticate sessions, operate marketplace matching, process leads and quote workflows, display public professional profiles, enable messaging, provide support, process billing, maintain subscriptions, run auto-refill settings, and administer referrals or promotions.

If you use phone number sign-in or verification, our authentication providers may process the phone number and verification metadata to send codes, confirm access, and help prevent spam, fraud, and abuse.

We use information to prevent fraud, abuse, scraping, spam, unauthorized access, payment misuse, and other activity that could harm users, service professionals, employees, or platform integrity.

We use analytics and diagnostic information to measure feature adoption, reliability, conversion quality, support load, and platform performance. Optional analytics and marketing technologies are controlled through your privacy choices.

We may use contact information to send transactional, security, support, lead, quote, billing, account, and service-related messages. We send marketing updates only where permitted and subject to your preferences and opt-out rights.

We use essential cookies, local storage, and similar technologies for sign-in, security, session continuity, fraud prevention, preferences, and core product functionality.

With your permission, we may use analytics or marketing technologies such as Google Analytics, Google consent mode, Google Ads-related signals, and similar measurement tools. You can accept, reject, or customize optional cookies through the privacy choices banner.

Blocking or clearing essential storage may prevent parts of the platform from working correctly, including authentication, session persistence, fraud checks, and preference storage.

We share information with service providers and processors that help us host, authenticate, secure, analyze, support, communicate, map, bill, and operate the platform, including cloud infrastructure, Firebase or Google services, Google Analytics, Google Maps or Places, Stripe, messaging and email providers, Twilio or voice providers, MSG91, OpenAI, error monitoring, and similar vendors.

We may share relevant profile, lead, quote, message, review, contact, and service-area information between homeowners and service professionals when needed to request services, respond to leads, communicate, complete transactions, resolve disputes, or operate marketplace features.

We may disclose information to comply with law, respond to lawful requests, enforce policies, protect rights, investigate security incidents, prevent abuse, complete corporate transactions, or protect users and the public.

Published Pro profiles, business descriptions, selected contact details, services, coverage, galleries, promotions, reviews and displayed credential information can be viewed by visitors and indexed or copied by search engines and other people. Only publish information you have authority to make public. A private verification document is not intended to become a public document solely because an operator reviews it; the credential type, status, dates or number selected for display may be published.

Submitting a quote request shares its relevant project details, contact information, location and any attached content with the selected or matched professionals as part of delivering that request. Messages and estimates are available to the participants and to authorized personnel where needed for support, safety, complaints or dispute review. Other participants may retain their own copies.

Deleting a conversation from your inbox removes it from your view; it is not a request to erase the other participant’s conversation or our safety and audit records. Blocking another user restricts supported new-message actions but does not erase prior messages, unwind a project or prevent contact outside Haus Arena. Use the separate account-deletion or privacy-request process to request broader data handling.

When you choose an AI chat or voice feature, your prompts, relevant conversation context and information needed to answer or carry out the requested feature may be sent to an AI or communications provider, including OpenAI and Twilio. Avoid including passwords, payment-card details, government identification numbers or unrelated sensitive information in prompts or messages.

Calls made through a recorded-call feature use the recording disclosures presented in that flow. Audio, transcripts, summaries and related call metadata may be processed for the requested conversation, support, quality, safety and dispute handling. Ordinary browsing does not by itself authorize microphone access or call recording. AI output can be inaccurate; verify important information with the professional or our support team.

Operational matching and fraud controls use information such as service, location, account state and transaction or referral signals. These controls can limit delivery or flag activity for review. Contact support if you believe a result, restriction or account decision is incorrect.

Account and service messages can include sign-in links, security notices, leads, messages, subscription updates and support responses. Optional marketing consent is separate from using Google, Facebook or Apple to sign in. Where consent is required for SMS or promotional messages, providing a phone number or accepting these policies alone does not supply that consent.

When an SMS program is offered, its signup disclosure explains the messages you elect to receive. Message frequency varies with your activity, and message and data rates may apply. Follow the sender’s STOP instructions to opt out and HELP instructions for assistance, or contact support@hausarena.com. Carriers and delivery providers may delay or fail to deliver a message. Marketing SMS consent is not a condition of purchase.

We do not share mobile numbers or SMS opt-in and consent records with third parties or affiliates for their own marketing. Communications providers may process the information necessary to deliver and administer the messages you request. Any permission to share other categories of information in this policy does not authorize selling or distributing SMS consent for marketing.

You can manage available in-app notification preferences and turn device push permissions off in system settings. A push notice may display on a locked screen depending on your settings. Email marketing opt-out does not remove essential account notices. An SMS opt-out applies to that SMS program, including its service alerts; it is not overridden by our description of transactional messages.

You can update account, contact, communication, notification, public profile, business, lead, and billing settings through the application where available or by contacting support.

If you delete your account through the product, we remove login access, delete or revoke authentication credentials where technically available, remove the account from active services, and may retain limited profile, quote, lead, message, review, media, billing, support, security, audit, and dispute-related records as reasonably needed for legal, civil dispute, fraud prevention, tax, accounting, chargeback, safety, and platform integrity purposes.

You can unsubscribe from marketing email through unsubscribe controls where provided and can reply STOP or use listed opt-out instructions for SMS programs when applicable. Transactional, security, billing, and service messages may still be sent where permitted.

Depending on where you live, you may have rights to request access, deletion, correction, portability, restriction, objection, or information about how your personal information is used and disclosed. California residents may also have rights under the CCPA/CPRA, including rights to know, delete, correct, opt out of certain sale or sharing, and limit certain uses of sensitive personal information where those rights apply.

Residents of the European Economic Area, United Kingdom, or Switzerland may have GDPR-style rights and may contact us to exercise those rights. We process data under legal bases such as contract performance, consent, legitimate interests, legal obligations, and protection from fraud or abuse.

We do not knowingly sell personal information for money. If our use of advertising or analytics technologies is treated as a sale or sharing under applicable law, we will honor applicable opt-out rights through available privacy controls.

We retain information for as long as reasonably needed to operate the service, maintain accounts, provide support, keep billing and tax records, resolve disputes, enforce agreements, prevent fraud, and comply with legal obligations.

Account deletion does not automatically erase retained records. We may retain limited data after deletion where reasonably necessary for civil disputes, fraud and abuse investigations, payment disputes, chargebacks, tax or accounting obligations, legal claims, regulatory compliance, safety, trust and security, and enforcement of platform terms.

We use administrative, technical, and organizational safeguards designed to protect personal information. No internet or storage system can be guaranteed perfectly secure.

We are based in the United States. If you access the platform from outside the United States, your information may be processed in the United States and other countries where our service providers operate.

For access, correction, portability, deletion, objection or opt-out requests, contact support@hausarena.com or use the controls at /legal/privacy-choices and /legal/account-deletion. Identify whether your request concerns Client, Pro or both accounts. Do not send a password, one-time sign-in link or full payment-card number. We may ask for information reasonably necessary to verify your identity and authority before disclosing or changing account information.

Where applicable law provides additional rights, you may use an authorized agent with evidence of permission, appeal a refusal through the same support channel, or complain to the relevant privacy regulator. We evaluate requests and applicable exceptions under the law that applies to the request. We do not penalize you for exercising a protected privacy right. We do not promise that every state or international privacy law applies to every account.

Retention depends on the record’s purpose: active identity and session records support access and security; project and conversation records support participant history and dispute handling; invoices and wallet ledgers support accounting, reconciliation and fraud prevention; consent and audit records support accountability. Deletion may leave restricted records required or permitted for these purposes and copies retained in backups until their ordinary lifecycle completes. Removing the active account does not automatically erase another participant’s records.

Authentication and account information is protected through measures including HTTPS, authenticated API access, tenant and role restrictions, session revocation and restricted operational access. These measures reduce risk but cannot eliminate it. We do not promise a specific certification, audit schedule or deletion deadline that has not been established for the service.

The platform is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

We may update this Privacy Policy from time to time. Material changes will be posted through the platform or otherwise communicated where required.