Privacy policy

1. Who we are

Homono is rental management software published by ArtFinder SRL, Rue Jules Lejeune 38, 1050 Ixelles, Belgium, enterprise number BE 0465.541.602. For any question about your data, write to hello@homono.be.

2. Two different roles

ArtFinder SRL processes personal data in two capacities, and this distinction determines whom you should contact.

ArtFinder SRL is the controller of the data needed to run your Homono account and our business relationship: your e-mail address, your password (stored as a hash that cannot be read back), your language, the workspaces you belong to, and the requests sent through our website. Your account belongs to you and follows you from one workspace to another: a tenant who moves keeps the same account.

ArtFinder SRL is a processor for everything a manager or landlord enters in their workspace: properties, leases, tenants, guarantors, rents, payments, meter readings, maintenance requests, documents and messages. The controller is then that manager or landlord. ArtFinder SRL processes this data only on their instructions, under the data processing agreement it concludes with each client.

If you are a tenant or guarantor and your question concerns your lease, your payments or your documents, please contact your manager first: they decide on this data. We will help them answer you.

3. What we process as controller, and why

• Managing your account and signing you in — performance of the contract or terms of use.
• Keeping the service secure (technical logs, abuse prevention) — legitimate interest in protecting the service and its users.
• Answering requests sent through our website — pre-contractual measures and legitimate interest. These requests are deleted automatically 24 months after the last exchange.
• Invoicing our clients and keeping our accounts — legal obligation.
• Keeping proof of the texts accepted — which text, which version, when, from which IP address and which browser — legitimate interest in being able to show the agreement given.

We do not sell any data and do not use it for advertising.

4. The assistant and artificial intelligence

Homono uses an artificial intelligence model provided by Anthropic, in particular for:

• the conversational assistants, which answer tenants and managers;
• drafting letters and preparing the lease with the parties;
• the online help;
• reading documents uploaded to the application, including identity documents, bank documents, insurance contracts and invoices;
• reading meter readings from a photo;
• qualifying maintenance requests.

To answer, the model receives the question asked and the context needed — for example the lease, the payment status or the history of a maintenance request —, together with any documents or photos submitted.

• Country of processing: United States and other countries outside the European Economic Area.
• Safeguard: European Commission standard contractual clauses. API data deleted within 30 days and, by default, not used for training.

What Homono keeps of these exchanges: conversations with the tenants' assistant are stored in the workspace concerned, for as long as that workspace exists; the conversation with the managers' assistant stays in the browser of the person using it; the drafting assistants keep nothing once the answer is given.

The assistant's answers are an aid: decisions that commit a lease or a payment remain taken by a person.

5. Where the data goes

Homono relies on providers. The complete list, with what each receives, the country of processing and the applicable safeguard, is published on the Subprocessors page. That list is dated and authoritative; clients are notified before any provider is added or replaced.

In summary:

• database — Servers and database in the Netherlands; Railway states that its primary processing operations take place in the United States.
• documents and photos — Storage placed in Western Europe; Cloudflare is a US company.
• artificial intelligence — see section 4;
• the other services — messaging, text messages, banking, payment, signature, address validation, notifications — are configured by the Homono team at a client's request. E-mails are sent through a service shared by the whole platform.

Transfers outside the European Economic Area rely, provider by provider, on the safeguard stated on the Subprocessors page.

6. How long

• Account: until it is deleted, which you can request at any time. The proof of the texts you accepted disappears with it.
• Data processing agreement accepted on behalf of a workspace: the proof — your name, your email address, the date, the version, the IP address and the browser — is kept for as long as that workspace exists, even if your account is deleted in the meantime: it evidences the client's commitment.
• Requests sent through the website: 24 months after the last exchange, then deleted automatically.
• Data of a client workspace, including conversations with the tenants' assistant: for the term of the contract, then deleted at the client's request, subject to retention periods required by law, in particular for accounting.
• Data entrusted to Anthropic: see section 4.
• Backups: the database is copied every day; each copy is kept for a limited time, then erased. Deleted data therefore remains in backups for a few days.
• Test copy: a copy of production data is used, at the same European host and with the same protections, to check new versions before they go live. It is refreshed from production, and data deleted in production may remain in it until the next refresh.

7. Security

The measures in place today:

• all communications are encrypted (HTTPS enforced);
• passwords are stored as a hash that cannot be read back;
• credentials for connected services are encrypted in the database;
• each client workspace is isolated: the application, and the database as a second barrier, prevent one workspace from reading another's data;
• the database is backed up every day, to separate storage;
• the browser is instructed not to load any resource from outside Homono and its storage.

No system is infallible. In the event of a data breach, we notify the persons concerned and the Data Protection Authority as required by law and, where we act as processor, the client acting as controller without undue delay.

8. Access by the Homono team

To assist a client, fix a problem or configure a service, an authorised member of the Homono team may open a workspace and act on behalf of a user. This access is reserved for platform operators and is used only for these purposes.

9. Cookies and local storage

Homono uses only strictly necessary cookies: those that keep your session, remember the active workspace and profile, secure the connection to a third-party service you authorise, and allow the Homono team to assist a user (section 8). The browser also stores locally items needed for the service to work: language, theme, recently visited pages, some display settings and, for managers, the ongoing conversation with the assistant. These do not require consent and stay on your device.

No advertising cookies and no third-party resources are loaded. On the public pages of the homono.be website (and never in the application), Homono counts visits with Umami, an audience measurement tool hosted on its own servers in the Netherlands: no cookies, nothing stored on your device and your IP address is not kept. It only records aggregated data — page viewed, referring site, language, country, device type — which cannot identify you.

10. Your rights

You may request access to your data, its rectification or erasure, the restriction of its processing, object to processing based on legitimate interest, and receive your data in a structured format. Write to hello@homono.be; we answer within one month.

For data entered by your manager (section 2), please contact them: we will help them answer.

You may also lodge a complaint with the Data Protection Authority, Rue de la Presse 35, 1000 Brussels — dataprotectionauthority.be.

11. Changes

This policy may change as the service evolves. The date at the top of the page shows the version in force. Significant changes are announced to users before they take effect.