Privacy Policy

Account details. Your name and email address, from the sign-in provider you choose (Sign in with Apple, Google, or an email code). If you use Sign in with Apple and choose to hide your email, we only ever receive Apple's private relay address.

Your search brief. The neighborhoods, budget, bedroom count, must-haves, deal-breakers, and free-text notes you enter. This is the core of the product and is written by you.

Your activity on listings. Which listings you save, pass on, or open; the stage you move a saved listing to; and any notes you attach to it. Passing on a listing may record the reason you picked.

We do not collect your location, your contacts, your photos, or any device identifier for advertising. There is no advertising SDK and no third-party analytics or tracking SDK in the app.

To match listings to your brief, to keep your saved pipeline in sync across the web app and iOS, to send you the daily digest if you enable it, and to stop showing you listings you have already handled.

We do not sell your data. We do not share it with advertisers. We do not use it to build a profile of you for anyone else's purposes.

We use a small number of service providers, each of which processes data only to run padscanner:

• Clerk — authentication. Holds your sign-in identity and email.
• Convex — the application database. Holds your brief, saved listings, and activity.
• Anthropic — scores listings against your brief. Receives the listing text and your brief; does not receive your name or email.
• Resend — sends the daily digest and invitation emails. Receives your email address.
• Vercel — hosts the web app.

Scoring is done by a third-party AI service. Before padscanner sends anything on your behalf, the app shows you this disclosure and asks you to agree.

What we send. Your search brief — the neighborhoods, budget, bedroom count, must-haves, nice-to-haves, deal-breakers, and free-text notes you write — together with the details of the listing being scored (its address, price, size, amenities, and description).

Who we send it to. The AI providers that power scoring, currently Anthropic (Claude). If we change or add a provider, we will update this policy. We only use providers that are contractually bound to protect your data to the same standard described here.

What we never send. Your name, your email address, and your account identifiers are never included. The provider receives your brief and the listing text, not your identity.

How it is used. Only to return a fit score, the reasons behind it, and a short summary that we show back to you. Under our agreement with the provider, your data is not used to train their models, and it is not sold or shared for advertising.

If you connect your own AI app. Padscanner supports the Model Context Protocol (MCP), which lets you optionally connect an AI app you already use so it can read your padscanner data on your request. This is off unless you set it up, you can disconnect it at any time, and once you connect it, that app's own privacy policy governs what it does with what it reads.

Listing details and photographs shown in padscanner originate from the public listing pages of third-party sources such as StreetEasy and Compass, and remain the property of their respective owners. Every listing links to its original source page.

We keep your data while your account exists. You can delete your account and everything attached to it at any time by emailing padscanner@hypersocial.ai. We will confirm deletion within 30 days.

You can also ask us for a copy of the data we hold about you at the same address.

Padscanner is not directed at children under 13, and we do not knowingly collect their data.

If we change this policy in a way that materially affects what we collect or who processes it, we will update the date at the top and notify signed-in users by email.

Questions, requests, or complaints: padscanner@hypersocial.ai.