Privacy Policy

Last updated: July 6, 2026

1. Information We Collect

We collect information you provide directly, including your name, email address, and profile picture through Google OAuth authentication or magic-link sign-in. We also collect inspection data, photos, and reports you create using our service.

As part of creating inspection reports, you may enter personally identifiable information (PII) about third parties — such as client names, email addresses, phone numbers, and agent contact details. This data is stored on your behalf as described in Section 4 below.

When a client signs an inspection report using Eave's type-signature feature, we collect the client's typed name, IP address, and a SHA-256 hash of the PDF at the time of signing.

We may also automatically collect usage data such as log data, device information, browser type, and pages visited to help us operate and improve the service.

2. How We Use Your Information

We use your information to:

  • Provide and maintain the Eave service
  • Authenticate your identity and manage your account
  • Generate and store inspection reports
  • Store client and contact information you enter on your behalf
  • Send notifications related to your account and organization
  • Process subscription payments via Stripe
  • Improve and optimize our service

3. Data Storage

All data — including any client PII you enter into the service — is stored securely using Cloudflare's infrastructure behind authentication. Access to your data requires a valid, authenticated session. Photos and files are stored in Cloudflare R2 storage with random path suffixes to prevent enumeration. We implement industry-standard security measures to protect your information.

Because Cloudflare operates a global network, your data may be processed and stored in data centers located outside your country of residence. By using the service, you consent to these international data transfers.

4. Data Processing on Behalf of Inspectors

Eave acts as a data processor on behalf of home inspectors. When you enter information about your clients or other third parties (names, email addresses, phone numbers, etc.), you are the data controller for that information and are responsible for ensuring you have appropriate authorization to store that data in a third-party service.

The data you enter about clients is not protected health information (PHI) — Eave is not a healthcare service and no Business Associate Agreement (BAA) is required or provided.

All client data you enter is accessible only to you and, if you belong to an organization, to other members of that organization. We do not use client PII you enter for any purpose other than providing the service to you.

5. Data Retention

We retain your personal data for as long as your account is active and as needed to provide the service. Eave provides a self-service "Delete Account" option (Settings → Account → Profile) that permanently deletes your profile information, templates, and any non-published inspections, typically within 30 days, except where retention is required by law.

Published inspection reports are the exception. Once an inspection report has been published and shared with a client, deleting your account does not remove that report. Home inspection reports commonly need to be referenced by inspectors, clients, agents, and their insurers for years after an inspection — for example, in connection with a real estate transaction dispute or a professional liability claim. To support that, a published report (including the inspector contact information and photos it contains, and any client information entered on it) is retained for up to 7 years after the inspector's account is deleted, after which it is permanently and automatically purged. This retention applies equally whether you are the inspector who created the report or a client who received one.

6. Data Sharing

We do not sell your personal information. Your inspection data is only shared with members of your organization if you belong to one. We use the following third-party service providers who may receive limited data necessary to perform their function:

  • Google — authentication provider; your Google account information is used solely for sign-in
  • Stripe — payment processor; receives billing information for subscription management; no inspection content is shared
  • Resend — email delivery provider; receives email addresses for sending transactional notifications; no inspection content is shared
  • Cloudflare — infrastructure provider; stores and serves all application data and files

7. Your Rights

You have the right to:

  • Access and export your personal data — you can download your profile, contacts, inspections, and inspection answers as CSV files at any time from Settings → Account → Profile ("Export your data")
  • Request correction of inaccurate data
  • Request deletion of your account and data
  • Download your published inspection reports as PDFs from each inspection

8. Cookies and Tracking

We use essential session cookies for authentication and session management. These cookies typically expire when your browser session ends or after a short period of inactivity. We do not use third-party tracking cookies or analytics that track you across other websites.

9. Children's Privacy

Eave is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

10. Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify affected users in a timely manner via email and take appropriate steps to mitigate any harm.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page.

12. Contact

If you have questions about this Privacy Policy, please contact us at support@eaveinspect.com.