Privacy Policy & Data Processing Notice

1. Overview & Service Purpose

HomeAlert Ireland operates an automated alert service that monitors official public Irish local authority portals (including Dublin City Council, Fingal County Council, South Dublin County Council, Dún Laoghaire–Rathdown County Council, and the Land Development Agency) for Affordable Purchase and Cost Rental scheme announcements.

HomeAlert Ireland is an independent monitoring service and is not affiliated with, endorsed by, or a representative of any local authority or government agency.

2. Personal Data We Collect & Process

• Account Identity: Your registered email address and a cryptographically salted password hash (bcrypt). We do not store plaintext passwords.
• Saved-Search Alert Preferences: Your configured search criteria (such as local authority / county filters, scheme types, price constraints, and keywords) used to match newly published housing schemes.
• Notification & Delivery Records: Transactional logs of alert emails dispatched to your address via Resend, including delivery status webhooks for delivery verification and bounce handling.

3. Processing Architecture & Service Infrastructure

We process personal data strictly to deliver requested housing alert notifications and maintain application security:

• Application Hosting: Hosted on Vercel serverless infrastructure.
• Database Storage: Primary relational database hosted on Neon PostgreSQL located in the European Union (Frankfurt, Germany / eu-central-1 region).
• Transactional Email: Alert notifications are sent via Resend from alerts@homealert.ie. This address is an automated outbound notification sender only and does not accept inbound correspondence.
• Abuse Prevention & Rate Limiting: Distributed rate limiting is managed via Upstash Redis. Rate-limit keys utilize one-way cryptographic SHA-256 hashes of client identifiers to safeguard privacy.
• Scheduled Ingestion: Background portal scraping and synchronization jobs are orchestrated via Trigger.dev. Scraper tasks operate solely on public local authority websites and do not access, process, or store user personal data.

4. Cookies & Authentication

HomeAlert Ireland uses strictly necessary authentication, session, and security cookies (such as Auth.js session tokens and anti-CSRF protection tokens) required for secure login and account navigation. We do not use third-party advertising, analytics tracking, or behavioral profiling cookies.

5. User Data Rights & Account Controls

You maintain direct, self-service control over your personal data at all times:

• Alert Delivery Controls: You can pause or resume email notifications for any individual saved search at any time directly on the Saved Searches page.
• Right to Data Portability (Export): You can instantly download a machine-readable JSON copy of your profile and saved search criteria from the Saved Searches page.
• Right to Erasure (Account Deletion): You can permanently delete your account, authentication credentials, and all associated saved searches from the Saved Searches page. This permanently deletes your records from our database.