Policy version 2026-08-28-v1. Controller identity, registered contact details, and jurisdiction-specific wording must be confirmed before production launch.
Information we handle
We process information you provide when creating and operating an Homexpo365 account, including identity, business profile, contact, membership, showroom, product, RFQ, VIP access, and saved-design information.
We also record security and operational information such as active sessions, sign-in events, delivery status, consent records, and the technical identifiers needed to protect the service.
How information is used
Information is used to authenticate accounts, review businesses, provide marketplace features, deliver RFQs, administer VIP access, process memberships, prevent abuse, support users, and maintain reliable commercial records.
- Account and security operations
- Supplier discovery and organization unlocks
- Quotation and private-catalog workflows
- Billing, fraud prevention, and financial reconciliation
- Service improvement and operational reporting
Your choices and controls
Account & Security lets you update your name, begin a verified email change, change your password, review sessions, sign out devices, download a machine-readable account export, and request account deletion.
You can also contact info@homexpo365.com for access, correction, deletion, restriction, or other privacy questions. Some requests may require identity verification.
Retention and deletion
We keep information only as long as needed for the stated purpose, account security, dispute handling, and applicable record-keeping obligations. The current operational schedule removes sent delivery records after 90 days, read notifications after 365 days, and authentication audit events after 180 days.
Financial evidence may be retained for up to 10 years. When immediate deletion is not appropriate, access is restricted and the information is kept only for the required purpose.
Security and updates
Homexpo365 uses scoped access controls, server-side authorization, protected sessions, audit records, restricted service credentials, and payment-provider isolation. No online system is risk-free, so users should maintain a unique password and review unfamiliar sessions.
We may update this notice as the platform or its legal obligations change. Material revisions will receive a new effective date and, when appropriate, an in-product notice.