Back

Privacy Policy

Last updated: June 16, 2026

This Privacy Policy explains how Hoven, a company incorporated in Hong Kong (“Hoven”, “we”, “us”, or “our”), collects, uses, discloses, and protects your personal data when you use the Hoven platform (“Platform”).


For users located within the European Economic Area (EEA), United Kingdom (UK), or Switzerland, this Privacy Policy has been designed to meet the requirements of the General Data Protection Regulation (GDPR) and its local equivalents.


1. Scope

This Privacy Policy applies to all users of the Platform, including:

  • Property seekers (“Users”): Individuals searching for residential properties.
  • Listing providers (“Providers”): Individual owners, landlords, real estate agents, agencies, co-living operators, or serviced apartment operators.


2. Lawful Bases for Processing 

If you are located in the EEA or UK, we rely on the following lawful bases under the GDPR to process your personal data:

  • Performance of a Contract: To register your account, manage your profile, process transactions, and provide the core matchmaking and lead-generation features of the Platform.
  • Legitimate Interests: To improve our AI algorithms, monitor platform security, prevent fraud, and handle general customer service requests, provided these interests do not override your fundamental privacy rights.
  • Compliance with Legal Obligations: To fulfill our regulatory, tax, accounting, or law enforcement duties in Hong Kong, Singapore, or other active jurisdictions.
  • Consent: Where you have explicitly agreed to receive direct marketing communications or allowed us to deploy non-essential cookies.


For users residing in jurisdictions outside the EEA/UK, our primary legal framework for processing your personal data relies on your explicit or deemed consent given at the time of account creation, or where processing is strictly necessary for the performance of our contract with you.


3. Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Account Information

  • Full name.
  • Email address.
  • Phone number.
  • Login credentials, user IDs, or secure tokens from third-party authentication providers.

3.2 Profile & Listing Information (Providers)

  • Company or agency name (if applicable).
  • Property listing details, including location, pricing, photographs, videos, and descriptions.

3.3 Usage Data

  • Your direct interactions with the Platform.
  • Search behaviors, filter configurations, and natural language property preferences.
  • Pages viewed, time spent on listings, and features accessed.

3.4 Device & Technical Data

  • IP address and localized geographic data.
  • Device type, unique device identifiers, and operating system version.
  • Browser type, language settings, and system diagnostic logs.

3.5 Communications

  • In-app messages and enquiry logs exchanged between Users and Providers.
  • Support tickets, feedback forms, and correspondence with our team.


4. AI Processing & Third-Party LLM Providers

The Platform utilizes third-party artificial intelligence and Large Language Model (LLM) service providers to process natural language search queries and generate property matching recommendations.

AI-generated recommendations are provided for informational purposes only and should not be relied upon as financial, investment, legal, tax, valuation, or real estate advice.

  • Real-Time Processing: User search prompts are processed in real time to yield dynamic listing recommendations.
  • Data Minimization: We only transmit the text prompt and non-identifiable context required to execute the search to our LLM API partners. We do not pass your direct contact details (like email or name) to third-party AI models.
  • No Model Training: We utilize enterprise-grade AI service providers that offer contractual protections limiting the use of customer data for public model training. Processing practices may vary depending on the provider and service used.
  • Retention: Conversation prompts may be stored or logged internally by Hoven to provide future property recommendations, improve recommendation accuracy, and diagnose technical errors. 


5. How We Use Personal Data

We process your personal data for the following specific purposes:

  • To establish and maintain your user account and verify your platform eligibility.
  • To operate our AI recommendation tool and match Users with relevant properties.
  • To deliver user enquiry or viewing request details (“Leads”) directly to Providers.
  • To provide future property recommendations, alerts, matching services, and related features.
  • To securely process billing, manage credit subscriptions, and prevent payment fraud.
  • To optimize, update, and test our system algorithms and platform performance.
  • To monitor usage patterns, protect against cybersecurity threats, and enforce our Terms of Service.
  • To send critical platform updates, system alerts, and customer support responses.
  • To meet local and international regulatory, legal, and operational obligations.


We may send marketing communications. Where required by applicable law, we will obtain your consent before sending direct marketing communications.

You may opt out of marketing communications at any time by using the unsubscribe link included in such communications or by contacting us.

Service-related communications may continue to be sent where necessary for the operation of your account or the Platform.


6. Disclosure & International Data Transfers

6.1 Data Disclosures

We may disclose personal data to:

Listing Providers

When you submit an enquiry or viewing request, we may share your information with the Provider responsible for the relevant listing.

Information shared may include:

·       name;

·       email address;

·       phone number;

·       move-in timeline;

·       enquiry details; and

·       information voluntarily submitted as part of the enquiry.

Providers are independently responsible for their own compliance with applicable privacy laws.


Service Providers

We may share information with third parties that help us operate the Platform, including but not limited to:

·       cloud hosting providers;

·       analytics providers;

·       authentication providers;

·       payment processors;

·       customer support tools;

·       email delivery providers; and

·       AI service providers.

Such providers may process information on our behalf.


Legal Requirements

We may disclose information where required by law or where reasonably necessary to:

·       comply with legal obligations;

·       respond to lawful requests;

·       enforce our Terms;

·       investigate fraud;

·       protect rights, safety, or property.


Corporate Transactions

We may transfer information as part of:

·       mergers;

·       acquisitions;

·       investments;

·       reorganizations;

·       asset sales; or

·       financing transactions.


6.2 Cross-Border Data Transfers

Your data may be transferred to and processed outside your jurisdiction.

We take reasonable steps to ensure that data is handled securely and in accordance with this Policy.

We store and process your information using secure cloud infrastructure hosted by our third-party sub-processors. Where data is transferred or stored outside of the UK or European Economic Area (EEA), we ensure appropriate legal safeguards are in place—including Standard Contractual Clauses (SCC) approved by the European Commission and the UK Information Commissioner's Office—to guarantee your data receives an equivalent level of protection.


7. Data Retention

We retain information only for as long as reasonably necessary to:

·       provide services;

·       comply with legal obligations;

·       resolve disputes;

·       enforce agreements; and

·       protect legitimate business interests.

Retention periods may vary depending on the nature of the information. We generally retain account and transaction records for as long as reasonably necessary to operate the Platform, comply with legal obligations, resolve disputes, and enforce agreements.


8. Data Security

We implement appropriate technical and organizational security measures to protect personal data from unauthorized access, loss, or alteration. However, no data transmission over the internet or storage system is completely secure, and we cannot guarantee absolute security.


9. Your Global Privacy Rights

Depending on your jurisdiction, you may possess some or all of the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request the correction of incomplete or inaccurate data.
  • Right to Erasure ("Right to be Forgotten"): Request the complete deletion of your data where it is no longer needed for a lawful purpose.
  • Right to Restrict Processing: Request that we temporarily suspend the processing of your data while you contest its accuracy or our lawful basis.
  • Right to Data Portability: Request an electronic, machine-readable export of your data to transfer to another service provider.
  • Right to Object: Object at any time to the processing of your data for direct marketing, profiling, or processing based on our legitimate interests.
  • Right to Withdraw Consent: Where processing is based on your explicit consent, you have the right to withdraw that consent at any time without retroactively affecting prior lawful processing.


Requests may be subject to identity verification before processing.

We do not charge an administrative fee for responding to standard right requests from EU/UK residents or other jurisdictions where prohibited by law. For non-EEA jurisdictions where permitted, a reasonable administrative fee may apply. We endeavor to respond to all validated requests within thirty (30) days.


10. Cookies & Tracking

We utilize cookies, web beacons, and similar tracking tokens to authenticate your sessions, remember your property search preferences, and gather platform performance analytics.

  • Essential Cookies: Strictly necessary to enable platform logins and core functions.
  • Non-Essential Cookies: Analytics and performance cookies will only be deployed on your device if you provide explicit opt-in consent
  • You may also modify or reject cookie collection directly via your personal browser settings at any time.


11. Third-Party Services

Our Platform may integrate with or link to third-party software applications. Hoven does not operate, control, or accept liability for the individual privacy policies, data collection methods, or safety protocols of third-party platforms. You should review their standalone privacy statements independently.


12. Children

The Platform is engineered exclusively for adults and is not intended for individuals under eighteen (18) years of age. We do not knowingly collect, log, or maintain personal data from minors. If we identify that a minor has provided data, it will be deleted immediately.


13. Changes to This Policy

We reserve the right to modify, amend, or update this Privacy Policy at any time to reflect software updates or regulatory changes. Continued use of the platform following an update constitutes your acknowledgment of the revised provisions.


14. Contact & Regulatory Grievances

For access requests, rectification updates, data deletion demands, or general privacy-related inquiries, contact our team:

  • Email: team@hoven.io
  • Data Controller: Hoven Technologies Limited (Hong Kong)


Complaints Procedure:

In accordance with applicable data protection laws, you have the right to lodge a formal data protection complaint directly with Hoven. We will formally acknowledge your complaint within 30 days of receipt and provide a comprehensive resolution without undue delay.


EEA / UK Regional Disclosures

If you are an EEA or UK resident and feel our direct resolution is insufficient, you retain the legal right to escalate your grievance by lodging a formal complaint with your local European Supervisory Authority (Data Protection Authority) or the UK Information Commissioner’s Office (ICO).


US Regional Disclosures

Hoven does not sell personal information to data brokers or unrelated third parties.

When a User submits an enquiry regarding a property listing, Hoven shares relevant information with the Provider responsible for that listing solely for the purpose of facilitating the requested property enquiry and related communications.


Asia-Pacific (APAC) Regional Disclosures

Obligatory vs. Voluntary Data: You can visit our Platform and search or browse property listings anonymously without providing any personal data. Providing your account registration data (such as name and email) is strictly voluntary while browsing, but becomes obligatory only if and when you choose to submit a property viewing request or connect with a listing provider through the Platform. If you choose not to provide this mandatory information at that stage, we will be unable to process your viewing request or connect you with the respective listing provider. Providing additional information remains entirely voluntary.


Designated Data Protection Officer: Hoven has designated a Data Protection Officer (DPO). You may contact our DPO regarding any consent withdrawals, data access requests, or local privacy questions by emailing team@hoven.ai (please include "Attn: Data Protection Officer" in your subject line).


International Data Declarations: Your data is primarily collected by our entity in Hong Kong, and is securely processed on backend cloud infrastructure located in the United States. We ensure that our infrastructure partners maintain strict technical and organizational safety measures that meet or exceed the requirements of the Australian Privacy Principles (APPs) and the Japanese Act on the Protection of Personal Information (APPI).


Local Regulatory Grievances: If our team cannot resolve your privacy concern, you retain the right to lodge a complaint with your local regulatory authority:

Hong Kong: Office of the Privacy Commissioner for Personal Data (PCPD)

Singapore: Personal Data Protection Commission (PDPC)  

Australia: Office of the Australian Information Commissioner (OAIC)  

Japan: Personal Information Protection Commission (PPC)