Public privacy notice
Your data is household business.
Homeass is a pre-release household finance product operated by Mastrowcorp in Australia. This notice explains what the public website collects now and how the Homeass service will handle personal information and Consumer Data Right (CDR) data.
1 / This website and the waiting list
If you join the waiting list, we collect the email address you submit so we can record your interest and contact you about access. We also process ordinary request information needed to secure and operate the website, such as an IP address and request time.
Waiting-list email addresses are handled by Resend, our email delivery provider. The marketing website is hosted by Vercel. This website does not connect to bank accounts, collect CDR data, use advertising trackers, or sell personal information.
2 / The Homeass service
When the service is available, the information needed to operate it may include:
- account details such as name, email address, and authentication records;
- household documents, preferences, and facts a person chooses to provide; and
- CDR account details, balances, and posted transactions obtained through our accredited principal after express, informed consent.
Categories, summaries, budgets, insights, and other information derived from CDR data are protected to the same standard as the source data.
3 / Consent and control
CDR data is collected and used only under a current consent, for the purposes and duration presented during the accredited principal’s consent process. A person can withdraw consent through the consent dashboard or by contacting us. Withdrawal stops collection and triggers deletion or de-identification under our retention and deletion policy.
4 / Use, sharing, and location
Service data is used only to provide Homeass to the consenting person’s household. Invited household members can see shared household views; other people cannot. We do not sell service data or derived insights, and we do not disclose them for marketing or advertising.
Homeass service data is stored and processed in Australia in AWS’s Sydney region. CDR data is not transferred overseas. Any AI processing of CDR data will occur only within our Australian AWS environment and only after written approval from our accredited principal.
5 / Security and retention
Homeass uses controls including multi-factor protected administration, encryption in transit and at rest, network segmentation, household-level data isolation, audit logging, and redacted application logs. Test environments use synthetic data only.
Service data is retained only while there is a current consent and a service need. On withdrawal, expiry, or a valid deletion request, it is deleted or de-identified, including derived data, within the timeframes in our retention and deletion policy.
6 / Access, correction, deletion, and complaints
You can ask for access to personal information we hold about you, request a copy, correction, or deletion, or ask to leave the waiting list by emailing contact@mastrowcorp.com. We respond to access and privacy requests within 30 days at no charge. Privacy complaints are acknowledged within five business days and we aim to resolve them within 30 days.
If you are not satisfied, you may also complain to our accredited principal once named in the consent flow, or to the Office of the Australian Information Commissioner on 1300 363 992.