Privacy and client data

Last updated: 8 November 2026

HoodEx is run by Whitestone Management Group, Agiou Konstantinou 2, Greece. For any question about privacy or your clients' data, email privacy@hoodex.app. This page is written for relocation firms and their consultants, and for anyone using HoodEx for their own move.

The short version

  • We never keep the email you paste. HoodEx reads it to fill in the search, shows you what it found, and discards it. Only the search you confirm is saved.
  • You can work without names. HoodEx needs the move details, not who is moving. Take out names, phone numbers and email addresses before you paste.
  • You can delete a client at any time, and you can ask us to delete everything we hold about you.
  • We don't sell your data or your clients' data.

What we keep, and why

For consultants, firms and anyone with an account:

WhatWhy
Your account: email address and sign-in detailsSo you can sign in
Your firm profile: firm name, your name, logo, colour, contact email and phoneTo brand the pages and packs you send
For each client search you save: the label you give it, the destination city, the client's priorities (for example budget, household, parks, schools nearby), the places they will travel to (such as an office or school address), your notes, your changes to the shortlist and an arrival date if you add oneSo you can reopen, edit and share the shortlist
The Match chat conversation for a saved search, if you used the chatSo you can see what was said when you return. Only you can read it; it never appears on the page your client sees.
Addresses you check and their reports, and your conversations with the HoodEx assistantSo you can come back to them
When your client first opened the page you sentSo you can see that it was opened
PurchasesPayments are handled by Stripe. We keep the purchase record, never card details.

What we never keep: the email you paste into "Paste the brief". It is sent to our AI provider to be read, then discarded. It is not written to our database or our logs.

If you search without an account, saved searches are linked to a random ID stored in your browser, not to your name.

If you are a firm's client

You don't need an account. When you open the page your consultant sends, we save the time it was first opened, so they can see it was opened. Like any visitor, your visit is also counted by our visit statistics tools (see below). Everything else on the page is what your consultant saved.

Your consultant's firm decides what is entered about you. For questions about that, please contact the firm first; we will help them answer.

Who else processes the data

We use these providers to run HoodEx. Each receives only what it needs for its job.

ProviderWhat it does for usWhat it receives
ReplitHosts the appEverything stored by HoodEx
Neon (through Replit)DatabaseEverything stored by HoodEx
SupabaseSign-inYour email address and sign-in details
Anthropic (Claude)Reads pasted briefs and runs the Match chatThe pasted email, or the chat messages, while they are being read
Moonshot AI (Kimi)The HoodEx assistant and the text of address reportsThe questions asked and the report's data
OpenAISome report text and search featuresReport data, not pasted briefs
MapboxFinds the addresses you type on the mapThe address text
HoodEx analysis serviceRanks a city's areas against the client's prioritiesThe priorities and the map points of the places they will travel to, not names
ResendSends our emailsYour email address and the email's content
StripePaymentsWhat you buy; card details go to Stripe only
Google Analytics and PostHogVisit statisticsPages visited and device information. The brief box is masked and never recorded.
Google Ads, OpenAI Ads and MetricoolMeasure whether our adverts and social posts lead to visits and sign-upsPages visited, device information and whether you signed up
SearchAtlasImproves how our pages appear in search enginesPages visited and device information

Cookies and browser storage

We and the providers above use cookies and similar browser storage to keep you signed in, remember your settings (such as light or dark mode and your firm's branding for the PDF pack), count visits and measure our adverts.

Where the data is

The HoodEx database is in the United States, and our providers process data in the United States and other countries outside the EU and UK. Where a provider processes data outside the EU or UK, we rely on the safeguards in that provider's data processing terms, such as the EU Standard Contractual Clauses.

How long we keep it

We keep a saved search, its notes and its chat until you delete it or delete your account. We keep payment records for as long as the law requires. Deleted data is removed from the live database straight away; it can remain in database backups for a short time until they are overwritten.

Deleting

  • One client: delete the search from your list of clients. The page you shared stops working.
  • Everything: email privacy@hoodex.app from your account's email address. We will delete your account and everything linked to it, including your firm profile, saved searches, notes, chats and reports, apart from payment records we must keep by law.

For firms: data processing agreement

When you enter a client's details, your firm decides what is entered and why, and HoodEx processes it on your behalf. A data processing agreement (including a German AVV) is available on request: email privacy@hoodex.app.

Why we are allowed to use it

  • To provide the service you asked for: your account, saved searches, reports and purchases.
  • For our legitimate interest in understanding how HoodEx is used, measuring our adverts and keeping HoodEx secure: visit statistics, advert measurement and security logs.
  • To meet legal duties, such as keeping payment records.

Your rights

You can ask to see, correct, export or delete the data we hold about you, or object to how we use it. Email privacy@hoodex.app; we reply within one month. You can also complain to a data protection authority. In Greece, that is the Hellenic Data Protection Authority (dpa.gr).