Privacy Policy
Effective date: February 1, 2026
Who we are
Home Cost Path ("Home Cost Path," "we," "us," or "our") is an independent educational home-purchase planning tool operated by TaskHive LLC. This Privacy Policy explains what information we collect, how we use it, and the choices you have. If any provision is unclear, please contact us at support@homecostpath.com.
What Home Cost Path is (and is not)
Home Cost Path is an educational planning tool. Home Cost Path is not a mortgage lender, mortgage broker, real-estate brokerage, appraiser, title/escrow provider, insurance provider, tax advisor, legal advisor, or a U.S. Department of Veterans Affairs service. Nothing produced by Home Cost Path is a loan offer, approval, preapproval, appraisal, VA determination, or guarantee of any kind.
Information we collect
We collect only the information needed to run the product.
- Account information. Email address, chosen display name, hashed password (bcrypt — the plaintext password is never stored), authentication provider (email or Google via Emergent-managed OAuth), account role.
- Home-purchase worksheet information. Numbers you type into the calculator, including purchase price, financing type, interest rate, loan term, down payment, VA-related fields, seller/lender credits, annual property taxes, insurance, HOA, monthly income, monthly debts, cash available, desired reserve, credit-score range, ZIP code, and the pre-closing expense line items you add.
- Saved-home records. If you save a home, we store the nickname you assign and the worksheet + computed results associated with that home.
- Shared-report links. If you generate a shareable read-only link, we store a redacted, minimized snapshot of the analysis behind a random public token. Sensitive financial fields (income, debts, cash available, credit-score range, ZIP, and internal identifiers) are stripped before publication.
- Payment information. If you purchase the Home Buying Pass, Stripe processes the payment. Home Cost Path stores only the Stripe session ID, the amount, currency, status, and the granted access-until date. We never see or store your card number, CVC, or full billing address. Please review Stripe's Privacy Policy.
- Technical logs. Standard server logs include the request path, response status, and a timestamp. We do not deliberately log worksheet values or passwords.
- Analytics. We use PostHog to record a small number of product events (see the Cookie & Analytics Notice below). Session replay is disabled. No raw financial worksheet values are sent to analytics.
How we use information
- Operate the calculator, save your homes, and generate share/PDF outputs you request.
- Authenticate you and secure your account.
- Process the Home Buying Pass payment via Stripe.
- Investigate abuse, prevent fraud, and enforce our Terms of Use.
- Improve the product using aggregate, non-identifying event counts.
We do not sell your information. We do not share your worksheet data with lenders, real-estate agents, or advertisers. We do not accept referral compensation from settlement-service providers.
Third parties who process data on our behalf
- Emergent — cloud infrastructure, database hosting (MongoDB), and managed Google OAuth authentication.
- Stripe — payment processing for the Home Buying Pass.
- PostHog — product analytics (event counts only; no session replay; no PII beyond an opaque user id).
- Google Fonts — Home Cost Path self-hosts its typefaces to avoid third-party font-CDN requests.
Data retention
Account and saved-home data are retained as long as your account remains active. Payment records are retained for tax and dispute-defense purposes for the period required by law (typically seven years). Shared-report tokens remain accessible until you or an administrator deletes them. You can request deletion of your account and associated data at any time by contacting support@homecostpath.com.
Your choices and rights
- Access, correct, or delete your account information at any time.
- Delete individual saved homes or shared-report links from your dashboard.
- Depending on where you live, you may have additional rights under laws such as the CCPA/CPRA (California), VCDPA (Virginia), CPA (Colorado), CTDPA (Connecticut), or the GDPR (EU/UK). To exercise those rights, email support@homecostpath.com.
Security
Passwords are hashed with bcrypt. Authentication tokens are transmitted over HTTPS with HttpOnly, Secure, SameSite=None cookies. Our database is provided by Emergent's managed infrastructure; encryption-in-transit and encryption-at-rest controls are subject to Emergent's SOC 2 posture. No system is fully secure — please use a strong, unique password.
Children
Home Cost Path is not directed to children under 13, and we do not knowingly collect personal information from children.
International users
Home Cost Path is operated from the United States. If you use Home Cost Path from outside the U.S., you understand that your information will be processed in the U.S.
Changes to this policy
We may update this policy from time to time. Material changes will be posted here with an updated effective date.