Homebot

Homebot is a US client engagement platform for real estate agents and loan officers, headquartered in Denver, Colorado and operated by Homebot Inc. Its core product is a monthly digest sent to home owners with the estimated value of their property, equity build up, refinance scenarios and rental yield. The platform is white labelled for the agent or lender and serves primarily the US market, with occasional usage by European agents managing US property portfolios.

What Homebot does

Homebot ingests a home owner property address, the purchase price and the mortgage details from the agent or lender, then enriches them with public records and automated valuation models (AVMs). It serves the result via a branded microsite, a JavaScript embed on the agent website and recurring email digests. Each interaction (open, click, refinance scenario explored) is tracked back to the agent dashboard.

Data and cookies set

Homebot processes the home owner full name, email, property address, estimated value, mortgage balance, lender, household income range where supplied, plus standard request metadata (IP, user agent, geolocation by IP). On the host site the snippet writes first party cookies for session continuity (hb_session), report identification (hb_report_id) and engagement attribution (hb_utm). On the Homebot email, tracking pixels record opens and clicks.

GDPR and ePrivacy implications

For a European home owner, the data set qualifies as personal data of high economic value (property and mortgage). Consent under Art 6(1)(a) GDPR plus the Art 5(3) ePrivacy consent for the tracking cookies is the only sustainable legal basis. The US hosting triggers Chapter V GDPR transfer rules: Homebot Inc. should be relied on under the EU US Data Privacy Framework certification (where active) plus Standard Contractual Clauses for any backup. Legitimate interest is hard to invoke.

Consent and transparency

The Homebot script and email pixel must be blocked until the home owner has explicitly opted in. The opt in must mention the US transfer, the categories of data and the duration of the engagement program. Agents should provide a clear unsubscribe path that detaches the property record from the Homebot account, not just the email channel.

Data transfers and hosting

All Homebot production data sits on AWS in us east 1 and us west 2. There is no European region as of 2026. Verify in the Homebot DPA whether the company self certifies under the EU US Data Privacy Framework. Implement Standard Contractual Clauses and a Transfer Impact Assessment for any sustained deployment in Europe.

Practical compliance steps

Carry out a DPIA before activating Homebot for European data subjects. Sign the Homebot DPA with Standard Contractual Clauses. Wrap the script in your CMP under Marketing and use a placeholder until consent. Document the US transfer in the privacy notice. Limit the data sent to Homebot to the minimum needed to produce the valuation. Reassess yearly given the volatile state of the EU US transfer regime.