Privacy policy

Last updated: 23 October 2026 · applies to HomeGrab v1.0.20 and later; error reports from v1.0.23; the cookies permission from v1.0.27; listing counts for agency seats from v1.0.38.

In short. Listing data is written only to your own Google Sheet in your own Google Drive. Addresses, photos, owners' phone numbers and descriptions are never sent to HomeGrab's server. When a transfer or publish fails, the extension sends a technical error report so we can fix it (see Error reports below); it holds no personal data and you can turn it off in settings. If you are on an agency's seat, the agency sees your name, your email, when you last used HomeGrab and how many listings you published (numbers only, never their contents; see Agencies). HomeGrab's server otherwise keeps only what it needs to run your account, plan and payments. Card details are entered on Bank of Georgia's secure page and never reach us. We do not sell data or use it for advertising.

HomeGrab signs you in with Google OAuth 2.0 and requests exactly four scopes: drive.file (only files the extension created — your “HomeGrab Tracker” sheet), openid, profile and email. It requests seven Chrome permissions (identity, storage, alarms, notifications, scripting, tabs, cookies), runs only on ss.ge, home.ss.ge, static.ss.ge, www.myhome.ge, statements.myhome.ge, api-statements.tnet.ge, static-statements.tnet.ge, static.my.ge and googleapis.com, and connects to HomeGrab's server (homegrab-api.usectl.com) and, when you pay, Bank of Georgia's payment page.

cookies reads your own myhome.ge login cookie in your browser, so the extension can ask MyHome's “my statements” list which of your ads went live and write its number to your Google Sheet. The cookie is sent only to MyHome's own API (api-statements.tnet.ge), never to HomeGrab's server, and is not stored anywhere.

HomeGrab's server stores: your Google account ID, email and name; a random device ID created on install (not a hardware identifier), the extension version and when you last used it; when the extension was first installed on this computer and whether it was used before the paid version (dates and a yes/no only, for free-trial eligibility); a backup of your settings (agent name, price addition, area rounding, amenity preset, city, theme); your trial dates, plan, period, status and accepted terms version; payment records (bank order number, amount, status, payment method, the card's last 4 digits and expiry, and the bank's confirmation, never the full card number); a log of administrator actions on your account; and, if you are on an agency's seat or own an agency, what is listed under Agencies. The description text you type stays on your computer only.

Not stored: listing contents (except the technical fields of an error report, below), owners' phone numbers, your ss.ge or myhome.ge passwords, full card numbers, browsing history.

Error reports (from v1.0.23). When a transfer, form fill or publish fails, or the extension hits an unexpected error, it sends a technical report to HomeGrab's server, used only to find and fix errors. Successful transfers are recorded too (sites, step, outcome, duration and the listing's ID), so we know how often errors happen. A report contains: which site to which, the step, the outcome, the duration and the source listing's ID on the site; the site's (ss.ge / myhome.ge) error code and message; the technical fields of the form, codes and numbers only (property and deal type, city, district and street codes, price, currency, area, room count), the photo count and which fields were left to fill by hand; the type of your ss.ge / myhome.ge account (e.g. individual or agent) and its number of active listings, with no account name, email or number; the extension's error message and code location, the name of a form field it could not find, the extension and Chrome versions and the operating system; and your HomeGrab account and device IDs, so we can answer you about a specific listing. Never sent: owners' names and phone numbers, your own phone number, description text, exact address, coordinates, photos, or ss.ge / myhome.ge login data (cookies, tokens); the extension removes them before sending. Reports are kept for 90 days, then deleted; only error totals remain, not linked to any account. Your agency never sees error reports. Reporting is on by default and can be turned off in the extension's settings (“Send error reports”); once off, nothing more is sent, including reports not yet sent.

Agencies. An agency can buy HomeGrab for its agents at manager.homegrab.ge by adding their Google emails; HomeGrab signed in with that email then runs on the agency's plan.

If you are on an agency's seat, the agency sees: your email (the agency added it); your name, from your Google account once you sign in; whether you have signed in to HomeGrab with that email and when you last used it; and, from v1.0.38, how many listings you published with HomeGrab per day and per site (ss.ge / myhome.ge) — the extension sends only the date, the site and the number. The agency never sees listing contents (addresses, prices, photos, descriptions, phone numbers), your Google Sheet, your settings, your error reports, or your personal plan and payments. Publishes are counted only while you are on a seat, and only after you press “Got it” on the notice the extension shows you first. Counting is separate from error reports: turning off “Send error reports” does not stop it. Counts are kept for 12 months, then deleted. If the agency removes you, it still sees the counts from your time on its seat, and nothing new is added. If you don't want your agency to see this, ask it to remove you; you can use HomeGrab on a personal plan instead.

If you own an agency, the server stores: the agency's name, company ID (ს/კ) and billing email, for the account and invoices (the company ID also keeps the free week to once per company); your Google account ID, email and name, to sign you in at manager.homegrab.ge (Google sign-in there asks only for openid, profile and email, with no Drive access); the agents' emails, when they were added or removed and by whom, to count seats and the bill; seats, plan, period, status and payments (as above); and a log of changes (who added or removed an agent, who changed the agency's details), for security and disputes. HomeGrab's only cookie on manager.homegrab.ge is a 30-day sign-in session; we use no analytics or advertising cookies. The Google sign-in button is loaded by Google, under Google's own terms. When an agency is deleted, all its seats are freed; we keep its name, company ID, payment records and change log, so the free week can't be used twice for the same company ID, and payment records as long as Georgian law requires.

Shared with: your agency (only if you are on its seat, and only what is listed under Agencies), Bank of Georgia (payment processing) and usectl (hosting). We do not sell data, use it for advertising, or pass it to anyone else unless the law requires it. HomeGrab never asks for or stores your ss.ge or myhome.ge password; it works in the session you are already signed in to.

Retention and deletion. Account data is kept while your account is active, error reports for 90 days, and listing counts for 12 months. Request deletion at [email protected] and we delete it within 30 days, except payment records kept as long as Georgian law requires and a deleted agency's details listed under Agencies. Your sheet is yours to delete from Google Drive at any time; you can revoke Google access from your Google account's security page, and data stored on your computer is removed when you uninstall the extension.

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Provided by „ჰოუმ გრაბი“ (HomeGrab), company ID 400453656 · [email protected] · +995 575 77 81 42