Privacy policy

Last updated: 21 October 2026 · applies to HomeGrab v1.0.20 and later; error reports (§6) from v1.0.23; the cookies permission from v1.0.27.

In short. Listing data is written only to your own Google Sheet in your own Google Drive. Addresses, photos, owners' phone numbers and descriptions are never sent to HomeGrab's server. When a transfer or publish fails, the extension sends a technical error report so we can fix it (see Error reports below); it holds no personal data and you can turn it off in settings. HomeGrab's server otherwise keeps only what it needs to run your account, plan and payments. Card details are entered on Bank of Georgia's secure page and never reach us. We do not sell data or use it for advertising.

HomeGrab signs you in with Google OAuth 2.0 and requests exactly four scopes: drive.file (only files the extension created — your “HomeGrab Tracker” sheet), openid, profile and email. It requests seven Chrome permissions (identity, storage, alarms, notifications, scripting, tabs, cookies), runs only on ss.ge, home.ss.ge, static.ss.ge, www.myhome.ge, statements.myhome.ge, api-statements.tnet.ge, static-statements.tnet.ge, static.my.ge and googleapis.com, and connects to HomeGrab's server (homegrab-api.usectl.com) and, when you pay, Bank of Georgia's payment page.

cookies reads your own myhome.ge login cookie in your browser, so the extension can ask MyHome's “my statements” list which of your ads went live and write its number to your Google Sheet. The cookie is sent only to MyHome's own API (api-statements.tnet.ge), never to HomeGrab's server, and is not stored anywhere.

HomeGrab's server stores: your Google account ID, email and name; a random device ID created on install (not a hardware identifier), the extension version and when you last used it; when the extension was first installed on this computer and whether it was used before the paid version (dates and a yes/no only, for free-trial eligibility); a backup of your settings (agent name, price addition, area rounding, amenity preset, city, theme); your trial dates, plan, period, status and accepted terms version; payment records (bank order number, amount, status, payment method, the card's last 4 digits and expiry, and the bank's confirmation, never the full card number); and a log of administrator actions on your account. The description text you type stays on your computer only.

Not stored: listing contents (except the technical fields of an error report, below), owners' phone numbers, your ss.ge or myhome.ge passwords, full card numbers, browsing history.

Error reports (from v1.0.23). When a transfer, form fill or publish fails, or the extension hits an unexpected error, it sends a technical report to HomeGrab's server, used only to find and fix errors. Successful transfers are recorded too (sites, step, outcome, duration and the listing's ID), so we know how often errors happen. A report contains: which site to which, the step, the outcome, the duration and the source listing's ID on the site; the site's (ss.ge / myhome.ge) error code and message; the technical fields of the form, codes and numbers only (property and deal type, city, district and street codes, price, currency, area, room count), the photo count and which fields were left to fill by hand; the type of your ss.ge / myhome.ge account (e.g. individual or agent) and its number of active listings, with no account name, email or number; the extension's error message and code location, the name of a form field it could not find, the extension and Chrome versions and the operating system; and your HomeGrab account and device IDs, so we can answer you about a specific listing. Never sent: owners' names and phone numbers, your own phone number, description text, exact address, coordinates, photos, or ss.ge / myhome.ge login data (cookies, tokens); the extension removes them before sending. Reports are kept for 90 days, then deleted; only error totals remain, not linked to any account. Reporting is on by default and can be turned off in the extension's settings (“Send error reports”); once off, nothing more is sent, including reports not yet sent.

Shared with: Bank of Georgia (payment processing) and usectl (hosting). Account data is kept while your account is active and error reports for 90 days; request deletion at [email protected] and we delete it within 30 days, except payment records kept as long as Georgian law requires.

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Provided by „ჰოუმ გრაბი“ (HomeGrab), company ID 400453656 · [email protected] · +995 575 77 81 42