Privacy Policy

The short version. We collect what RenovU needs to work, and nothing to advertise to you. Your data is stored in the EU. We don't sell it or share it for advertising, and we don't use advertising or analytics cookies. You can see, export, correct or delete your data at any time, in Settings or by emailing us.

1. Who is responsible for your data#

The controller of your personal data is Paul Hulatt EI, a sole trader (micro-entrepreneur) registered in France, at 34 Route du Bos Negre, Queyssac 24140, France. For anything about your data, email support@renovu.app with "Privacy" in the subject. We're too small to be required to have a data protection officer, so your message comes straight to us.

This policy covers renovu.app, renovu.space, the RenovU app on phones and tablets, and the emails we send.

2. What we collect#

Your account. Your email address, your name, your password (stored only as a secure hash by our authentication provider), your sign-in sessions, and, if you add them, a profile photo and a short bio. If you continue with Google, Google tells us your name and email address; we receive nothing else from your Google account.

Your settings. Language, time zone, units, notification preferences and quiet hours.

Your projects. What you and your collaborators put into RenovU: project details (including the country and town of the property, and its type and age, but never its street address), rooms, tasks, notes and comments, budgets, expenses and receipts, materials, time entries, floorplans, calculator results, whiteboards and shopping lists, and the names and, if you add them, email addresses of the people involved.

Photos. When you upload a photo we remove its hidden metadata, including the location where it was taken and the camera details, before we store it. We never keep the original file.

Collaboration. Invitations (the invitee's email address, their role and your optional message), project membership, and a history of changes to each project, so members can see who did what.

Billing. Your plan, trial dates, subscription status and, if you cancel, the reason you choose to give. Paddle handles card details and payment; we never see your card number.

Support. When you contact support we keep your name, email address, messages and attachments (with their hidden metadata removed), together with the page you were on, your browser, the app version, your language and your plan, so we can understand the problem.

Notifications. If you turn on push notifications on a device, we store that device's push address and browser type so we can deliver them.

Security and technical data. Your IP address and browser details are processed when you use RenovU. We keep them in security records when you sign in and when our staff act on an account. Rate limits use a scrambled (hashed) version of your IP address. If something breaks, an error report records what went wrong, the page and your browser, without your name or email address.

Waitlist. If you join the waitlist: your email address, your language, what you told us you're renovating (if anything), and when you agreed and to which wording.

On your device. To make RenovU fast and usable offline, the app keeps a copy of the projects you open, and any changes you make while offline, in your browser's storage on that device. That copy stays on your device; signing out or clearing your browser's data removes it.

We don't ask for special categories of data (such as health data), and please don't put them in RenovU.

3. Why we use it, and on what legal basis#

• To provide RenovU (your account, your projects, collaboration, sync, notifications, exports, support): it's necessary to perform our contract with you.
• To bill paid plans and keep accounting records: to perform the contract, and because the law requires us to keep accounting records.
• To keep RenovU secure and working (preventing abuse and fraud, rate limits, security records, error reports, backups): our legitimate interest in running a safe, reliable service.
• To send emails about your account and projects (security notices, invitations, notifications you've turned on, billing and service messages): to perform the contract. You can turn off notification emails in Settings, but not essential account and security emails.
• To send waitlist emails, and push notifications: your consent, which you can withdraw at any time.
• To understand how RenovU is used, so we can improve it: only with your consent. We don't do this today; if we start, we'll ask first.
• To meet legal obligations and to establish or defend legal claims.

We don't sell your personal data or share it for advertising, and we make no decisions about you by automated means that have legal or similarly significant effects.

4. Who can see your data#

Other people, as you choose. Members of your projects see what's in them, in line with their role. A share link shows a summary of a project (its name, description, progress, recent photos and recently finished tasks, never money or location) to anyone who has the link, and a whiteboard link shows that whiteboard's tasks to anyone with the link and its PIN. You decide when to create these links and can turn them off at any time.

Our providers. We use the following companies to run RenovU. They act on our instructions under data processing agreements, and may not use your data for their own purposes:

• Supabase (database and sign-in): data stored in Frankfurt, Germany.
• Cloudflare (hosting, network security, file storage, photo processing and inbound support email): files stored and photos processed in the EU; requests pass through Cloudflare's global network.
• Amazon Web Services (sending email, via Amazon SES): Stockholm, Sweden.
• Sentry (error reports): stored in Germany.
• Google (only if you continue with Google): to confirm who you are.
• Your browser's push service (for example Google, Apple or Mozilla, depending on your browser): only if you turn on push notifications. It carries the notification's text and link to your device.

Paddle, our reseller, sells paid plans as merchant of record. It processes the payment and billing details you give it as a controller in its own right, under Paddle's privacy policy. We share with Paddle your email address and an internal account reference, so your plan is linked to your account.

Others when the law requires it: for example, a court order or a lawful request from an authority. If we ever transfer the business, your data would pass to the new owner under this policy, and we'd tell you first.

5. Where your data is stored#

Your account and project data is stored in the European Union. Some of our providers are based in, or may access data from, outside the EU and the UK (for example in the United States). Where that happens, the transfer is protected by the European Commission's standard contractual clauses (and the UK addendum to them), or by an adequacy decision such as the EU-US Data Privacy Framework.

6. How long we keep it#

• Your account and projects: for as long as you have an account. When you delete it (in Settings → Privacy, or by asking us), a 30-day grace period starts, during which you can change your mind with the link in our email; then we delete your personal data, your projects, photos and sign-in records. Billing records are kept, without your name or email address, for as long as accounting law requires (below). Content you added to other people's projects stays there without your name.
• Deleted tasks stay in the project's bin for 30 days so they can be restored, then are deleted.
• Deleted photos are deleted straight away; photos in a deleted project are deleted 7 days after the project.
• Export files you create are deleted 7 days after they're made.
• Billing records: 10 years, as French accounting law requires, even after you close your account.
• Support requests: 24 months after the request is closed, together with their attachments.
• Security records and server logs: up to 12 months.
• Error reports: up to 90 days.
• Backups: encrypted, and overwritten on a rolling basis within 35 days. Something deleted from RenovU may remain in a backup until it expires, but we never restore it into the service except to recover from a failure.
• Waitlist: an unconfirmed entry is deleted after 30 days. If you unsubscribe, we keep only your email address, so we never email it again.

7. Your rights#

Wherever you live, you can ask us to:

• give you a copy of your personal data (access), in a machine-readable format if you like (portability);
• correct it (rectification);
• delete it (erasure);
• limit how we use it (restriction), or stop using it where we rely on legitimate interests (objection);
• withdraw a consent you gave, without affecting what we did before.

Under French law you can also leave instructions about what happens to your data after your death.

Most of these you can do yourself in Settings: edit your details, turn off notifications, and, under Privacy, Export my data (a copy of everything we hold about you, with your photos, as JSON files in a ZIP) and Delete your account. For anything else, email support@renovu.app. We'll answer within one month and may ask you to confirm your identity first. It's free.

If you're unhappy with how we've handled your data, please tell us. You can also complain to the CNIL in France (cnil.fr), or to the data protection authority where you live or work: in the UK, the Information Commissioner's Office (ico.org.uk).

California residents. We don't sell or share personal information as the CCPA/CPRA defines those terms, and we don't use sensitive personal information to infer anything about you. You have the right to know, delete and correct your personal information and not to be treated differently for using these rights, and you can use them by emailing us as above.

8. Cookies and storage on your device#

We only use cookies and device storage that RenovU needs to work, or that remember a choice you've made. None track you across other sites, and we don't use advertising or analytics cookies, so we don't need to ask for your consent to them. If that ever changes, we'll ask first.

• Sign-in (sb-…): keeps you signed in.
• Language (renovu-locale) and theme (theme): remember the language and appearance you chose, for up to a year.
• Last project (renovu_last_project): opens the project you used last, for up to a year.
• Sign-up and invitations (renovu_verify_email, renovu_invitation): carry you through confirming your email and accepting an invitation; they last an hour and a day.
• Banners (trial_banner_dismissed, payment_banner_dismissed): hide a banner you've dismissed, for 36 hours.
• Share and whiteboard links: remember that you've entered a link's password or PIN, for 12 hours and 30 days.
• Paddle: the checkout on the Pricing page may set Paddle's own cookies, needed to process a payment and prevent fraud.
• Device storage: the app's offline copy and pending changes, and preferences such as dismissed prompts and floorplan settings.

You can delete cookies and site data in your browser's settings at any time, though you'll then be signed out and lose any changes not yet synced.

9. Security#

Your data is encrypted in transit and at rest. Access inside RenovU is checked on the server for every request, project files are private and served only through short-lived links, staff access to accounts is limited, requires two-factor authentication and is logged, and backups are encrypted. If a breach puts your data at risk, we'll tell you and the authorities as the law requires.

10. Children#

RenovU is for people aged 18 and over. We don't knowingly collect data from children; if you think a child has given us their data, email us and we'll delete it.

11. Changes to this policy#

When we change this policy we'll update the date at the top. For a significant change we'll tell you by email or in the app before it takes effect, and where the change needs your consent, we'll ask for it.