Privacy Policy

Renovilo operates this Service and is responsible for the personal information described here. For any privacy question or complaint, contact Renovilo — Privacy at info@renovilo.com.

“Provided by you” = you enter or upload it. “Generated by the platform” = created as you use the Service. “From a provider” = received from a service provider (e.g. Stripe).

• Account (provided by you; required): email and password (stored hashed by our auth provider).
• Profile & company (provided by you; required to participate): name, company, city, trade, experience, certifications, equipment flags, bio, avatar, portfolio.
• Addresses & project locations (provided by you): city/region shown publicly; a precise street address, if you add one, is kept private and never shown on public listings.
• Photos & attachments (provided by you): project and portfolio images, and photos you attach to the AI assistant.
• Project descriptions, quotes & pricing (provided by you): required to use those features. Quotes are private to the homeowner.
• Private messages (provided by you): required to enable conversations between members.
• Reviews, reports & disputes (provided by you / generated): moderation and safety information.
• AI Project Concierge (provided by you + generated): your conversation, attachments, the generated draft, and technical details (model, token counts, timing). See section 8.
• Subscription & billing metadata (from Stripe + generated): plan, status, renewal dates, Stripe identifiers. We do not store full card numbers — Stripe does.
• Device, security & cookie data (generated): essential cookies, basic security/technical logs, and — only with your consent — marketing-attribution data. See section 13.
• Admin & moderation records (generated): audit logs of sensitive staff actions, kept for accountability.

We use the information above to provide the marketplace and your account; show your profile, posts and portfolio to other users; enable messaging, quotes and applications; run the AI Project Concierge; process subscriptions; keep the platform safe (moderation, reports, disputes, fraud and abuse prevention); respond to support; and comply with legal obligations.

Most of this is required to deliver the features you use. Optional processing — which you can decline or withdraw without losing core functionality — includes marketing emails, marketing/attribution cookies, and using your AI conversations to improve our AI features. Manage these in your privacy settings.

Your profile (name, trade, city, bio, portfolio) and your posts are visible to other users; public profile pages may be viewable without logging in (names are partly masked to logged-out visitors). Quotes are private — only the homeowner who owns the project, and Renovilo staff under controlled access, can see them. Don’t post anything you wouldn’t want shared.

We share data with vendors that help us run the Service:

• Supabase — authentication, database and file storage (your account, content and photos).
• Stripe — subscription payments and billing; Stripe processes your payment details under its own privacy policy.
• OpenAI — powers the AI Project Concierge; your conversation and attached photos are sent to OpenAI to generate replies and drafts (see section 8).

We currently use no third-party advertising networks, and no third-party analytics or marketing-email provider is integrated today; if we add one, we will update this policy and, where the data is non-essential, honor your consent choices. We do not sell your personal information. Providers process data on our behalf and may not use it for their own purposes beyond providing their services.

Renovilo serves Canada and the US. Some of our providers (including Supabase, Stripe and OpenAI) process and store data on servers located in the United States. This means your information may be processed outside Canada and subject to the laws of those jurisdictions. [LEGAL REVIEW] The specific data-residency and transfer-safeguard disclosures should be confirmed with counsel for your target markets.

We use reasonable technical and organizational measures, including database row-level security, encrypted connections, scoped access controls, an append-only admin audit log, and a specific internal permission (plus logging) before any staff member can view raw AI conversations. No system is perfectly secure, so we cannot guarantee absolute security.

Each project you prepare with the AI Project Concierge has its own isolated conversation. We store the messages you and the assistant exchange, the photos you attach, the structured draft it produces, and technical details (model used, token counts, response timing). Your conversation and photos are sent to OpenAI to generate replies.

Operational vs. improvement use. Conversations are used to operate the assistant for you and, in aggregate, to understand where it is unclear. We may use them to improve Renovilo’s AI features, but this is optional — you can turn it off — and we do not automatically send your past conversations to an AI model for training. Any future customization or evaluation would follow a separate process with privacy review, access controls, redaction and appropriate notice or consent.

Only you can see your AI conversations; staff access to raw content requires a specific internal permission and is logged. You can download or delete your AI conversation data anytime from your AI data settings. Deleting it does not affect projects you already published.

We keep information only as long as needed for the purposes above, then delete or anonymize it. Some records are kept longer where necessary for disputes, fraud prevention, accounting/tax, legal obligations or security. Durations marked [LEGAL REVIEW] are practical defaults pending confirmation by counsel — we have not invented legally-required periods.

• Deleting a project removes that listing from the marketplace (soft-deleted first, so we can preserve evidence for any related dispute). It does not delete your account or other projects.
• Cancelling a subscription ends paid access at the end of your billing period. It does not delete your account, your content, or your invoices.
• Deleting AI conversation data removes your Concierge conversations and drafts, but not projects you already published.
• Deleting your account removes your profile and content associated with the account, except records we must retain for disputes, fraud prevention, accounting, legal or security reasons, which are removed or anonymized when no longer needed.

Depending on where you live, you may have rights to access, correct, export or delete your personal data, and to withdraw optional consents. You can edit your profile and content anytime, manage your subscription from the billing settings, and manage optional consents in your privacy settings. To make a formal request (copy, correction, deletion, or consent withdrawal), submit a privacy request. We may need to verify your identity before completing certain requests.

We use strictly necessary cookies to keep you signed in and secure the Service, and — only with your consent — a first-party marketing-attribution cookie. We do not use third-party advertising cookies today. See the Cookie Policy for the full list and how to change your choices.

The Service is not directed to anyone under 18, and we do not knowingly collect data from children.

Questions or complaints? Reach Renovilo — Privacy at info@renovilo.com or via the Help page. We may update this policy; the version and effective date at the top will change, and we will ask for renewed acceptance of our legal terms when they materially change. Older acceptance records are kept and not overwritten.