Last updated: 5 June 2026 · This policy explains what personal data we collect and how we use it.
RenoVision is the data controller for the personal information collected through this Service. Our contact email is [email protected].
If you are in the UK or European Economic Area, your rights are protected under the UK GDPR / Data Protection Act 2018.
When you create an account we collect your email address. Your password is never stored in plain text — it is hashed by Supabase before being stored. We never see or have access to your raw password.
Each time you run a property analysis, we record:
If you upgrade to Pro, Stripe passes us a Stripe Customer ID and Subscription ID so we know your plan status. We do not store any payment card details — these are held exclusively by Stripe.
Like all web services, our hosting provider (Railway) may collect standard server log data including your IP address, browser type, and pages visited. This data is used for security and to diagnose technical problems and is not used to identify you individually.
| Purpose | Legal basis (UK GDPR Art. 6) |
|---|---|
| Providing the analysis service | Performance of a contract (Art. 6(1)(b)) |
| Enforcing free-tier usage limits | Performance of a contract (Art. 6(1)(b)) |
| Processing your subscription payment | Performance of a contract (Art. 6(1)(b)) |
| Sending transactional emails (e.g. password reset) | Performance of a contract (Art. 6(1)(b)) |
| Preventing abuse and ensuring security | Legitimate interests (Art. 6(1)(f)) |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
We do not send marketing emails unless you have explicitly opted in. We do not use your data to build advertising profiles or sell it to third parties.
We use the following sub-processors to deliver the Service. Each is bound by appropriate data processing terms.
| Provider | Role | Data shared |
|---|---|---|
| Supabase | Authentication & database (hosted in EU) | Email, hashed password, usage records |
| Stripe | Payment processing | Email, subscription status |
| Anthropic | AI analysis (Claude API) | Property listing text & images |
| Railway | Web hosting & infrastructure | Server logs (IP address, request data) |
Property listing content sent to Anthropic's API is used solely to generate your analysis and is subject to Anthropic's privacy policy.
Under the UK GDPR you have the right to:
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
We use only essential cookies required to operate the Service (for example, authentication session tokens set by Supabase). We do not use advertising cookies, tracking pixels, or third-party analytics cookies.
We take appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS), password hashing, and restricted access to production databases. No method of transmission over the internet is 100% secure, but we follow industry best practices.
Supabase stores data within the EU (Ireland region). Anthropic and Railway are US-based services; data transferred to them is protected under appropriate safeguards (Standard Contractual Clauses or equivalent). Stripe operates globally and is certified under applicable data transfer frameworks.
The Service is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. If we make material changes we will notify you by email or via a notice on the Service. The "Last updated" date at the top of this page reflects the most recent revision.
For any privacy-related questions or to exercise your rights, please contact:
RenoVision
Email: [email protected]