Privacy Policy

Renovate (also known as Hello Renovate) is operated by Bilal Shahzad, doing business as Renovate. In this Policy the terms “Renovate”, “we”, “us”, and “our” refer to that entity. Renovate is the “data controller” for information collected through the Service, subject to Section 4 below.

Information you provide directly. When you sign up we collect your name, business name, email address, phone number, and password. When you use the Service you may add contacts, estimates, invoices, project descriptions, photos, and other business content.

Payment information. Subscription payments are processed by Stripe. Renovate does not see or store your card number, expiry date, or CVV. Stripe shares limited billing metadata with us (customer id, subscription status, plan, last four digits of the card, country) so we can activate and manage your account.

Information collected automatically. When you use the Service we log technical information (IP address, device type, browser, operating system, pages visited, timestamps, and referring URL) as needed to operate, secure, and improve the Service.

Homeowner Marketplace posts. Homeowners posting a project through the Renovate Marketplace provide a name (optional), email, phone (optional), project description, budget range, timeline, zip code, and optional photos. These fields are collected under a legitimate interest to match the project with suitable contractors.

We use personal information to:

• Provide, operate, and secure the Service.
• Process your subscription and communicate about billing.
• Send transactional emails (verification, invoices, receipts, marketplace notifications, security alerts).
• Respond to support requests you send us.
• Detect and prevent fraud, abuse, and unauthorised access.
• Comply with legal obligations.
• Improve the Service by analysing anonymised usage patterns to decide what to build next.

We do not sell your personal information, and we do not use it to serve targeted advertising outside our own Service.

We share personal information only with the processors we need to run the Service. Each is bound by a data-processing arrangement restricting their use of the data to providing services to us.

• Stripe, Inc. (United States). Subscription billing, card processing, tax handling. See Stripe Privacy Policy.
• Stripe Connect (United States). When you connect your Stripe Connect account, customer payments on your invoices land directly in your bank. Renovate does not process, hold, or take a cut of these funds.
• Google. Powers the Renovate AI image rendering feature. Room photos you upload for a preview are transmitted to Google for processing.
• Resend. Transactional email delivery.
• Vercel. Application hosting and CDN.
• Neon. Managed Postgres database (data hosted in AWS US-East region).

We may also share information with law-enforcement or regulators when required by law, or with a successor entity in the event of a merger, acquisition, or sale of all or substantially all of our assets.

The Service uses first-party cookies to keep you signed in (authentication tokens stored as httpOnly cookies) and to remember your preferences. We do not use third-party advertising cookies.

We keep account and business content for as long as you have an active account and for up to 90 days after cancellation to allow reactivation. After that period, personal information is deleted or anonymised except where longer retention is required by law (for example, subscription and tax records retained by Stripe).

Transactional emails and audit logs are retained for one year for security and legal purposes.

You can access and update most of your personal information directly from your account settings. You also have the following rights, subject to applicable law:

• Access and portability. Request a copy of the personal information we hold about you.
• Correction. Ask us to correct information you believe is inaccurate.
• Deletion. Request deletion of your personal information, subject to legal retention requirements.
• Objection or restriction. Object to certain processing or ask us to restrict it.
• Withdrawal of consent. Where processing is based on consent, withdraw it at any time.

To exercise a right, email info@hellorenovate.com. We will respond within 30 days.

Renovate is operated from Pakistan and uses processors in the United States, European Union, and United Kingdom. When we transfer personal information across borders we rely on appropriate safeguards recognised by applicable law, including Standard Contractual Clauses.

We implement industry-standard technical and organisational measures to protect personal information. HTTPS everywhere, encrypted database connections, JWT-based authentication with httpOnly cookies, access-controlled infrastructure, and periodic security review. No online service is entirely immune to risk, but we work hard to protect the information you entrust to us.

The Service is not directed to children under 16. If you become aware that a child has provided personal information without parental consent, please contact us and we will delete it.

We may update this Policy from time to time. When we do, we will update the “Last updated” date at the top of this page, and for material changes we will notify you by email or through the Service in advance.

Questions or concerns about privacy? Email info@hellorenovate.com. We aim to respond within three business days.