Legal
Privacy Policy
What we collect, why we collect it, who else sees it, and how to get it back or have it deleted.
Last updated 4 August 2026
1. Who is responsible
Artur Cherneha, [CONTACT ADDRESS], is the data controller for the personal data described in this policy. Contact us at support@renvoro.app.
2. What we collect
- Account data
- Name, email address, password hash, chosen role, workspace name, language, and currency.
- Workspace content
- The records you create: properties, reservations, tenants, owners, payments, expenses, commissions, documents, and notes.
- Billing data
- Plan, billing period, subscription status, invoice history, and the billing country and name you give at checkout. We never receive or store your full card number, expiry date, or security code — those go directly to Paddle.
- Technical data
- IP address, device and browser type, application version, timestamps, and error diagnostics.
- Correspondence
- Messages you send us and our replies.
3. Why, and on what basis
| Purpose | Legal basis |
|---|---|
| Providing the service and storing your records | Performance of a contract |
| Taking payment and managing subscriptions | Performance of a contract |
| Support and correspondence | Performance of a contract; legitimate interests |
| Security, abuse prevention, and diagnostics | Legitimate interests |
| Keeping accounting and tax records | Legal obligation |
| Product announcements by email | Legitimate interests, with an unsubscribe link in every message |
We do not sell personal data, and we do not use your workspace content for advertising or to train models.
4. Tenant and owner data
Renvoro stores information about your tenants and the property owners you work with, because that is what the product is for. In relation to those records you are the controller and we act as your processor: we process them on your instructions, to run the service.
You are responsible for having a lawful basis to hold that information and for telling those people how it is used. Please collect only what you actually need.
5. Who we share it with
We use a small number of processors, each for a defined purpose:
- Paddle.com Market Ltd — merchant of record; payment processing, tax, and invoicing.
- Supabase — database, authentication, and file storage.
- Resend — transactional email such as password resets.
- Cloudflare — website hosting and protection against abuse.
We also disclose data where the law requires it, and to a buyer if the business is ever sold — in which case we will tell you first.
6. International transfers
Our providers may process data outside your country. Where data leaves the European Economic Area or the United Kingdom, transfers rely on an adequacy decision or on Standard Contractual Clauses.
7. How long we keep it
- Workspace content: while your account is open, then 12 months, then deleted.
- Account data: while your account is open, then 12 months.
- Invoices and accounting records: as long as tax law requires, typically 6–10 years.
- Technical logs: up to 12 months.
- Support correspondence: up to 24 months.
You can ask for earlier deletion at any time, except for records we must keep by law.
8. Security
Data is encrypted in transit with TLS and encrypted at rest. Access is separated per workspace and enforced at the database level rather than only hidden in the interface. Administrative access is limited to those who need it. No system is perfectly secure, and if a breach affects you we will notify you and the relevant authority as the law requires.
9. Your rights
Depending on where you live, you may have the right to:
- access a copy of your personal data;
- correct data that is wrong;
- have data deleted;
- restrict or object to certain processing;
- receive your data in a portable format;
- withdraw consent where processing relies on it;
- complain to your data protection authority.
Write to support@renvoro.app. We respond within 30 days. Export is also available at any time from inside the application.
10. Cookies
This website sets no advertising or analytics cookies, and there is no consent banner because there is nothing to consent to. The application itself uses cookies and local storage that are strictly necessary — keeping you signed in, and remembering your billing-period preference on the pricing page. Fonts are loaded from Google Fonts, which receives the request as part of serving them.
11. Children
Renvoro is a business tool and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has given us data, tell us and we will remove it.
12. Changes
We will post any updated version here and change the date at the top. For material changes we will also email you.
13. Contact
Artur Cherneha
[CONTACT ADDRESS]
Email: support@renvoro.app
Before you publish: this draft assumes Supabase, Cloudflare, and Paddle as described in the project's architecture. Confirm that the list of processors matches what you actually run, replace every highlighted placeholder, and have the document reviewed against the law that applies to you. It is not legal advice. Delete this notice afterwards.