Free public beta
Privacy Policy
Last updated: July 7, 2026 · This is a draft policy for the RenovAI free public beta and will be revised before general availability.
What we collect
When you use RenovAI, we collect and store:
- Account data — your email address, and if you sign in with Google, the basic profile information Google shares (name, email, avatar).
- Home and project data — everything you enter or upload: homes, rooms, projects, tasks, suppliers, contacts, quotes, invoices, finance records, messages, and timeline events.
- Files — floor plans, photos, PDFs, and other documents you upload.
- Communications — emails and WhatsApp messages exchanged with your suppliers through RenovAI, which are threaded into your project conversations.
- Usage and error data — page views, product interactions, and application errors (client and server side), used to improve the product and fix bugs.
Who processes your data
We use a small set of service providers (processors) to run RenovAI:
| Provider | What it does |
|---|---|
| Convex | Hosts our application database — your account, home, project, supplier, finance, and message records. |
| Cloudflare | Serves the website, stores your uploaded files (R2 object storage), and sends and receives email on our behalf (Email Service and Email Routing). |
| PostHog | Product analytics and error tracking, hosted in PostHog's US cloud. Captures page views, product events, and exceptions. |
| Optional sign-in with Google (OAuth). Google shares your basic profile with us when you use it. | |
| Telnyx | Delivers WhatsApp messages between you, RenovAI, and your suppliers when you use the WhatsApp channel. |
| AI providers (via OpenRouter) | When you ask RenovAI to extract data from an uploaded floor plan, invoice, receipt, or quote, the document is sent to an external AI model (currently Mistral models, routed through OpenRouter) for processing. Only the document being processed is sent — not your whole account. |
Why we process it
- To provide the service: storing your home and project data, threading supplier conversations, generating quote requests, and extracting structured data from documents you upload.
- To authenticate you: sending one-time sign-in codes by email, or verifying your Google sign-in.
- To improve the product and fix bugs: analytics and error tracking.
- To power AI features you invoke: document extraction and MCP agent access (see below).
We do not sell your data or use it for advertising.
AI agents and MCP tokens
You can create MCP tokens in your settings to connect AI assistants (such as Claude) to your RenovAI account. An MCP token grants the connected agent read and write access to your projects, suppliers, finances, and documents. Anything you do through a connected agent is processed by that agent's AI provider under its own terms. Treat MCP tokens like passwords — anyone holding a token can access your data. You can revoke tokens at any time in settings.
Cookies and local storage
RenovAI uses browser storage as follows:
- Authentication tokens — stored in your browser's local storage so you stay signed in.
- PostHog analytics — sets a cookie and/or local storage entries to recognize returning visitors and tie together events in a session (production only; analytics are disabled in development).
- Error reporting session ID — a random ID in session storage so we can group errors from the same browsing session. It is not tied to your identity.
- Interface preferences — layout settings (such as documentation sidebar width) in local storage.
We do not use third-party advertising cookies.
Retention
Your data is retained for as long as your account is active. During the beta we keep uploaded files and extracted records until you delete them or your account is deleted. Analytics and error data are retained according to PostHog's standard retention. When your account is deleted, we delete your data from our systems within a reasonable period, except where a processor's backups take longer to cycle out.
Your rights
You can view, edit, and delete your projects, suppliers, documents, and other records directly in the app — the product gives you full create, read, update, and delete control over your own data. In addition, you can:
- Request access — a copy of the personal data we hold about you.
- Request deletion — full deletion of your account and all associated data.
- Request correction — of anything you cannot edit yourself in the app.
To exercise any of these, email support@renovaiapp.com. We will respond as soon as we reasonably can during the beta.
Changes
This is a beta policy and will change before general availability. We will update the "last updated" date above when it does, and flag material changes in the product.
Contact
Questions about this policy: support@renovaiapp.com.