Draft — this text is being finalised and reviewed. Highlighted parts are still to be completed.

Privacy policy

Last updated: 2026-10-01. This document is currently available in English; translations will follow.

UraWise helps homeowners and the contractor they choose agree on a renovation and keep a shared record of it. This policy explains what personal data we handle, why, who can see it, how long we keep it and what your rights are.

1. Who is responsible

The controller of your personal data is [Legal name of the operator — your name as sole trader, or the company name], [Postal address], [Country of the operator] ([Business registration / VAT number, if any]). Contact: [Contact email for privacy questions].

2. What we collect

• Account: name, email address, password (stored only as a secure hash by our sign-in provider), whether you are a homeowner or contractor, and your language.
• Profile (optional): photo, city, country, address and phone number.
• Project content: project details and address, the agreement (scope, price, payment milestones, dates), milestones and their progress, change requests and approvals with timestamps, materials, messages, attachments and photos.
• Passport (contractors, optional): the profile and projects you choose to publish.
• Payments (contractors): your plan and its status. Card details are handled by Stripe; we never see or store your card number.
• Partner program: who you referred and when, their plan status, calculated earnings and payouts made to you.
• Notifications: if you turn them on, a technical address for each device so we can send push notifications.
• Messages to the UraWise team and our replies.
• Technical data: server logs (such as IP address and time of a request) kept by our hosting provider for security, and — only if you accept analytics and advertising cookies — usage statistics and ad measurement.

3. Why we use it, and on what legal basis

• To provide UraWise (your account, projects, agreements, notifications, subscription): performance of our contract with you.
• Security, preventing abuse and fraud (for example self-referrals in the partner program), support and improving the service: our legitimate interests.
• Analytics and advertising measurement, push notifications, publishing a Passport and showing a project on a contractor’s Passport: your consent, which you can withdraw at any time.
• Bookkeeping and tax records for payments: legal obligation.

4. Who can see what

• The other party on a project sees the project content. Your contact details (phone, address, email) are shown to them only once you are both on the same project.
• Everyone can see a contractor’s Passport if the contractor publishes it. A project appears there only if the homeowner allowed it, and never with the homeowner’s name or address.
• The UraWise team can see account details, project details and project photos to give support, check quality and keep the service safe. Every such access by an administrator is recorded in a log. Message contents are not shown to administrators.
• Partners see a shortened name (for example “Maria K.”), role and plan status of people they referred — not their projects.

5. Service providers

We use the following providers, who process data on our behalf under data processing agreements:

• Neon (database and sign-in) — currently hosted in the United States (AWS us-east-1).
• Vercel (hosting and file storage for photos and attachments).
• Resend (sending emails: notifications and reminders about your projects, and — unless you turn them off on your Account page or with the link in each one — occasional emails about new features and tips).
• Stripe (subscription payments).
• Anthropic (Claude AI) — to draft text and suggestions, which you always review before anything is saved or sent. This happens when you press an AI button (“Write with AI”, “Tidy up”, “Fill in the form”), when you give the voice assistant a command (what you said, plus the project’s milestones, open changes and latest messages), when you upload a quote to fill in an agreement (the file is read and not stored), and — for contractors who leave the AI helpers on — when a project message is checked for extra work or a weekly update is drafted from the project’s activity. It is not used to train AI models. Speech recognition and read-aloud run in your browser.
• Your browser’s speech recognition — when you press “Speak”, dictation is handled by your browser or device (for example Google in Chrome, Apple in Safari) under their terms; UraWise only receives the resulting text.
• Google (Analytics and Ads measurement) — only if you accept analytics and advertising cookies.
• Browser push services (Apple, Google, Mozilla) deliver notifications to your device if you turn them on.

Where data is transferred outside the EU/EEA, it is protected by the EU–US Data Privacy Framework where the provider is certified, or by the European Commission’s Standard Contractual Clauses.

6. How long we keep data

• Your account and content are kept while your account exists.
• When you delete your account, your sign-in, profile details, photo, notification devices and messages to the UraWise team are deleted immediately, and projects only you were on (without an agreement) are deleted. Projects shared with another person stay available to them as their record of the work, with your name replaced by “Deleted user”.
• Backups are kept for a limited time and then deleted.
• Payment and bookkeeping records are kept for as long as the law requires.

7. Your rights

You can access, correct and delete your data (most of it directly in the app under Account, including deleting your account), receive a copy of your data, restrict or object to processing based on legitimate interests, and withdraw consent at any time. Write to [Contact email for privacy questions]. You can also complain to a data protection authority, for example where you live or [Data protection authority in the operator’s country].

8. Cookies

Necessary cookies keep you signed in and remember your language and cookie choice. With your consent we also use analytics and advertising cookies (Google Analytics and Google Ads), to see which pages help people and which ads bring visitors. You can change your choice at any time with “Cookie settings” at the top of this page.

9. Children

UraWise is for adults. You must be at least 18 to create an account.

10. Changes

If we change this policy in a way that matters, we will tell you in the app or by email before the change takes effect.