Privacy Policy

1. Scope
This Privacy Policy explains how Renomate collects, uses, discloses, stores, transfers, and protects personal data when you use our renovation project management services.

2. Singapore PDPA Context
Renomate is intended to operate in line with Singapore's Personal Data Protection Act 2012 (PDPA), including obligations relating to consent, purpose limitation, notification, access/correction, protection, retention limitation, transfer limitation, and accountability.

3. Personal Data We Collect
Depending on how you use Renomate, we may collect account and profile details (for example name and email), workspace and project data, timeline/budget records, uploaded files and images, collaborator and invitation data, billing/transaction data, device and log data, and support communications.

4. Data You Upload to Projects
Project content you upload can include addresses, contractor contacts, notes, documents, images, schedule updates, and financial records. You are responsible for ensuring you have the right to provide and share this data in your workspace.

5. How We Use Personal Data
We use personal data to operate and secure Renomate, authenticate users, provide project collaboration features, process billing, detect abuse, troubleshoot issues, improve performance, and meet legal/regulatory obligations.

6. Legal Bases / Consent
Where required by applicable law, we process personal data based on your consent, contractual necessity, legal obligations, and legitimate business interests (such as service security, abuse prevention, and product improvement).

7. Sharing and Disclosure
We may share personal data with trusted service providers (for example hosting, authentication, payment, analytics, and communications vendors) under appropriate contractual controls. We may also disclose information where required by law or to protect rights, safety, and platform integrity.

8. Workspace and Collaborator Visibility
Data inside a project or workspace may be visible to authorised collaborators based on roles and permissions. You should only invite people who are authorised to access that project information.

9. International Transfers
Where personal data is processed outside Singapore, we aim to apply safeguards required by applicable transfer rules under the PDPA and other applicable laws.

10. Retention
We retain personal data only as long as necessary for the purposes described in this Policy, including legal, accounting, tax, dispute, and security needs. After retention is no longer required, we delete, anonymise, or de-identify data where appropriate.

11. Security
We implement reasonable administrative, technical, and organisational safeguards to protect personal data from unauthorised access, use, disclosure, alteration, or loss.

12. Breach Notification
If a personal data breach is assessed as notifiable under applicable law (including PDPA requirements), we will notify affected parties and relevant authorities within required timelines.

13. Your Rights and Choices
Subject to law, you may request access to, correction of, deletion of, or export of your personal data, and may withdraw consent for certain processing activities. You may also manage some settings directly within your account.

14. Cookies and Similar Technologies
We may use cookies or similar technologies for authentication, security, performance, and analytics. Disabling some technologies may reduce functionality.

15. Children
Renomate is not intended for use by children who are not legally permitted to use the service under applicable law. If we become aware of unauthorised child data collection, we will take appropriate steps to remove it.

16. Policy Updates
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date and, where appropriate, additional notice.

17. Contact / Data Protection Requests
For privacy requests, contact privacy@renomate.sg.