Privacy Notice

1. Who is responsible for your data

Domiqora AI is the legal seller and data controller for personal information processed to provide this service. This notice explains our purposes for using that information and the choices available to you. Paddle independently handles information needed for purchases as our Merchant of Record.

2. Information and purposes

• Account information: email address, account identifier, authentication information, and information supplied by a selected sign-in provider, such as a name. Used to create and secure your account, sign you in, associate records with you, and determine your plan.
• Household records: home address and property details, equipment and warranty information, tasks and completion history, notes, expenses, rooms, paint details, documents, contractor contacts and phone numbers, and reminder preferences that you choose to enter. Used to organize and synchronize your home records. Current reminder preferences do not send real email or phone reminders.
• Files and scan results: uploaded photos and PDFs, file names, file types, sizes, upload dates, and extracted details such as model numbers, amounts, or dates. Used to store and display attachments and, when you request a Premium AI scan, extract information for your records.
• Subscription records: your user identifier, payment-provider customer and subscription identifiers, plan, subscription status, and billing-period dates. Used to administer paid access and cancellation. We do not collect full payment card details in Domiqora AI; payment details are entered with Paddle.
• Technical and support information: devices and IP addresses involved in connecting to the service, session information, operational errors, and messages you send to support. Used to deliver and secure the service, diagnose problems, and respond to requests. Do not include sensitive information in support messages.

Only enter information you are entitled to share. Do not upload government identification, bank credentials, medical records, full card numbers, or other sensitive information. This service is intended for homeowners legally able to enter our Terms, not children.

3. Legal grounds for processing

Where applicable law requires a legal basis, we use contract performance to supply accounts, record storage, requested scans, and paid access; legitimate interests to protect the service, prevent misuse, diagnose problems, and answer support requests; consent where required for optional processing; and legal obligations for required records and lawful disclosures. You can choose not to upload files or request AI scans. We do not currently send marketing emails.

4. Service providers and data sharing

We use Lovable Cloud for hosting, authentication, database services, and file storage. Requested AI scans send the selected file contents, file name, and section to Lovable’s AI gateway and the OpenAI model used for extraction. Scan results are saved with your file record. AI-provider handling and retention are governed by their applicable service terms; we do not promise that every provider deletes all copies immediately or that no provider ever uses information for model improvement.

We share the information needed for checkout and subscription management with Paddle, our Merchant of Record, for sales, payments, invoicing, tax compliance, cancellations, and refunds. Paddle’s own notice describes its handling: Paddle Privacy Policy.

Other recipients may include hosting, security, diagnostic, or support providers needed to operate the service, professional legal or accounting advisers when necessary, and authorities when required by law. We do not sell your household records or use uploaded files for targeted advertising. Service providers may process information outside Canada or the United States; applicable safeguards and contractual protections are used where required by law.

5. Browser storage and cookies

Domiqora AI keeps a copy of household records in your browser’s local storage for signed-out and offline use. Signing in synchronizes records with your account online. Authentication also uses persistent browser storage to keep you signed in. Signing out does not necessarily erase the household copy from the browser, so take care on shared devices.

Essential storage and any preference cookies support sign-in and interface preferences. The app does not currently implement optional marketing cookies. Payment and sign-in providers may use their own cookies or storage when you use those services. You can manage cookies and site data in your browser; clearing them may sign you out and delete the local copy of records, but does not by itself delete your online records.

6. Retention and deletion

We keep your account information, household records, and uploaded files for as long as your account is open. When you ask us to delete your account, we delete those records and files within 30 days, including copies held in backups. Receipts, invoices, and subscription records are kept for 7 years because tax and accounting rules require it. Support messages are kept for as long as needed to resolve your request. We delete or anonymize information when it is no longer needed for those purposes.

You can remove supported individual records and uploaded documents using available controls. Removing a record may not remove every separate attachment. Cancelling Premium or signing out does not delete your account or online records. The app does not currently offer a self-service account-deletion button; send account and broader deletion requests to the privacy contact below.

7. Security

We use appropriate technical and organizational measures, including encrypted connections, account-based access controls, and private file storage with time-limited viewing links. Anyone with a valid viewing link may be able to access the file until that link expires, so do not share links to private content. No service can guarantee absolute security. Protect your credentials and the devices on which you store home records.

8. Your privacy rights

Depending on your location and applicable law, you may request access to, correction of, or deletion of personal information; receive a portable copy; object to or restrict certain processing; withdraw consent for consent-based processing; or appeal a decision where required. Withdrawing consent does not affect earlier lawful processing. You may also complain to the privacy regulator in your jurisdiction. We will verify requests appropriately and respond within legally required timeframes, without unlawful discrimination for exercising rights.

For Canadian users, rights may include access, correction, and withdrawal of consent, subject to legal limits. US state privacy rights vary and apply where the relevant law covers our service.

9. Contact and updates

Data controller: Domiqora AI. Privacy requests and complaints: domiqora@gmail.com.

We may update this notice when our practices change. The effective date above identifies the current version, and material changes will be communicated where required by law.