Legal

Privacy Policy

Effective date: March 20, 2026  |  Last updated: March 20, 2026

1. Who We Are

Routenza ("Routenza," "we," "us," or "our") is a home maintenance management platform that helps homeowners, landlords, and property managers track appliances, maintenance tasks, warranties, and documents for their properties.

This Privacy Policy applies to the Routenza mobile application, website at routenza.com, and all related services (collectively, the "Service").

2. Information We Collect

Information You Provide Directly

• Account information: Name, email address, and password when you create an account.
• Property data: Addresses, property names, and descriptions you enter.
• Asset and appliance data: Brand names, model numbers, serial numbers, purchase dates, and other details about your home's appliances and systems.
• Photos and documents: Images of appliance labels, receipts, warranties, and manuals that you upload.
• Maintenance records: Task completion notes, service dates, and related comments.
• AI chat messages: Messages you send to the "Ask Huddy" AI advisor.
• Shared access: Email addresses of people you invite to share a property.

Information Collected Automatically

• Usage data: Features you use, screens you visit, buttons you tap, and in-app actions — collected via PostHog analytics.
• Device information: Device type, operating system version, and app version.
• Session data: Login times and session duration.
• Log data: Server-side request logs including IP address and timestamps, retained for up to 30 days for security and debugging purposes.

Information We Do Not Collect

• We do not collect payment card numbers or financial information directly. Any future payment processing will be handled by a PCI-compliant third-party provider.
• We do not sell your personal information to third parties.
• We do not use your data to serve you third-party advertising.

3. How We Use Your Information

We use the information we collect to:

• Create and maintain your account and authenticate you securely.
• Provide the core Service: storing your property data, generating maintenance schedules, and managing documents.
• Process appliance photos and label images using AI vision to extract product information on your behalf.
• Power the "Ask Huddy" AI advisor by sending your questions and relevant property context to our AI provider.
• Send email reminders for upcoming maintenance tasks (only if you have enabled email notifications).
• Analyze how the Service is used in aggregate to improve features and fix bugs.
• Comply with legal obligations and enforce our Terms of Service.

4. Third-Party Service Providers

We work with the following sub-processors who may handle your data on our behalf. Each is bound by a data processing agreement consistent with applicable law.

OpenAI (AI Processing)

We send appliance photos and your "Ask Huddy" chat messages to OpenAI's API to provide AI-powered features. OpenAI processes this data under their API data usage policies. By default, OpenAI does not use API-submitted data to train their models. See OpenAI's Privacy Policy.

Cloudinary (Image Storage)

Photos and documents you upload are stored and served using Cloudinary's cloud storage platform. See Cloudinary's Privacy Policy.

PostHog (Analytics)

We use PostHog to collect anonymized usage analytics. PostHog is configured to capture in-app events such as feature usage and navigation patterns. No browsing history outside our app is collected. See PostHog's Privacy Policy.

Neon (Database Hosting)

Your account and property data are stored in a PostgreSQL database hosted on Neon's serverless platform. See Neon's Privacy Policy.

Amazon Associates (Affiliate Links)

Some maintenance task recommendations include affiliate links to products on Amazon.com. If you click these links and make a purchase, we may earn a small commission at no additional cost to you. Amazon collects data independently when you visit their site. See Amazon's Privacy Policy.

5. Data Retention

We retain your personal data for as long as your account is active. Specifically:

• Account data: Retained until you delete your account.
• Property, asset, and maintenance data: Retained until you delete that data within the app or delete your account.
• Uploaded photos and documents: Deleted from Cloudinary within 30 days of you removing them from the app, or upon account deletion.
• AI chat history: Retained for 90 days to support conversation context, then deleted.
• Analytics data: Aggregated usage data is retained for up to 2 years for product improvement purposes.
• Server logs: Retained for up to 30 days, then automatically purged.

6. Security

We implement reasonable technical and organizational measures to protect your information, including:

• Passwords stored as bcrypt hashes — we never store plaintext passwords.
• All data transmitted over HTTPS/TLS encryption.
• Session tokens managed server-side with secure, HTTP-only cookies.
• Access to production databases restricted to authorized personnel only.

No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at privacy@routenza.com.

7. Your Rights

Regardless of where you are located, you have the following rights with respect to your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal data. You can delete individual assets, properties, and documents from within the app. To request full account deletion, contact us at privacy@routenza.com.
• Portability: Export your data at any time using the "Export Data" option in the app's Settings screen (CSV format).
• Opt-out of analytics: You can disable analytics tracking in the app's Settings screen under "Privacy."
• Withdraw consent: Where we rely on your consent to process data, you may withdraw it at any time.

8. GDPR — European Economic Area Users

If you are located in the European Economic Area (EEA), Switzerland, or the United Kingdom, the following applies:

Legal Bases for Processing

• Contract performance: Processing your account and property data is necessary to deliver the Service you signed up for.
• Legitimate interests: We process usage analytics data to improve the Service. You may object to this processing at any time.
• Consent: We rely on consent for sending marketing communications and for optional analytics tracking.
• Legal obligation: We may process data to comply with applicable law.

Data Transfers

Your data may be transferred to and processed in the United States, where our servers and key sub-processors (OpenAI, Cloudinary, Neon, PostHog) operate. Where such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where required by GDPR.

Your GDPR Rights

In addition to the rights described in Section 7, EEA/UK residents have the right to:

• Lodge a complaint with your local data protection authority (DPA).
• Object to processing based on legitimate interests.
• Request restriction of processing in certain circumstances.

To exercise any of these rights, contact us at privacy@routenza.com. We will respond within 30 days.

9. CCPA — California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) grant you additional rights.

Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information as defined by the CCPA:

• Identifiers (name, email address, IP address)
• Personal records (property addresses, appliance details)
• Internet or electronic network activity (app usage data)
• Photos and documents you upload
• Inferences drawn from the above to generate maintenance recommendations

We Do Not Sell or Share Your Personal Information

Routenza does not sell your personal information to third parties, nor do we share it for cross-context behavioral advertising purposes. You have the right to opt out of any future sale, though no such sale currently occurs.

Your CCPA Rights

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt Out: Opt out of the sale or sharing of your personal information (we do not currently sell or share data, but you may make this request).
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

To submit a CCPA request, contact us at privacy@routenza.com or use the "Export Data" or deletion features within the app.

10. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at privacy@routenza.com and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (if you have provided one) or by displaying a notice within the app. The "Last updated" date at the top of this page always reflects when the policy was most recently changed. Your continued use of the Service after any change constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: privacy@routenza.com
• General support: support@routenza.com

We aim to respond to all privacy inquiries within 30 days.