Privacy notice

Ranavation is operated by Rana IT Services (org. no. 932703270), Norway. Rana IT Services is the data controller for personal data processed through the website and app, and decides the purposes and means of processing. Contact: Support@Ranavation.no.

• Account data: name, email address, login credentials and profile picture.
• Project data: homes, address or location, project descriptions, photos, budgets and receipts.
• Conversations with Carpenter Ulf and messages to support.
• Usage and technical data: IP address, device and browser information, login times.
• Subscription status (plan and period). Card details are handled by Paddle, not by us.

• Providing the service and running your account, including AI planning: performance of a contract.
• Customer support and important account messages: performance of a contract.
• Security and preventing abuse and fraud: legitimate interests.
• Improving the service based on usage data: legitimate interests.
• Email marketing: consent, which you can withdraw at any time.
• Accounting and other legal requirements: legal obligation.

We never sell or rent personal data. We only share it with:

• Service providers (processors) such as Lovable Cloud for hosting, storage, email and AI features, who only process data on our instructions.
• Paddle.com, our reseller and Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing.
• Professional advisers such as accountants and lawyers.
• Authorities where required by law.

Our providers may process data in countries other than where you live, including outside the EEA and the UK. We protect such transfers with the EU Standard Contractual Clauses, the UK equivalent or an adequacy decision.

We keep your data for as long as you have an account. When you delete your account in Settings, all projects, photos, files and the login itself are deleted right away, and any active subscription is cancelled. Accounts that are never confirmed are deleted after 30 days. Accounts with no sign-in for three years get an email warning and are deleted 30 days later. Receipts and payment records are kept by Paddle under accounting rules, not by us. Technical logs are normally deleted within 90 days.

Wherever you live, you can ask to access, correct or delete your data and get a copy of it, and you can withdraw consent. If you live in the EEA or the UK you also have the right to restriction, data portability and to object, and you can complain to the data protection authority in your country. If you live in California or another US state with a privacy law, you have the right to know what we collect, to request deletion and correction, and not to be discriminated against. We do not sell or share personal data for advertising.

You can download all your data and delete your account yourself in Settings. Send other requests to Support@Ranavation.no. We reply within one month, or sooner if your local law requires it.

The service is not directed at children under 16 and we do not knowingly collect their data.

We use appropriate technical and organisational measures: encryption in transit (HTTPS/TLS), access controls so each user only sees their own data, and passwords are never stored in plain text.

We only use essential local storage for login, language and theme. We do not use analytics or marketing cookies. You can clear stored data in your browser settings.

We will tell you about material changes in the app or by email before they take effect.