Privacy Policy
Last updated 5 November 2026
Draft template for review. These terms must be checked by a solicitor, and the bracketed details completed, before Dwello takes payments from the public.
This policy explains what personal data Dwello collects, why, who we share it with, and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018).
1. Who We Are
[COMPANY NAME] Ltd is the controller of your personal data. Registered office: [REGISTERED ADDRESS]. ICO registration number: [ICO REGISTRATION NUMBER]. For anything about your data, email [PRIVACY EMAIL].
2. What We Collect
Information you give us
- Account: name, username, email address, password (stored encrypted), confirmation that you’re 18 or over, profile photo, cover photo, bio and general area.
- Your home: address, property details, purchase price and date, valuation, and any listing you import.
- Projects and money: projects, tasks, quotes, costs, payments, budgets, documents, links, photos and videos.
- Mortgage: lender, balance, rate, term and payments you choose to enter, and calculations you save.
- Messages to DwelloBot and the replies.
- Community: posts, comments, likes, boards and reports.
- Household: the email addresses of people you invite.
Information collected automatically
- Technical data such as IP address, browser and device type, and logs of errors and security events.
- How much of your AI allowance you use.
- Essential cookies, described in our Cookie Policy.
From others
- Stripe tells us whether payments succeed and your subscription status. We never receive your full card number.
- If you import a property listing, we read the public listing page you give us.
3. Why We Use It and Our Lawful Basis
| Purpose | Lawful basis |
|---|---|
| Running your account, projects, budgets, household sharing and DwelloBot | Contract |
| Taking payments and managing subscriptions | Contract; legal obligation (tax and accounting records) |
| Showing posts you choose to share publicly | Contract |
| Keeping Dwello secure, preventing fraud and abuse, moderating content | Legitimate interests |
| Improving Dwello using usage and error data | Legitimate interests |
| Service emails (sign-in, receipts, important changes) | Contract |
| Marketing emails, if you opt in | Consent (you can withdraw at any time) |
We don’t sell your data, and we don’t use it for advertising.
4. AI Features
When you use DwelloBot or the AI Valuation Analysis, the relevant project, cost and home details are sent to our AI provider, Anthropic, to produce a reply. Anthropic processes this data on our behalf and does not use it to train its models. AI output can be wrong; see our Terms of Service.
5. Who We Share It With
Our service providers process data for us under contracts that require them to keep it secure and use it only on our instructions:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, file storage, sign-in | UK (London) |
| Netlify | Website hosting | Global network, including the USA |
| Anthropic | AI for DwelloBot and valuations | USA |
| Stripe | Payments and subscriptions | UK, EU and USA |
| Google Fonts | Website fonts (receives your IP address when fonts load) | Global |
Other Dwello users see what you post publicly and your public profile. People in your household see the homes and projects you share with them. We may also share data if the law requires it, to protect people’s safety, or as part of selling or reorganising the business.
6. International Transfers
Where data goes outside the UK, we rely on UK adequacy regulations, the UK International Data Transfer Addendum or the UK Extension to the EU–US Data Privacy Framework to protect it.
7. How Long We Keep It
- Account and project data: for as long as you have an account. When you delete your account we delete your records and files within 30 days, apart from backups, which are overwritten within a further 30 days.
- Payment and invoice records: 6 years, for tax and accounting.
- Security logs: up to 12 months.
- Content removed for breaking our guidelines: up to 12 months, in case of appeals or legal claims.
8. Your Rights
You have the right to: access your data; correct it; delete it; restrict or object to how we use it; receive it in a portable format; and withdraw consent where we rely on it. Most of your data can be edited or deleted in the app. For anything else, email [PRIVACY EMAIL]. We’ll reply within one month.
If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We’d appreciate the chance to put things right first.
9. Keeping It Safe
Data is encrypted in transit and at rest. Access is controlled so only you, and people you share with, can see your private records. Photos are resized in your browser, which removes location data, before they upload. Videos upload as they are, so turn off location tagging in your camera first.
10. Children
Dwello is for people aged 18 and over. We don’t knowingly collect data from children. Please don’t post photos of children.
11. Changes
We’ll update this policy when our practices change and tell you about significant changes by email or in the app.