Privacy Policy
Last updated: July 2026
What we store
Workspace data — projects, deals, budgets, tasks, contacts, and file metadata — lives in a Cloudflare D1 database. Uploaded files (walkthrough photos, receipts, documents) are stored in Cloudflare R2 object storage. Every record is tied to your workspace and isolated from other workspaces.
Sign-in & identity
You sign in with email and password or Google (Firebase Authentication). We store your user id, name, email, and a one-way password hash (never the plain password) so we can associate you with your workspace and team invites.
Analytics
We record first-party, anonymous product events — page views and call-to-action clicks — in our own database to understand which features get used. There are no third-party trackers, ad networks, or external analytics vendors on Rehabfolio.
AI processing
Content you submit to AI features (listing text, photos, receipts) is processed by third-party AI providers acting on our behalf. Details are on the AI disclosure page.
What we never do
- Sell your personal data or workspace data.
- Share workspace data with anyone other than the infrastructure providers required to run the service (Cloudflare, and AI providers only when you use AI features).
- Use your deals, comps, or numbers to train models.
Early access
Rehabfolio is in early access. Practices may evolve as billing and first-party authentication launch; material changes will be posted on this page with a new date.
Contact
Questions or deletion requests: [email protected] (placeholder contact — a dedicated support channel launches with billing).