This notice explains how Phiqo handles personal data when you browse the public site, create an account, upload project information, buy credits, or contact support.
Who controls the data
Phiqo is the controller for the personal data described in this notice.
If you have a privacy question or need a manual review, contact contact@phiqo.com.
What data we collect
Depending on how you use the product, Phiqo may process:
- account details such as your email address, sign-in provider, display name, and internal user identifier
- property planning details such as postcode, property type, room selections, floor-plan geometry, and notes you enter
- images and documents you upload, including room photos and floor plans
- billing and entitlement records such as credits purchased, checkout status, and ledger history
- support submissions such as contact form content, issue descriptions, and project identifiers you choose to include
- technical and product usage information such as app state needed to continue a session, return-flow state, and attribution parameters when they are present in the page URL
Where the data comes from
Phiqo receives data:
- directly from you when you enter project details, upload files, or send support requests
- from your authentication provider when you sign in
- from payment and checkout providers when a purchase or checkout return is completed
- from data suppliers or derived services that help produce property context, market, energy, or planning-related outputs
Why we use the data
Phiqo uses personal data to:
- create and secure your account
- generate room-by-room renovation guidance and supporting outputs
- save project history and let you reopen prior work
- process payments, credits, and checkout returns
- send requested product emails such as result delivery or account-return flows
- respond to support and issue reports
- measure product performance and understand marketing attribution where that attribution is present
- defend legal claims, enforce terms, and prevent misuse
Lawful bases
Phiqo generally relies on:
- contract, where data is needed to provide the service you asked for
- legitimate interests, where Phiqo needs to operate, secure, improve, or measure the service in a proportionate way
- legal obligation, where records must be retained or disclosed to comply with law
Storage and similar technologies
Phiqo uses browser-side storage and similar access technologies to run the product. Current categories include:
- essential local persistence for saved app state and draft workflow progress
- authentication and session storage used to keep you signed in securely
- return-flow state used for login, email-return, and checkout restoration
- attribution storage used to remember the most recent visit source when attribution parameters are present
At the time of this notice, these technologies are used to operate the requested service rather than to run a separate advertising or marketing cookie stack. If non-essential analytics or marketing technologies are introduced later, Phiqo should add consent controls at the same time and update this notice.
Sharing and processors
Phiqo may share data with service providers that help operate the product, including:
- hosting and database providers
- authentication providers
- payment and billing providers
- email delivery providers
- analytics or attribution tooling when enabled
- AI or enrichment providers used to produce requested outputs
These providers only receive the categories of data needed for their role.
Phiqo does not sell personal data.
International transfers
Some providers may process data outside the UK. Where that happens, Phiqo should rely on appropriate transfer safeguards such as adequacy decisions or standard contractual protections.
Retention
Phiqo keeps data for as long as it is reasonably needed to:
- provide the service and maintain your account
- preserve project history and purchased entitlements
- investigate support issues or abuse
- keep records needed for finance, tax, or legal compliance
Retention periods may differ by data type. Uploaded project materials and support records may be deleted earlier where they are no longer needed.
Your rights
Depending on your location and the applicable law, you may have rights to:
- request access to your personal data
- request correction of inaccurate data
- request deletion of data in some circumstances
- object to some processing based on legitimate interests
- request restriction or portability in some cases
Contact contact@phiqo.com if you want to make a privacy request.
Complaints
If you are in the UK and believe your data has been handled unlawfully, you may also complain to the Information Commissioner’s Office.
Updates
Phiqo may update this notice when the product, legal obligations, or provider set changes. When changes are material, the effective date on this page will be updated.