DRAFT — pending legal review before publication. Items marked 【待填】/[TBD] are not decided yet.
The CONWE Privacy Policy — Draft
Version: draft dated 2026-10-10. Effective date: 【待填：effective date】
Operating company: 【待填：legal company name】
This draft uses only the data categories specified in the handoff task. Actual data flows and legal review are pending. It is not an effective policy. The rights and handling principles below are proposed terms, not a claim that every related interface is available.
1. Data collected
When you provide information or use the relevant services, this policy covers:
| Category | Data and source |
|---|---|
| Account | Name, Email and telephone number you provide. |
| Property listings | Property information and photographs you provide. |
| Identity and authority | Identity and authorization documents you submit. |
| Chat | Messages you send through the service. |
| Service requests and work reports | Service requests and work-report photographs you submit, including time and location. 【待填：whether time/location comes from manual entry, photo metadata or the device, and required permissions】 |
| Transactions | Transaction records supplied by you or authorized personnel. |
| Receipts | Receipt photographs you upload for AI recognition of amounts. |
No additional data categories are introduced by this draft. Actual handling must be checked before publication; this draft is not evidence that a data inventory has been verified.
2. Purposes
Account details support account identification and service contact. Listing details and photographs support property information and related services. Identity and authorization documents support identity and authority checks. Chat messages support communication between participants. Service requests, report photographs, time and location support arranging services and checking progress. Transaction records and receipt photographs support recording and checking amounts.
AI-recognized amounts may be incorrect. A person should check the original receipt before using a result; recognition is not proof of successful payment. 【待填：AI provider, data submitted, human review process and whether data is used for model training; do not claim either training or no training until confirmed】
【待填：applicable grounds for processing, matters requiring consent, and the effects of refusal or withdrawal】
3. Retention
Data should be retained only for the period needed for the stated purposes, then deleted or rendered non-identifiable through a confirmed process. Actual periods remain unconfirmed:
| Category | Period and starting event |
|---|---|
| Account | 【待填：account lifetime and period after closure/deletion】 |
| Listing details and photographs | 【待填：period after withdrawal or end of service】 |
| Identity and authorization documents | 【待填：period after review or expiry of authority】 |
| Chat messages | 【待填：period after conversation ends or account deletion】 |
| Service requests and report photos, including time/location | 【待填：period after completion or cancellation】 |
| Transactions, receipt photos and recognized amounts | 【待填：period after transaction ends and grounds for required retention】 |
【待填：backup clearing schedule, dispute-related retention scope, exceptions and notification process】. Unfilled periods must not be presented as a promise of immediate deletion of all copies.
4. Recipients
These are recipient categories to confirm, not a verified access-control list:
- Authorized participants in the same property, conversation, service or transaction: only information needed for that task. 【待填：fields visible to each role and public/private boundaries】
- Providers entrusted with storage, transmission or service support: 【待填：actual providers, data, purposes and processing regions】
- Receipt AI recognition provider: 【待填：name, data scope, retention and reuse restrictions】
- Authorities or legally authorized recipients where an applicable basis exists: 【待填：verification, minimum disclosure and notification procedure】
【待填：cross-border processing, destination regions and safeguards】. Sharing a platform does not automatically give different companies or roles access to each other's information. Check authorization before publishing property photos and avoid including identity documents or private receipts.
5. Your rights
You may request access, a copy/export, correction, and deletion of your account and related data. Where applicable, you may request withdrawal of consent or restrictions on processing.
Request channel: 【待填：working request method/URL】; see section 6 for contact information.
【待填：identity verification, response times, export format/scope and authorized representative process】. Verification should use only necessary information and should not request your password.
A deletion request should explain effects on account access and unfinished services. If some data must be retained, its scope, reason and duration should be disclosed. 【待填：account-deletion entry point, procedure and retention exceptions】. This draft does not claim one-click deletion, immediate deletion or a complete export of every data category is available.
6. Contact
Legal company name: 【待填：legal company name】
Company address: 【待填：company address】
Telephone: 【待填：company telephone】
Privacy Email/contact: 【待填：privacy Email and responsible contact】
7. Updates
Revisions should identify the version and effective date, explain material changes and notify users through an available channel. 【待填：public policy URL, prior versions and actual notification method】. Updating policy text does not replace any consent required for a change.
The three language versions should remain aligned. 【待填：process for language discrepancies; do not assume a prevailing language】
Data flows in the running system
- Hosting and storage: the site, database and files are hosted on Cloudflare (Workers, D1, R2). [TBD: processing regions]
- Address search: text you type in the address field is sent to OpenStreetMap Nominatim to find coordinates.
- Receipt reading: receipt photos you upload are sent to Cloudflare Workers AI to read the amount; a person must check the result.
- Shared reports: when a manager shares a monthly report, anyone holding the link can view it and its attachments; sharing can be stopped at any time.
- Export and deletion: signed in, open “My account” to download your data and to request account deletion. [TBD: processing time]