Privacy Policy for tiRinnovo
This Privacy Policy describes how tiRinnovo ("we"), developed by tiRinnovo, accesses, uses, stores and discloses information, including Google user data, when you use our SaaS renovation assistant. tiRinnovo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Information We Collect
Account Registration
When you create an account, we collect: first name, last name, email address, business/company name, and password (stored in hashed form only). During onboarding, we may collect your phone number for SMS verification via Twilio. With your explicit consent, we may also use your phone number to contact you for free onboarding assistance.
Google Calendar Data
Google Calendar access is optional and only requested when you turn on calendar sync. Depending on the features you enable, we access:
- Your calendar events (read-only): the title, start time and end time of events in your calendars.
- Calendars created by tiRinnovo: for each project you choose to sync, we create a dedicated secondary calendar (named "tiRinnovo - <project name>") and read and write the events in it: titles, descriptions, dates, times and, only if you enable it, participants' email addresses. We cannot access or modify any other calendar you own through this permission.
How We Use Your Google Calendar Data
We access and use your Google Calendar data exclusively for the following purposes:
- To display your existing commitments in the tiRinnovo planning calendar, alongside your renovation project activities.
- To keep a dedicated tiRinnovo calendar per project in sync with your project's activities and events: changes made in tiRinnovo are written to that calendar, and changes you make to those events in Google Calendar (title, description, dates, deletion) are applied back to the matching activity in tiRinnovo.
The use of this data is strictly limited to delivering and improving the core planning and activity management features of our SaaS renovation assistant, which are visible and prominent in the application user interface. We do not use this data for advertising purposes, including retargeting, personalized or interest-based advertising. We do not allow people to read your Google user data unless you have provided explicit consent to view specific messages, files or other data.
Google User Data and Artificial Intelligence
We do not use Google user data to develop, improve or train generalized or non-personalized artificial intelligence or machine learning models, and we do not allow third parties to do so. Events from your own calendars (read-only) are never sent to AI providers. Activities synced back from a tiRinnovo-created calendar become part of your project data; if you use the tiRinnovo AI assistant, it may process that project data solely to answer your request, through our AI provider (OpenAI) acting as our data processor, which does not use it to train its models.
Legal Basis for Processing (GDPR Art. 6)
- Contract performance (Art. 6(1)(b)): Account creation, service delivery, subscription management.
- Legitimate interest (Art. 6(1)(f)): Security, fraud prevention, service improvement.
- Consent (Art. 6(1)(a)): Google Calendar data access, marketing communications. Withdrawable at any time.
- Legal obligation (Art. 6(1)(c)): Compliance with applicable laws.
Information Sharing and Disclosure
We do not sell your personal data. We do not transfer or disclose your Google user data to third parties for purposes other than those explicitly provided by our service, except as required by law, for security reasons (e.g., abuse investigations), or as part of a merger, acquisition or sale of developer assets, subject to explicit user authorization. Any internal transfers of Google user data are strictly limited to what is necessary to provide and improve user-facing features of our SaaS renovation assistant.
Data Retention and Storage
Events from your own calendars are read in real time to display them and are not stored on our servers. For calendars created by tiRinnovo, we store the calendar and event identifiers needed to keep them in sync, and changes you make to those events in Google Calendar are saved to the matching activities in your project. Your Google access tokens are stored encrypted. When you disconnect Google in tiRinnovo, we delete the stored tokens and sync settings; if you revoke access from your Google Account instead, syncing stops immediately. Synced activity data remains part of your project until you delete it or your account. You can request deletion of all your data at any time at hello@tirinnovo.com. We retain other personal information for a period consistent with our business purposes and legal obligations. Upon expiration of the retention period for a particular type of data, it will be deleted or destroyed.
Data Security
Security procedures are in place to protect the confidentiality of your data. We use industry-standard encryption to protect your information during transmission and storage.
Your Rights Under GDPR
If you are in the European Economic Area, you have the right to: access your data (Art. 15), rectification (Art. 16), erasure (Art. 17, "right to be forgotten"), restriction of processing (Art. 18), data portability (Art. 20), objection to processing (Art. 21), and withdrawal of consent (Art. 7). Contact us at hello@tirinnovo.com — we will respond within 30 days. You may also lodge a complaint with your local data protection authority (in Italy: Garante per la protezione dei dati personali).
You can manage or revoke our access to your Google Calendar data at any time through your Google Account settings.
Third-Party Services
- Twilio
- SMS verification for account onboarding
- Personal Data: Phone number
- Google Calendar (read-only)
- We display your existing events to help you coordinate renovation activities with your commitments.
- Personal Data: event titles, start and end times
- Google Calendar (calendars created by tiRinnovo)
- We create one calendar per synced project and keep its events in sync with your project activities in both directions.
- Personal Data: event titles, descriptions, dates and times; participants' email addresses (only if enabled)
- OpenAI (AI assistant)
- Processes your requests to the in-app AI assistant and the project data needed to answer them. API data is not used to train OpenAI models.
- Personal Data: messages to the assistant; project data relevant to the request
- SendinBlue
- Marketing Automation
- Personal Data: Usage data; email; Tracking Tools
- Payment Management: Stripe and PayPal
- Personal Data: various types of Data as specified in the service's privacy policy
- Calendly (website demo page, only with consent)
- Booking a demo call through the embedded calendar
- Personal Data: Cookies; Usage data; data you enter when booking (name, email)
- LinkedIn Insight Tag (website, only with consent)
- Measuring the results of LinkedIn Ads campaigns
- Personal Data: Cookies; Usage data
- LinkedIn Conversions API (app, only if you allowed LinkedIn on our website)
- If you sign up after clicking one of our LinkedIn ads, we report the signup to LinkedIn to measure the campaign
- Personal Data: email, first and last name (hashed, SHA-256); LinkedIn ad click identifier
- Umami (website and app statistics)
- Aggregated, anonymous statistics without cookies
- Personal Data: Usage data
- Font Awesome
- Personal Data: Usage data; Tracking Tools
Cookies
The website only sets third-party cookies for the services you allow in the banner, each chosen separately: Calendly (the demo booking calendar) and LinkedIn (measuring our ads). Until you allow Calendly, the demo page shows a plain link to book on calendly.com instead of the embedded calendar. Your choice is saved in your browser (12 months if you allow at least one service, 6 months if you reject all) and you can change it at any time from "Cookie preferences" at the bottom of every page. The website's fonts are hosted on our own servers and its statistics (Umami) use no cookies.
International Data Transfers
Some third-party providers (Twilio, Google, OpenAI, Calendly, LinkedIn) may process data outside the EEA. We ensure appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.
Contact Us
For any questions regarding this Privacy Policy, please contact us at hello@tirinnovo.com.
Data Controller: tiRinnovo - Via Garibaldi 42, 25087 Salò (BS), Italy
Last modified: October 10, 2026