What we collect, and what we don't.

POZi is a project planning and sourcing tool. This page explains exactly what the app and the website store, who else sees it, and how to get rid of it. It is written to match what the software actually does.

What we collect

• Your email address, when you create an account. Passwords are handled by our authentication provider and we never see or store them.
• Your conversations with POZi Foreman — what you type and what Foreman replies — along with your Build Notes and item lists.
• Photos you take or upload to a project, stored in a private bucket that is not publicly readable.
• Your searches, and the ZIP code or approximate location you set, so results come from stores near you.
• Basic technical information that any web service receives, such as your IP address, which we also use to count usage for visitors who have no account.

We do not collect contacts, your photo library, precise background location, browsing history, or advertising identifiers. POZi carries no advertising and no third-party analytics or tracking.

Why we collect it

To run the service, and only that. Your conversations are stored so your projects are still there tomorrow and so Foreman can pick up where you left off. Photos are stored so they stay attached to the job. Usage is counted so plan limits work.

We review conversations in aggregate to find where Foreman gives poor answers and to improve it. We do not sell your data, and we do not share it for advertising.

Who else sees it

POZi is built on services that each handle one part of the job:

• Anthropic — receives what you send Foreman, including photos you ask it to analyse, in order to generate the reply.
• Supabase — stores your account, projects, conversations, and photos.
• Netlify — hosts the site and runs the server functions, and receives anything you send through the contact form.
• DataForSEO — receives your search terms and location to return product results.
• Stripe — handles payment if you subscribe. Your card details go directly to Stripe and never reach POZi. We store only the identifiers Stripe gives us so we know which account is subscribed.

We may also disclose information if the law requires it.

Photos

Photos live in a private store and are only reachable through short-lived links generated for your account. They are not public and are not indexed.

If you create a client share link, anyone holding that link can see the photos in that project, and the Build Notes if you chose to include them. Your Foreman conversations are never included in a share. You can turn a share link off at any time, which stops it working immediately.

Deleting your data

You can delete your account from inside the app. Doing so permanently removes your projects, Build Notes, item lists, photos, saved searches, conversation history, and your account record. If you have a paid plan, deletion cancels the subscription in the same step.

Backups may retain copies for a short period before being overwritten in the normal course of operating the service.

How long we keep it

We keep your projects and conversations while your account is open, so they are there when you come back. Delete your account and they go. We are working toward automatically removing older conversation records; when that is in place, this page will say exactly how long.

Children

POZi is built for construction and home improvement work and is not directed to children. We do not knowingly collect information from anyone under 13. If you believe a child has created an account, contact us and we will remove it.

Your choices

• Use POZi as a guest, without an account, for a limited number of messages.
• Skip setting a location — search still works, just without local results.
• Delete any individual project, or your whole account, at any time.
• Ask us for a copy of what we hold about you, or ask us to delete it.

Depending on where you live, you may have additional rights over your personal information, including access, correction, and deletion. Contact us and we will honour them.

Security

Accounts are protected by authentication tokens, and each account can only read its own data. Keys that grant broader access are held on the server and never shipped in the app or the website. No system is perfectly secure, and we will not pretend otherwise — but we do not collect anything we do not need, which is the best protection there is.

Changes

If this policy changes in a way that matters, we will update the date at the top and, for significant changes, tell you in the app.

Contact

Use the Contact link at the bottom of pozi.live for anything about this policy, including a request to access or delete your information.