Who we are
Akwist OÜ (“we”), an Estonian company (registry code 17365823, Sepapaja tn 6, 15551 Tallinn), runs Home Maison. Home Maison is the homeowner side of AssetOS, the software many installers use to run their jobs, and it runs on the same platform. You can reach us about your data at hello@assetos.io.
This notice covers the Home Maison app at my.home.maison. The website www.home.maison has its own privacy notice.
Who is responsible for what
Two kinds of information meet in Home Maison, and different people are responsible for each:
- Your account and what you add yourself (your own items, their documents and reminders): we are responsible for this, as the controller.
- What your installer hands over and their dealings with you (the items they fitted, their service history, your requests to them and their replies): this is part of your installer’s own records, and your installer is responsible for it. We hold it for them as their software provider, under contract. To ask about it, you can contact your installer or us; we’ll pass on anything that is theirs to answer.
What we collect and why
| What | Why | Legal basis |
|---|---|---|
| Account: your name, email address, time zone, when you joined and when you last used the app. If your installer invited you, the name, email address and phone number they have for you. | To create your account, sign you in, and show your items and reminders at the right local time | Our contract with you (the app’s terms) |
| What you add: items (name, room, brand, model, serial number, purchase date, retailer, price, warranty), reminders, and documents and photos you upload | To keep your items on file and remind you when they need looking at | Our contract with you |
| Requests to your installer: your message, how urgent it is, the name and phone number you give, photos you attach, and replies | To pass your request to your installer and show you their answer | Our contract with you, and with your installer |
| Notification contacts: the names and email addresses you add, and which emails each one gets | To send those people the reminders and summaries you chose. Only add people who are happy to receive them. | Our contract with you |
| Technical logs: IP address, browser, account identifiers, time of each request, and errors | To keep the app running and secure, and to investigate faults and abuse | Our legitimate interest in a working, secure app |
The app has no analytics or advertising trackers. We don’t sell your data, use it for advertising, or combine it with data from elsewhere.
What your installer sees
Each installer you’re connected to sees your name, email address and phone number, when you last signed in, the items they handed over, the requests you send them with any photos, and the notification contacts for their items.
Your installer does not see the items you add yourself, or their documents and reminders. If you’re connected to more than one installer, each one sees only what concerns them.
Emails we send
Sign-in codes and links, invitations from your installer, reminders when something is due, updates on your requests, and the summaries you or your installer switched on. They are all about your account and items; we don’t send marketing from the app. Settings lets you stop reminder emails for an installer’s items.
Who handles it for us
These companies process data on our behalf, under contract, and only to provide their service to us:
- Microsoft Azure hosts the app, its database and your files, in France.
- Stytch handles sign-in and sends sign-in emails. It receives your name and email address.
- Postmark (ActiveCampaign) sends the app’s other emails.
- PostHog stores our error and warning logs, which can include your IP address and account identifier.
Transfers outside the UK and EU
Stytch, Postmark and PostHog are based in the United States. Transfers rely on the EU–US Data Privacy Framework (and its UK extension) where the provider is certified, or on standard contractual clauses approved by the European Commission and the UK.
Cookies and storage
The app sets two cookies, only to keep you signed in: session_jwt (60 minutes) and session_token (7 days). It also keeps a few settings in your browser’s storage, such as your language, whether you’ve seen the welcome screen, and, for 15 minutes, the address a sign-in code was sent to. None of this is used for tracking, so no consent banner is needed.
How long we keep it
- Your account and what you add: for as long as you have an account. When an installer disconnects from you, your account and your own items stay.
- Your own items and documents that you delete: erased straight away, with their files.
- Records that belong to your installer (their items, service history, your requests to them): kept by your installer as part of their business records.
- Technical logs: 14 days.
- Backups: deleted data can stay in our backups until each backup expires. We don’t restore it from them, except to recover from a fault, and then we delete it again.
Deleting your account
You can delete your account yourself, under Delete my account in Settings. It can’t be undone. We delete your account and sign-in, and the items, photos, documents and reminders you added. We also remove your name, email address and phone number from your installers’ records, end your connection with them, and remove your notification contacts. If you can’t sign in, write to hello@assetos.io from the address on your account and we’ll do it for you.
Your installers keep their record of the work on the equipment they installed and the requests you sent them, without your name or contact details. Invoices they issued you keep your details, as the law requires.
Your rights
You can ask us to show you the data we hold about you, correct it, delete it, limit or object to how we use it, or give you a copy to take elsewhere. Write to hello@assetos.io from the address on your account; we answer within a month. For records that belong to your installer, we’ll pass your request on to them.
If you’re unhappy with how we handle your data, you can complain to our lead authority, the Estonian Data Protection Inspectorate, or to the authority where you live: the CNIL in France or the ICO in the UK, for example.
Children
Home Maison is for adults looking after a home. It isn’t meant for anyone under 16.
Changes
If this notice changes, we’ll update the date at the top. If a change affects how we use your data, we’ll tell you by email first.