Privacy
What Your Reno Works SG does with personal data held in MRN Quoter — its clients', and its staff's.
1 Who is responsible
MRN Quoter is the system Your Reno Works SG uses to run its renovation work: quotations, site visits, invoices and the records that go with them. The personal data in it belongs to Your Reno Works SG’s clients and staff, and Your Reno Works SG is the organisation responsible for it under Singapore’s Personal Data Protection Act.
This is not a subscription service with other customers on it. There is one firm here, and asking them is asking the right people.
2 What is collected
- Clients. Name, email, phone number and the address of the property being renovated — entered by staff, or captured by an enquiry form.
- The work. Quotations, variation orders, progress claims, invoices, payments, costs, notes and files, including photographs taken on site.
- Site-visit recordings. Audio of a walkthrough and its transcript. This captures a client’s voice, so it is the most sensitive thing here — see clause 4.
- Staff. Each person’s name, work email, job title and an optional photograph, plus the record of who did what.
- Signing in. Sign-in times and an audit trail of changes. Where someone signs in with Google, Google confirms they control the email address on their seat; nothing else is read from their Google account and no account is created from one.
3 Cookies
MRN Quoter uses necessary cookies to keep a person signed in and protect forms against cross-site request forgery. Browser storage also retains preferences and some draft work. Read the cookies and device-storage notice for details.
4 Recordings, and your consent
A site visit can be recorded only after the specialist confirms they have read you a fixed notice aloud and you agreed. The notice says what is captured, what it is for, that you can refuse, and that you can ask for it to be deleted later. The exact wording, its version, who obtained consent and how are stored against the recording — so what you agreed to is a record, not a recollection.
You can ask Your Reno Works SG to withdraw recording consent at any time. Authorised staff must use the relevant withdrawal and deletion controls to remove audio from the active application. Transcripts, extracted scope and backups need separate consideration, and the withdrawal itself is recorded so Your Reno Works SG can evidence how it was handled.
Audio is not deleted automatically. It stays until someone deletes it or you ask. If a specialist tells you the recording is destroyed once the quotation is written, that is a thing a person does — the software will not do it on its own.
5 Artificial intelligence
Some features send content to a model provider: drafting a quotation, screening messages for work that was never quoted, and turning a site-visit transcript into draft scope items. What is sent is the material being worked on — which for a site visit means a transcript of you speaking in your home.
The provider actually in use is named on the sub-processor list, which is read from this system’s own configuration rather than written down separately. Sprite voice can send microphone audio and relevant conversation context; spoken announcements can send notification text. Ilumax does not run a training pipeline using these records. External provider treatment depends on the account, settings and applicable agreement; read the AI and recording notice.
6 Who else touches it
Your Reno Works SG uses other companies to run this system — to store the database, host the application, render PDFs and more. Each is listed with what actually reaches it on the sub-processor page, which is part of this policy and is generated from this deployment’s live configuration.
The database is in Singapore. Some of those services operate outside Singapore, which means some data is transferred abroad.
Personal data is not sold, and it is not shared for anyone else’s marketing.
7 How long it is kept
| What | How long |
|---|---|
| Site-visit audio | Kept until deleted by authorised staff using the recording controls. Withdrawal requests are handled by the operating firm. Transcripts, extracted scope and backup copies require separate consideration. |
| Site-visit transcripts and the scope items drawn from them | Kept with the job, as part of its record. |
| Quotations, invoices, payments and the audit trail | Kept with the business records. The operating firm must apply the relevant tax, legal and business retention requirements; these records are not automatically purged by the application. |
Where the table says something is kept until deleted, that is literal: nothing expires on its own. Deleting is a thing someone does.
8 Your rights
You can ask what Your Reno Works SG holds about you, ask for it to be corrected, ask for a copy, or ask for it to be erased, or withdraw consent. The firm assesses the request, applicable exceptions and any legal duties to retain records before carrying out an authorised action. Deleting a contact does not erase every linked document or backup; read the privacy-request guidance.
Write to finance@yourrenoworks.com. If you are not satisfied with the response, Singapore’s Personal Data Protection Commission accepts complaints.
9 Security
Access is limited to the people Your Reno Works SG has invited, and to the permissions set for each of them. Passwords are hashed and never stored in a readable form. Credentials held on the firm’s behalf — such as an accounting connection — are encrypted. The application records audited actions. Backup and recovery arrangements depend on the configured hosting services and the firm’s operating procedures.
14 other companies are involved in running this system. No security measure is complete, and if a breach affects you Your Reno Works SG will tell you and the Personal Data Protection Commission as the law requires.
10 Changes
The date at the top identifies this version. The operating firm should communicate material changes through its appropriate staff or client channels, and obtain any additional consent required before using personal data for a new purpose. Publishing an updated notice alone is not that consent.