Account privacy.

Who is responsible

VALO is operated by HelloValo OÜ, an Estonian company with registry number 17548110. HelloValo OÜ is the controller of the account information described in this notice.

For privacy questions or requests, contact hello@hellovalo.com.

Information we receive

With email sign-in, you provide an email address and password to our authentication service. With Google sign-in, we request your Google account identifier, email address and basic profile information, which can include your name and profile picture. Our authentication service stores account and identity metadata associated with that sign-in.

The Google permissions are limited to account identity, email and basic profile (openid, email and profile). We do not request access to your Gmail messages, Google Drive files or calendar. You enter your Google password with Google.

When preparing an office profile or requesting office access, you also provide business details, such as the office name, website, address, contact details, introduction or an explanation of your connection to the office.

How we use it

We use your account identity and verified email to sign you in, recognise your VALO account and check access to account features. Google sign-in alone does not give you access to an office. Office membership and permissions are checked separately.

We use the business information you submit to prepare and manage your office profile and handle registration or access requests. Your office’s public contact details are separate from your sign-in identity. Information you choose for a public office profile can be shown when that profile is published.

Services that handle your information

• Google handles Google sign-in and sends the account information needed to complete it.
• Supabase provides authentication and database storage, including account records and Google identity metadata.
• Vercel hosts VALO and its application services. Requests pass through its infrastructure to deliver the website and account features.

These services handle information needed to provide their part of the account flow. This notice does not mean that your sign-in information becomes a public office profile.

Account records and browser storage

Your account and office records are stored on our services separately from the current browser session. Signing out does not delete those records.

VALO holds the current account session in browser memory. Temporary storage in the browser tab links a Google sign-in to its return and can carry an office registration draft through that return. These temporary sign-in and draft records have validity limits; those limits are not deletion deadlines for server records, logs or backups.

If you want an account or its information removed, contact us. We review the request, including any records needed for office access, security, disputes or legal obligations, and explain any information that must be retained.

Your choices and requests

You can review or remove VALO’s connection in your Google Account connections. Removing the Google connection does not automatically delete your VALO account or information already held by VALO.

Contact hello@hellovalo.com to ask about your information or request access, correction or deletion. We may need to confirm your identity and authority over the account or office before acting on a request.

Homeowner information

This notice concerns account access and office registration. For the homeowner flow, see how contact details are shared when an owner asks an office to get in touch.