Privacy Policy

Who we are

womiin is operated by WOMIIN GLOBAL INTELLIGENCE, UNIPESSOAL LDA ("womiin", "we", "us"), a company incorporated in Portugal (tax number / NIPC PT519311469). We are the data controller for the personal data described here.

We are based in Portugal, in the European Union; we do not publish a street address. You can reach us about privacy at support@womiin.com. This Policy covers the website, the browser extension, and our future mobile apps.

Data we collect

We collect the following categories of personal data:

• Account data: your email address and authentication identity (a password or Google sign-in), and profile preferences such as language, currency, and plan.
• Content you create: your missions, the property and accommodation listings and URLs you capture, your notes, saved preferences, and key locations.
• Billing data: the link between your account and your subscription and payments. Card details are handled by our payment processor and are not stored by us.
• Technical data: IP address, device and browser information, and server logs, together with first-party cookies and local storage used to keep you signed in and to remember your settings. From your IP address we also derive your approximate location (country level only).
• Listing data read on your device: when you click to capture a listing, the womiin software you're using — the browser extension, or the mobile app — reads the content of the listing page you are viewing and sends it to us to extract the details and score the location. In the background it also reads listing pages that other womiin members have asked for, so the community can build shared location scores — you can turn that off at any time, on every plan, in Settings > Community. Those are the only pages whose content is sent to us. Separately, when the extension classifies a page as a listing and you are signed in, we receive that page's address so we can tell you whether it is already in one of your missions, whether the community has already scored it, and whether a previous community proposal for it was rejected. Those lookups are read-only: they do not save the page to a mission and do not create a visit-history record in our application, though ordinary security and server logs are generated as described above. Because the classification is automatic it is not perfect — on a property or accommodation portal it can occasionally treat another page, such as the site's own home or help page, as a listing. We do not receive the addresses of pages outside that classification, and we never receive or store your browsing history. Section 9 below describes how the extension classifies a page in the first place — that check runs locally, on your device.
• Community participation data: when you take part in womiin's community features — for example when your extension helps verify a listing's price for the community — we keep a record of that contribution linked to your account. Each record connects the member who contributed the check and the member whose listing was checked. We use these records to run the community features, prevent abuse, and for internal analytics. You can turn community participation off at any time, on every plan, in Settings > Community.

The womiin Score itself is generated from a listing's location and from independent, public reference data — it is information about a place, not about you.

How we use it, and our legal bases

We use your personal data to:

• Provide the Service — create and manage your account, capture and store your listings, and calculate the womiin Score and related insights (legal basis: performance of our contract with you).
• Localize your experience — we set your initial language and currency from your browser's language settings and from the approximate country indicated by your IP address, and we show prices adapted to your country, including on our public pages before you sign in. You can change your language and currency at any time, and your billing country is confirmed from your payment details at checkout (legal basis: our legitimate interest in a localized experience and relevant pricing; for billing, performance of our contract and our legal obligations).
• Improve location data for everyone — listings captured through the Service may be reused, without identifying you, to avoid duplicate work and improve coverage for other users (legal basis: our legitimate interest in an efficient, accurate Service).
• Process payments and issue invoices (legal basis: performance of our contract, and our legal obligations under tax law).
• Provide support and respond to your requests (legal basis: performance of our contract, and our legitimate interest).
• Keep the Service secure, prevent abuse, and maintain reliability (legal basis: our legitimate interest).
• Send service messages and, where you have opted in, marketing communications (legal basis: our legitimate interest, or your consent).

Where we rely on consent, you can withdraw it at any time, without affecting processing already carried out.

Who we share with

We do not sell your personal data. We share it only with the service providers that help us run the Service, and only to the extent needed for the purposes described above:

• Supabase — our database, authentication, backend functions, and file storage.
• Vercel — website hosting, content delivery, and cookieless analytics.
• Stripe — payment processing and subscription management.
• Google — AI extraction and synthesis (Gemini); a geocoding fallback used only when our own geocoder cannot resolve an address; and Maps and Street View in the signed-in Real View feature.
• Resend — transactional email delivery: the service emails we send you, such as the welcome email and account emails (email confirmation, password reset, sign-in links), are delivered through Resend, which processes your email address, your first name, and the content of those messages.

We also rely on a certified e-invoicing provider in Portugal, as required by Portuguese tax law. A full list of our sub-processors is available on request at support@womiin.com.

We may also disclose data where required by law, or to establish, exercise, or defend legal claims.

Separately, the womiin Score is built on independent public data sources and wellbeing frameworks (for example OpenStreetMap, Copernicus, and the World Health Organization, among others). These are sources we read from to compute scores — they do not receive your personal data.

International transfers

Most of our providers are located in the European Union. Some are in the United States (Stripe, and Google for AI extraction, the geocoding fallback, and maps). Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards — the EU–US Data Privacy Framework where the recipient is certified, and/or the European Commission's Standard Contractual Clauses.

How long we keep it

We keep your account and content data for as long as your account is active, and until you ask us to delete it.

Invoices and related billing records are retained for the period required by Portuguese tax law, even after your account is deleted.

Aggregated, de-identified market data derived from platform activity — for example anonymous price and score data points used to keep market statistics and the womiin Score meaningful — is retained and is not linked to your identity. Scores and facts are recorded as they were at the time of calculation and are not later re-attributed to you.

Your data protection rights

Under the EU General Data Protection Regulation (GDPR) you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected (rectification);
• have your data erased — see Deleting your account and data just below;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent where we rely on it.

To exercise any of these, email support@womiin.com from your account address. You also have the right to complain to your local supervisory authority; in Portugal this is the Comissão Nacional de Proteção de Dados (CNPD).

The womiin Score is decision-support about places. It does not make automated decisions about you that produce legal or similarly significant effects, so the Article 22 rules on automated individual decision-making do not apply.

If you are in the United Kingdom, the UK GDPR gives you equivalent rights, and you may complain to the Information Commissioner's Office (ICO). If you are a California resident, you have rights under the CCPA/CPRA to know, delete, and correct your personal information and not to be discriminated against for exercising them; we do not sell or "share" personal information as those terms are defined under California law.

Cookies and similar technologies

We use a small number of first-party, strictly-necessary items: a cookie that remembers your chosen language, local storage that remembers your display preferences, and the cookie that keeps you signed in. These are required for the Service to work.

For analytics we use Vercel Analytics, which is cookieless. If Google Analytics is enabled, it runs in a consent-denied, cookieless mode by default. We do not currently set any non-essential cookies that would require your prior consent. If that changes, we will introduce a consent banner and a "Cookie Settings" control before any such cookies are used.

The browser extension

Whatever womiin software you use only accesses a listing page when one of our users has chosen to save or track that specific listing — one page at a time, on that user's behalf. womiin never crawls or harvests portals in bulk, and never accesses listings that no user has brought into womiin.

This section describes how the browser extension does it.

The extension's single purpose is to help you save, evaluate and track the property or accommodation listings you choose — reading and scoring those listings, and no others.

Before it can offer to save a listing, the extension has to classify the page. Often the address is enough — the site is a known portal, or the URL has the shape of a listing page. When the address alone is not enough, the extension examines the page locally: on your device, inside your browser, it looks at the page itself to recognise whether it is a listing. That examination never leaves your device — its content is not sent to us, not stored, and not kept once you leave the page. What it produces is a local classification, used to decide whether the womiin button appears and which listing workflow to offer. This is what access to all sites is for: not to follow where you go, but so that a listing can be recognised on any of the thousands of portals that exist worldwide.

If the page is classified as a listing and you are signed in, the extension sends that page's address to us for read-only lookups: whether it is already in one of your missions, whether the community has already scored it, and whether a previous community proposal for that address was rejected. That is what lets the button show you an existing womiin Score instead of asking you to capture the page again. Because the classification is automatic it is not perfect — on a property or accommodation portal it can occasionally treat another page, such as the site's own home or help page, as a listing, and the address of that page would be sent in the same way.

Other than those address lookups, nothing from the page reaches us before you act. When you click to capture, the extension reads that page's content in your browser and sends it to us to extract the listing details and calculate the womiin Score.

The extension also does two kinds of work in the background, both using your own browser and your own network connection, in a minimised tab: it revisits the listings you saved or track, to re-check their price and notice when one is taken down; and, unless you have turned community contributions off, it reads listing pages that other members of the womiin community have asked for, so the community can build shared location scores. It works only from that list of specific addresses — it does not follow links, and it does not discover pages on its own. Some portals will not serve a listing to a tab that looks backgrounded, so — inside its own background tabs, and only there — the extension takes measures so the listing loads reliably, as it would for a person. This applies only to the tabs womiin opens for its own listing work; it is never applied to the pages you browse.

You can turn off community contributions at any time — on every plan, including Free — in Settings > Community. When off, the extension does no background work for other members. It continues to re-check the listings you saved yourself, which is the price tracking you asked for.

To protect users, the extension inspects the network address each of its background fetches resolves to. If a fetch resolves to a private or local network address, the extension discards the content: this prevents content served from a private or local address from being read by the extension or transmitted to womiin. The "webRequest" permission is used solely for this safety check on the extension's own background fetches; it is not used to watch, modify, or record the pages you visit.

Listing data captured through the extension may be reused for other members, to improve coverage and avoid duplicate work. When it is reused, we do not reveal the original member's identity to the member receiving it.

The extension requests the following browser permissions, each used only for that single purpose:

• Host access to pages: to run the local classification described above, to read a listing's content when you capture it, and to read the background listing pages described above.
• "activeTab": to read the current page's listing content when you act on the extension from the toolbar.
• "scripting": to run the extension's own code on a listing page in order to read it, and inside the minimised background tabs it opens for its own listing work.
• webRequest: to inspect the network address each background fetch resolves to and discard content served from a private or local network address. It is a safety check on the extension's own background fetches only.
• Storage: to keep your sign-in session and preferences on your device, together with the extension's own working data, such as its portal registry and the state of its background work.
• Alarms: to schedule occasional background checks, such as price re-checks.
• Notifications: to alert you to price changes or removed listings you are following.
• Tabs: to open the womiin sign-in page when needed, and to open and manage the minimised tab used to read a listing.
• declarativeNetRequest: to set the request headers needed to read listing pages reliably.

The extension is granted access to all sites ("all_urls") because property and accommodation listings exist on thousands of different portals worldwide, and we cannot know in advance which page will be one. That access is used for the local classification described above, to read a listing you choose to capture, and to read the specific background listing pages described above. It does not follow links or discover pages on its own — the only page content that reaches us is a listing a womiin user has chosen to save or track.

Our use of data accessed through the browser extension adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. We use that data only to provide and improve the extension's single purpose, and we do not sell it or use it for unrelated purposes.

Children

The Service is not directed at children. It is intended for users who are at least 16 years old, or the minimum age of digital consent in their country. We do not knowingly collect personal data from children; if you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this Policy

We may update this Policy from time to time. We will post the updated version here and change the date shown above; significant changes will also be communicated through the Service.

Contact

Questions about this Policy or your personal data? Email support@womiin.com.