Privacy Policy

Who we are

womiin is operated by WOMIIN GLOBAL INTELLIGENCE, Unipessoal Lda. ("womiin", "we", "us"), a company incorporated in Portugal (tax number / NIPC PT519311469). We are the data controller for the personal data described here.

We are based in Portugal, in the European Union; we do not publish a street address. You can reach us about privacy at support@womiin.com. This Policy covers the website, the browser extension, and our future mobile apps.

Data we collect

We collect the following categories of personal data:

• Account data: your email address and authentication identity (a password or Google sign-in), and profile preferences such as language, currency, and plan.
• Content you create: your missions, the property and accommodation listings and URLs you capture, your notes, saved preferences, and key locations.
• Billing data: the link between your account and your subscription and payments. Card details are handled by our payment processor and are not stored by us.
• Technical data: IP address, device and browser information, and server logs, together with first-party cookies and local storage used to keep you signed in and to remember your settings. From your IP address we also derive your approximate location (country level only).
• Extension data: when you click to capture a listing, the extension reads the content of the listing page you are viewing and sends it to us to extract the details and score the location. It does not read other pages.

The womiin Score itself is generated from a listing's location and from independent, public reference data — it is information about a place, not about you.

How we use it, and our legal bases

We use your personal data to:

• Provide the Service — create and manage your account, capture and store your listings, and calculate the womiin Score and related insights (legal basis: performance of our contract with you).
• Localize your experience — we set your initial language and currency from your browser's language settings and from the approximate country indicated by your IP address, and we show prices adapted to your country, including on our public pages before you sign in. You can change your language and currency at any time, and your billing country is confirmed from your payment details at checkout (legal basis: our legitimate interest in a localized experience and relevant pricing; for billing, performance of our contract and our legal obligations).
• Improve location data for everyone — listings captured through the Service may be reused, without identifying you, to avoid duplicate work and improve coverage for other users (legal basis: our legitimate interest in an efficient, accurate Service).
• Process payments and issue invoices (legal basis: performance of our contract, and our legal obligations under tax law).
• Provide support and respond to your requests (legal basis: performance of our contract, and our legitimate interest).
• Keep the Service secure, prevent abuse, and maintain reliability (legal basis: our legitimate interest).
• Send service messages and, where you have opted in, marketing communications (legal basis: our legitimate interest, or your consent).

Where we rely on consent, you can withdraw it at any time, without affecting processing already carried out.

Who we share with

We do not sell your personal data. We share it only with the service providers that help us run the Service, and only to the extent needed for the purposes described above:

• Supabase — our database, authentication, backend functions, and file storage.
• Vercel — website hosting, content delivery, and cookieless analytics.
• Stripe — payment processing and subscription management.
• Google — AI extraction and synthesis (Gemini); a geocoding fallback used only when our own geocoder cannot resolve an address; and Maps and Street View in the signed-in Real View feature.

We also rely on a certified e-invoicing provider in Portugal, as required by Portuguese tax law. A full list of our sub-processors is available on request at support@womiin.com.

We may also disclose data where required by law, or to establish, exercise, or defend legal claims.

Separately, the womiin Score is built on independent public data sources and wellbeing frameworks (for example OpenStreetMap, Copernicus, and the World Health Organization, among others). These are sources we read from to compute scores — they do not receive your personal data.

International transfers

Most of our providers are located in the European Union. Some are in the United States (Stripe, and Google for AI extraction, the geocoding fallback, and maps). Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards — the EU–US Data Privacy Framework where the recipient is certified, and/or the European Commission's Standard Contractual Clauses.

How long we keep it

We keep your account and content data for as long as your account is active, and until you ask us to delete it.

Invoices and related billing records are retained for the period required by Portuguese tax law, even after your account is deleted.

Aggregated, de-identified market data derived from platform activity — for example anonymous price and score data points used to keep market statistics and the womiin Score meaningful — is retained and is not linked to your identity. Scores and facts are recorded as they were at the time of calculation and are not later re-attributed to you.

Your data protection rights

Under the EU General Data Protection Regulation (GDPR) you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected (rectification);
• have your data erased — see Delete your account;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent where we rely on it.

To exercise any of these, email support@womiin.com from your account address. You also have the right to complain to your local supervisory authority; in Portugal this is the Comissão Nacional de Proteção de Dados (CNPD).

The womiin Score is decision-support about places. It does not make automated decisions about you that produce legal or similarly significant effects, so the Article 22 rules on automated individual decision-making do not apply.

If you are in the United Kingdom, the UK GDPR gives you equivalent rights, and you may complain to the Information Commissioner's Office (ICO). If you are a California resident, you have rights under the CCPA/CPRA to know, delete, and correct your personal information and not to be discriminated against for exercising them; we do not sell or "share" personal information as those terms are defined under California law.

Cookies and similar technologies

We use a small number of first-party, strictly-necessary items: a cookie that remembers your chosen language, local storage that remembers your display preferences, and the cookie that keeps you signed in. These are required for the Service to work.

For analytics we use Vercel Analytics, which is cookieless. If Google Analytics is enabled, it runs in a consent-denied, cookieless mode by default. We do not currently set any non-essential cookies that would require your prior consent. If that changes, we will introduce a consent banner and a "Cookie Settings" control before any such cookies are used.

The browser extension

The extension has a single purpose: to read and score the property or accommodation listing on the page you are currently viewing.

When you click to capture, it reads that page's content in your browser and sends it to us to extract the listing details and calculate the womiin Score. Captured listings may be reused across users to improve coverage and avoid duplicate work, without linking that content to your identity.

The extension requests the following browser permissions, each used only for that single purpose:

• Read the current page (host access, "activeTab", and "scripting"): to read the listing content when you choose to capture it.
• Storage: to keep your sign-in token and preferences on your device.
• Alarms: to schedule occasional background checks, such as price re-checks.
• Notifications: to alert you to price changes or removed listings you are following.
• Tabs: to open and manage the minimised tab used to read a listing.
• declarativeNetRequest: to set the request headers needed to read listing pages reliably.

The extension is granted access to all sites ("all_urls") because property and accommodation listings exist on thousands of different portals worldwide. It stays inactive on pages that are not listings, and only reads a page when you ask it to.

Our use of data accessed through the browser extension adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. We use that data only to provide and improve the extension's single purpose, and we do not sell it or use it for unrelated purposes.

Children

The Service is not directed at children. It is intended for users who are at least 16 years old, or the minimum age of digital consent in their country. We do not knowingly collect personal data from children; if you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this Policy

We may update this Policy from time to time. We will post the updated version here and change the date shown above; significant changes will also be communicated through the Service.

Contact

Questions about this Policy or your personal data? Email support@womiin.com.