Legal
Privacy Policy
Effective September 21, 2026
Canopy is operated by Canopy & Home Technologies LLC, a Florida limited liability company based in the Tampa Bay area (“Canopy”, “we”, “us”). This policy explains what we collect, what we do with it, what we refuse to collect, and what you can ask us to do.
What we collect
Account information. Your name, email address, phone number if you give it, password credentials, and the settings and preferences on your account.
Home and property information. The address and details of your home, such as year built, square footage, systems and appliances, model and serial numbers, service and maintenance history, warranty dates, insurance carrier and policy details, and mortgage details such as lender, loan type and term.
Documents you upload. Insurance policies, warranties, closing packets, inspection reports, appliance manuals, receipts, permits, HOA documents, photos of your home and its contents, and anything else you choose to put in your home record. We collect whatever is inside those files, including any personal information the file contains.
Documents partners deliver. Builders, title companies, homeowners associations, property managers and real estate agents can deliver documents into your home record. We collect those documents and the information in them, along with a record of which partner delivered what and when.
Vendor and service activity. Requests you make for vendor help, messages about a job, and the status and history of that work.
Conversations with Myles. The questions you ask, the answers Myles gives, and which documents were used to answer.
Device and usage information. IP address, browser type, device type and operating system, app version, pages and screens viewed, referring page, timestamps, crash and error logs, and general location inferred from IP address at the city or region level. We do not collect precise GPS location.
Payment information. If you buy a paid plan, our payment processor collects and holds your card details. We receive confirmation of payment, the last four digits, card brand and billing status. We do not store full card numbers.
Communications with us. Emails and support messages you send, and our responses.
What we do not collect
This is a firm product rule, not a preference. Canopy does not collect or store identity documents. That means no driver’s license, no passport, no Social Security card, no birth certificate, and no similar government identity document. We also do not collect identity document numbers, Social Security numbers or dates of birth.
Please do not upload those documents or enter those numbers. If one reaches us, we may delete it without notice. We do not need them to do our job and we do not want the risk of holding them.
We also do not collect precise geolocation, biometric information, or information about your health.
How we use what we collect
- To run your home record: store your documents, organize them, and show them back to you.
- To let Myles answer your questions about your home, generate summaries, and surface reminders and deadlines from your documents.
- To connect you with local vendors and manage the request.
- To accept documents from partners and place them in the right home record.
- To create and manage your account, authenticate you, and provide support.
- To send service messages, such as reminders, security notices and changes to this policy. We send marketing email only where we are allowed to, and you can unsubscribe at any time.
- To process payments for paid plans.
- To keep the Service secure, prevent fraud and abuse, debug, and monitor performance.
- To improve Canopy. Where we analyze usage to make the product better, we use aggregated or de-identified information wherever we can.
- To comply with law and to establish, exercise or defend legal claims.
How AI works at Canopy
When you ask Myles a question, the question and the relevant contents of your documents are sent to a third party AI model provider, over an encrypted connection, so the model can produce an answer. Today that provider is Anthropic, accessed through its commercial API. Only one AI provider receives your content.
Two things we commit to about that:
- Your documents and questions are not used to train the AI provider’s models.
- We do not send your content to any other AI provider, and we do not use your content to train a model of our own that would expose your information to anyone else.
Myles’s answers are informational. They are not legal, insurance, financial or contractor advice, and they can be wrong. Check the underlying document before you act on something that matters.
Who we share information with
We do not sell your personal information, and we do not share it for cross context behavioral advertising. We share it in these situations only.
Service providers (subprocessors). Companies that run parts of the Service for us, under contract, and only to do the work we hired them for:
| Category | What they do | Current provider |
|---|---|---|
| Hosting and application delivery | Runs the website and app | Vercel |
| Database and file storage | Stores your account, home record and documents (United States region) | Supabase |
| AI processing | Powers Myles’s answers | Anthropic |
| Email delivery | Sends account and service email | Resend |
| Payments | Processes paid plans and holds card details | Stripe |
| Advertising measurement | Measures our marketing pages and campaigns | Meta (advertising pixel) |
We update this list when our providers change. The advertising pixel runs on our public marketing pages only and never receives your documents or your home record.
Vendors you ask us to involve. If you request work on your home, we share what the vendor needs to do the job, such as your name, contact details, address and the description of the problem. Vendors are independent third parties.
Partners. A partner who delivers a document into your home record knows it delivered that document. We do not give partners access to the rest of your home record, and we do not give them your documents from other sources, unless you tell us to.
Legal and safety. When we are required to by law, subpoena or court order, or when we reasonably believe disclosure is needed to protect someone’s safety, our rights, or the security of the Service.
Business changes. If Canopy is involved in a merger, acquisition, financing or sale of assets, information may transfer as part of that transaction. The recipient stays bound by this policy for information about you, or we will tell you before a different policy applies.
We do not sell your personal information
We do not sell your personal information for money, and we do not trade it to third parties for their own marketing. Your home’s record is yours.
How long we keep information
We keep your home record and documents for as long as your account is active, because that is the point of the product.
When you close your account, you have 30 days to export your content. After that window we delete it from our active systems within 30 days. Copies held in encrypted backups are deleted as those backups expire on our normal rotation. We keep a limited set of records we are legally required to keep, such as transaction and tax records, and we may keep aggregated or de-identified information that cannot reasonably be used to identify you.
Security
We protect information with encryption in transit and at rest, access controls that limit who at Canopy can see what, logging, and a review of the providers we use. Our database is hosted in the United States.
No system is perfectly secure. Our refusal to store identity documents is part of the security design: the most dangerous category of data is one we simply do not hold.
Your choices and your rights
You can, at any time:
- See your information. Your home record is visible to you in the app, and you can ask us for a copy of the account information we hold.
- Correct it. Edit your account and home details in the app, or ask us.
- Delete it. Delete individual documents in the app, or ask us to close your account and delete your information as described above.
- Export it. Ask us for a copy of your documents and home record.
- Opt out of marketing email. Use the unsubscribe link, or write to us. We will still send service and security messages.
- Control tracking. See the cookies section below.
To make a request, write to hello@canopyhome.io from the email address on your account, or use the in app controls. We will respond within 45 days and will tell you if we need more time. We will not treat you differently for making a request. Depending on the request we may need to verify who you are, and we will do that without asking you for an identity document.
Depending on where you live, state privacy law may give you additional rights, such as the right to appeal a decision we make about your request. If we deny a request, we will tell you why and how to appeal.
Children
Canopy is for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has given us information, write to hello@canopyhome.io and we will delete it.
Florida residents and breach notification
Canopy is a Florida company and follows Florida’s security breach notification law, Fla. Stat. 501.171. If personal information covered by that law is breached, we will notify affected individuals no later than 30 days after we determine that a breach occurred, unless a federal, state or local law enforcement agency asks us to delay. If the breach affects 500 or more Florida residents, we will also notify the Florida Department of Legal Affairs within that same period, and if it affects more than 1,000 individuals we will notify nationwide consumer reporting agencies as the statute requires.
Florida residents also have rights under the Florida Digital Bill of Rights where it applies. Whether or not it applies to us, we honor the access, correction, deletion, portability and opt out requests described above.
Cookies and tracking
We use cookies and similar technologies to keep you signed in, remember your settings, keep the Service secure, and understand how our public marketing pages perform.
On our public marketing pages we use an advertising pixel from Meta that sets cookies and sends Meta information about your visit, such as the pages you viewed, your IP address and browser, so we can measure our advertising; we do not run this pixel on pages where you sign in, on pages where you fill in a form to contact us, or anywhere inside your home record, and it never receives your documents or the contents of your home record.
You can block or delete cookies in your browser settings, and most browsers and devices offer controls that limit tracking. Blocking cookies that keep you signed in will affect how the Service works. We honor Global Privacy Control signals on our website.
International users
Canopy is designed for people in the United States and our systems are located in the United States. If you use Canopy from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those where you live.
Changes to this policy
We can update this policy. If a change is material, we will post the updated policy with a new effective date and give you notice in the app or by email before it takes effect.
Contact
Canopy & Home Technologies LLC
hello@canopyhome.io