Privacy notice · last updated 25 September 2026
How Stavo handles your information
Stavo is a site record for building work. Builders photograph the work as it goes up, file the photographs against the inspection stages that Building Control, the SAP assessor and the structural warranty inspector need, and share the record with the client and each of those people on that job. This notice says what Stavo holds, why, who sees it, and what you can ask of us.
Stavo is provided by Cropston Contracts Ltd, a company registered in England and Wales, company number 10334923, whose registered office is at 4 Bank Court, Weldon Road, Loughborough, Leicestershire LE11 5RF. You can reach us at [email protected]. We are the controller of the account information described below. For the content of a job's record, the builder or developer who runs that job decides what goes in it and who is on it; we hold it on their behalf. Where a council or other organisation signs a data processing agreement with us, we process its officers' information on its behalf under that agreement.
What we hold
| About you | What it is | Why |
|---|---|---|
| Your account | Your name, email address, the company you gave, your role (builder, developer, client, Building Control officer, SAP assessor or structural warranty inspector), and a scrambled form of your password that cannot be turned back into it. Sessions are held on our servers in a scrambled form too. | To sign you in and show you the jobs you are on. Contract. |
| The record | Everything a builder puts on a job: the site address, the client's name, photographs and videos with the date, time and map position they were taken at and who took them, inspection stages and sign-offs, messages, documents and signatures, quotations, variations and payment requests. | This is the product: a record of the work for the people on the job. Contract, and the builder's legitimate interest in keeping an evidence record. |
| Professional details | For a Building Control officer: the council or approver you work for, your Registered Building Inspector number, and a work phone, email and office address. For a warranty inspector: the provider, your reference, and the same contact details. | So the people on your jobs, the client included, know exactly who is inspecting the work. Shown only to the people on those jobs. Legitimate interest. |
| Working hours | The days and hours you are willing to be contacted. | So nothing reaches you outside them. |
| Technical | Your IP address, browser and device type, and the pages and calls you make, in the ordinary logs of the services that host Stavo. | To keep the service running and secure. Legitimate interest. |
| Access log | When you sign in or out, a refused sign-in to your address, when you open a job's record or a file on it, and when you take a report away — with the time and your IP address. Kept for 12 months, then deleted. | So that who has seen a job's record can be answered if it is ever asked, and misuse of an account can be spotted. Legitimate interest. |
Photographs carry a small Stavo mark in one corner. The date, time and position are stored as data beside each photograph, not only drawn on it, so a record can be checked.
Who sees what
Each person sees only the jobs they are named on, and only the part of them their role needs. The builder or developer who runs a job sees the whole of their own record, and a builder brought onto a developer's job sees the whole of that job. A client sees their own job: its progress, the client conversation, documents shared with them, the quotation, variations and payment requests. A Building Control officer sees the inspection stages and their evidence, and the Building Control conversation. A SAP assessor sees the EPC evidence and the EPC conversation. A structural warranty inspector sees the warranty stages, the photographs filed to them and the warranty conversation. A builder brought onto a developer's job never sees another builder's prices. Nobody sees another builder's jobs. These rules are enforced on our servers, not only on your phone.
We do not sell information, share it with advertisers, or use it for advertising.
Who helps us run Stavo
Stavo runs on services that process information on our behalf, under contracts that require them to protect it:
- Cloudflare — serves the app and the API and stores photographs and files.
- Neon — the database that holds accounts and the record, in the European Union.
- Resend — sends the email when you ask to reset a forgotten password.
- OpenStreetMap — draws the street map behind a photograph's location, and finds a job's position from its address when the job is set up. Your device fetches the map for the area shown directly from OpenStreetMap; no name or account is sent. Where an address is not found, postcodes.io is asked for the postcode alone.
- Google Fonts — serves the typeface to the web pages; your browser fetches it directly from Google.
- Apple and Google — if you install the app from their stores, they handle the purchase and the app's delivery under their own terms.
Where a service stores information outside the UK, it does so under the UK's rules for international transfers, including the standard contractual safeguards.
On your device
The app keeps a copy of the part of the record you may see, and a queue of anything you did with no signal, so it works on site. Signing out clears the copy from that device once the queue has been sent. Photographs taken in the app are held on the device until they have reached the record and afterwards as a cache.
How long we keep it
Your account, and the record of each job, for as long as the account and the job exist. Anyone can delete their own account from Settings in the app, or ask us by email: see Delete your account. A builder can also ask us to delete one job's record. Deletion from the live service is immediate when done in the app and within 30 days when asked by email, and from backups within a further 90. Some records, such as a signed document or a sign-off, may need to be kept for the people on the job, and the builder may keep an export before deletion.
Your rights
You can ask us for a copy of the information we hold about you, to correct it, to delete it, to send it to you in a form you can take elsewhere, or to stop using it in a particular way. Write to [email protected]. We answer within a month. If you are not satisfied, you can complain to the Information Commissioner's Office at ico.org.uk.
Security
Passwords are stored in a scrambled form that cannot be reversed. Every request is checked against who you are and which jobs you are on. Photographs and files are held in private storage and served only to members of that job through the same checks. Sign-ins are limited to slow down guessing. More detail is on the security page.
Children
Stavo is for people working on and commissioning building work. It is not for anyone under 16.
Changes
If this notice changes in a way that matters, we will say so in the app and update the date at the top.