Privacy notice

What we collect: your email address and password (stored securely by our authentication provider), an authenticator-app factor if you turn on two-factor authentication, the properties you research, notes you save, saved calculations, auction lots you track, saved searches and watchlist items, in-app notifications, support messages, and billing records (card details are held by Stripe, never by us). We also log usage counts (for plan limits) and IP-based rate-limit counters, which are deleted within a day.

Why: to provide the service, enforce usage limits, prevent abuse, take payment and meet legal obligations.

Property data: reports use public and licensed datasets. We do not identify private owners unless you buy an official title register, and we do not build profiles of individuals.

Processors: Supabase (database and authentication), Vercel (hosting), Stripe (payments), Anthropic (AI summaries — only property evidence is sent, never your account details), and Resend (alert emails, only if enabled). Map tiles are loaded from OpenFreeMap, which receives your IP address as any web request does.

Cookies and visit counting: we use only strictly necessary cookies to keep you signed in and secure. We count visits ourselves without cookies or any storage on your device: we record the page, the website that linked to us, campaign tags in the link, device type and clicks on key buttons. We never store your IP address; to count each visitor once per day we use a one-way code made with a random value that is deleted after two days, so visits can't be linked across days or traced back to you. If your browser sends Do Not Track or Global Privacy Control, we don't count your visit at all. Visit records are deleted after 13 months.

Homeowners: our public area pages list recent sales recorded by HM Land Registry. You can ask us to hide your home from them; you don't need an account. Emails given with a request are deleted 90 days after we decide it.

Investors Club (members' rooms): if you join, we store the club name you choose, when you accepted the room rules, your messages and any reports you make. Other members see only your club name and messages, never your email. Messages are encrypted in transit and at rest, but they are not end-to-end encrypted: our moderators can read messages that are reported or that we need to review to keep the rooms safe and lawful. Messages are kept while your account is open and deleted when you delete it, and they are included in your data download. To make the club work offline, recent messages are saved in your browser on your device; signing out clears them.

Quotes from trades: if you ask for quotes from the works planner and tick the consent box, we share that job (measurements and quantities, and your budget only if you choose), your postcode district (for example LS6, never your full address) and the name, email and phone you enter with up to 3 local tradespeople registered with us. They may use them only to quote for that job. If you register as a tradesperson, we store your business details and areas, and show your business name, phone and website to customers you're matched with.

Your rights: access, correction, deletion and objection under UK GDPR. You can download all your data or delete your account yourself from Account → Your data, or contact us through Support. You can also complain to the Information Commissioner's Office (ico.org.uk).

Retention: account data is kept while your account is open and deleted when you delete your account. Billing records are kept for the period required by UK tax and accounting law (typically six years), without your account link after deletion. Error logs are kept for 180 days, source health logs and read notifications for 90 days, and rate-limit counters for one day.

We never: sell personal data, build lists of private owners, deceased people or people in financial difficulty, or use your research to contact anyone. Your details only go to trades when you ask for quotes and agree.