Privacy policy

1. Who is responsible

PROPINDEX LTD is the controller of the personal information described here. We are registered in England and Wales, company number 17554359.

Business address: 66 Paul Street, London, EC2A 4NA. Email hello@propindex.co.uk for privacy questions or rights requests.

2. Information you provide

Account information includes your email address, optional display name, account identifier and authentication records. Supabase handles authentication.

If you use Google sign-in, Google supplies authorised identity information, including your email and basic profile. This login does not request Gmail or Google Calendar access.

Available features can process property searches, saved research, preferences, tracker criteria, calendar entries, contacts, tasks and Chronos prompts.

Seller report inputs can include property details, listing text, photographs and supporting evidence. Orders also create payment, consent and access records.

Support correspondence contains the information you send us. Avoid unnecessary sensitive information or information about other people.

Stripe collects payment details through its payment interfaces. We use payment identifiers and outcomes to manage subscriptions and access.

3. Technical information and browser storage

We process request times, IP-related signals, browser information, errors and usage counts for operation, security and abuse prevention.

Operational logs can contain information from requests and tool operations. Do not put credentials or confidential personal information in research inputs.

Session cookies support authentication. Browser storage also supports preferences, recent research and your analytics choice.

Optional Google Analytics loads only after analytics consent. Rejecting analytics does not prevent ordinary website use. Change your choice through Cookie settings.

See our Cookie policy for more information about browser storage and optional analytics.

4. Property records from other sources

We use listing observations and public or licensed property records, including recorded sales, EPC information and address identifiers.

Some property records and business contact details can relate to identifiable people. Public availability does not remove data protection rights.

Property-data services can receive the address or search information needed to answer a request. Contact us to question a record’s accuracy or use.

5. Why we use information

We use account, order and requested-feature information to provide our contract with you or take steps you request before a contract.

Required account details are necessary to create and operate an account. Without those details, we cannot provide the corresponding account service.

Our legitimate interests include securing the service, preventing abuse, answering support requests and providing reliable property research.

We consider your rights when relying on legitimate interests. You can object to processing based on those interests.

We process information when necessary to meet legal obligations, including applicable accounting and tax requirements. Optional analytics relies on consent.

Account creation is not consent to unrelated marketing. Withdrawing analytics consent does not affect earlier lawful processing.

6. Service providers and AI

Railway hosts the application. Supabase provides database and authentication services. AWS SES sends account emails. Stripe handles billing.

Upstash supports rate limits and usage controls. Microsoft 365 handles correspondence. Google provides optional sign-in, Maps services and consent-based analytics.

PropertyData and other stated public or licensed property sources support property lookups. The information sent depends on the requested lookup.

When an AI feature is available, Anthropic can receive prompts and selected evidence to interpret requests or prepare explanations.

OpenAI can receive selected listing wording, facts and photographs for seller listing reviews. Do not submit material you lack permission to use.

AI providers can retain inputs and outputs for service operation, safety or legal reasons. Disabling response storage does not guarantee zero provider retention.

Provider retention depends on the service, feature, applicable agreement and account controls. We do not claim a special zero-retention arrangement.

We may disclose information when required by law or necessary for legal claims. Any business transfer requires appropriate protection of personal information.

7. International processing

Our production Supabase database is in a European region. Providers and their subprocessors can also process information outside the UK.

A database region does not mean all processing, support access or backups are limited to the UK or Europe.

Provider processing terms include transfer provisions where applicable. Transfers require the protection applicable under UK data protection law.

Contact hello@propindex.co.uk for information about the safeguards applicable to your information and how to obtain relevant details.

8. How long we keep information

We retain account details, saved research and preferences while needed to operate your account and the features you request.

Saved seller reports remain in the account after interactive access expires. Account closure and valid deletion requests can affect continued report access.

We assess support records, security logs and payment evidence by purpose, outstanding disputes, security needs and applicable legal obligations.

We use Supabase-managed daily database backups. These backups do not include files held through Supabase Storage. We do not keep separate external database copies.

Deleting an active record does not immediately remove it from an existing backup. Provider backup retention and replacement cycles also apply.

Restoration can reintroduce previously deleted records. Any restoration must take account of valid deletion requests and retained legal obligations.

Browser-stored information can remain on your device until cleared. Clearing it does not close your account or cancel a subscription.

9. Your rights and account closure

Depending on the circumstances, you can request access, correction, erasure, restriction or portability of your personal information. You can also object to relevant processing.

Email hello@propindex.co.uk to make a rights request or request account closure. We may need proportionate information to verify your identity.

We assess the request, any active subscription and information that must remain for a lawful reason. Closure does not automatically erase required payment evidence.

You can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint. Contacting us first is not a condition of complaining.

Property research estimates are not designed to make legally significant automated decisions about you.

10. Security, children and policy changes

Access controls and protected server credentials help secure information. No internet service can guarantee absolute security.

The service is for adults aged 18 or over. Tell us if you believe a child has supplied personal information.

We update this policy when relevant processing changes. The version and review date on this page identify the notice you are reading.