Privacy Policy

Who We Are

Proppys is operated by [Your Company Name Ltd], a company registered in England and Wales (Company No. [XXXXXXXX]), registered address [Your Address]. We can be contacted at hello@proppys.com.

What Data We Collect

We collect the following personal data when you use Proppys:

- Email address (when you create an account or sign in via magic link) - Full name (when provided during onboarding) - Investment preferences (strategy, budget, regions - provided voluntarily through the AI advisor or profile settings) - Usage data (pages visited, features used, search queries - collected automatically) - IP address and approximate location (for rate limiting and security purposes) - Payment information (handled entirely by Stripe - we never store card details)

How We Use Your Data

We use your data to:

- Provide and improve the Proppys service - Send you account-related emails (magic link sign-in, plan confirmation) - Send property alert emails if you opt in (Investor plan) - Personalise property recommendations via our AI advisor - Detect and prevent fraud, abuse, and unauthorised access - Comply with our legal obligations

Who We Share Data With

We share data with the following third-party service providers:

- Supabase (database and authentication) - EU-hosted (Frankfurt) - Anthropic (AI analysis features) - data processed for your query only, not stored by Anthropic for training - Stripe (payment processing) - PCI-DSS compliant - Sender.net (transactional email) - email address only - PropertyData.co.uk (market data API) - postcode queries only, no personal data

We do not sell your personal data to third parties.

Your Rights

Under UK GDPR, you have the right to:

- Access the personal data we hold about you - Correct inaccurate data - Request deletion of your data ("right to be forgotten") - Object to processing of your data - Request a copy of your data in a portable format

To exercise any of these rights, contact us at hello@proppys.com. We will respond within 30 days.

Cookies

We use essential cookies only - these are required for the site to function (session authentication). We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but this may prevent you from signing in.

Data Retention

We retain your account data for as long as your account is active. If you delete your account, your personal data is removed within 30 days. Anonymised usage data (no personal identifiers) may be retained for service improvement.

Changes to This Policy

We may update this policy from time to time. We will notify registered users by email of material changes. Continued use of the service after changes constitutes acceptance.