PropVerdict Ltd (company number 17390081, registered office 44 Mallard Way, Sudbury, CO10 0YQ) is the data controller responsible for your personal data when you use PropVerdict AI (“we”, “us”, “our”). This policy explains what personal data we collect, why, and your rights over it, in line with the UK GDPR and the Data Protection Act 2018.
If you have questions about this policy or want to exercise your rights, contact us at legal@prop-verdict.com.
PropVerdict Ltd is registered as a data controller with the UK Information Commissioner’s Office (ICO), registration reference {{ICO_NUMBER}}.
1. What personal data we collect
Account holders (subscribers): name, email address, password (stored as a salted hash, never in plain text), business name and branding details if you set up white-label features, and billing information — though full card details are handled directly by Stripe and never reach our own servers.
Report recipients (your clients, if you use white-label or “email to client” features): name (where provided), email address, and any personal note you choose to include when sending a report.
Everyone who uses the Service: technical data such as IP address, browser type, and pages visited, collected automatically via cookies and similar technologies — see our Cookie Policy for full detail and how to control this.
Property report content itself is not personal data about you — it relates to a property, and where it includes information sourced from public registers (for example, Land Registry sale prices), that data is published under an open licence and is not something we collect about you as an individual.
We do not knowingly collect personal data from anyone under 18, and the Service is not directed at children.
2. How and why we use your data
| Purpose | Data used | Lawful basis |
|---|---|---|
| Creating and managing your account | Name, email, password | Performance of a contract |
| Processing subscription payments | Billing details (via Stripe) | Performance of a contract |
| Generating and delivering reports, including emailing them to your clients on your instruction | Report recipient name/email, note text | Performance of a contract (with you) / legitimate interests (in facilitating the service you’ve asked us to provide to your client) |
| Customer support | Any data you share with us when contacting support | Legitimate interests in resolving your query |
| Improving and securing the Service | Technical/usage data | Legitimate interests |
| Sending you service updates or marketing (only where you’ve opted in) | Email address | Consent |
| Complying with our legal obligations (e.g. tax records) | Billing records | Legal obligation |
3. Who we share your data with
We share personal data with the following categories of recipient, only as needed to provide the Service:
- Stripe, Inc. — payment processing.
- Resend — our transactional email provider, used to deliver reports and account emails, including to report recipients you choose to email.
- Supabase — our database, authentication, and file storage provider, which hosts account data, report data, and uploaded business logos.
- Google (Google Maps Platform) — used to resolve addresses, imagery, and certain environmental data points shown in reports; this involves sending the property address (not your personal data) to Google’s APIs.
- Professional advisers (e.g. our accountant or solicitor), where necessary.
- Law enforcement or regulators, where we are legally required to disclose data.
We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.
A full list of our sub-processors, kept current, is available on request at legal@prop-verdict.com — business customers with a signed Data Processing Agreement are notified of any change to this list in advance, as set out in that agreement.
4. International transfers
Some of our providers (for example, Stripe and Google) may process data outside the UK, including in the United States. Where this happens, we rely on appropriate safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement or the provider’s own adequacy-recognised transfer mechanisms.
5. How long we keep your data
- Account data: retained for as long as your account is active, and for a period after cancellation, in case you wish to reactivate, after which it is deleted or anonymised, save for records we must keep for accounting purposes (typically 6 years under UK tax law).
- Reports and shareable links: retained for a period after generation, after which they are deleted or the shareable link is disabled.
- Report recipient data (client name/email you’ve sent a report to): retained only as long as needed to deliver the report and for a reasonable period afterward for support purposes, then deleted.
6. Your rights
Under UK GDPR you have the right to: access the personal data we hold about you; have inaccurate data corrected; have your data erased in certain circumstances; restrict or object to certain processing; receive your data in a portable format; and withdraw consent at any time where we rely on consent. To exercise any of these rights, contact legal@prop-verdict.com. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk) if you believe we have not handled your data properly — we’d appreciate the chance to resolve it directly first.
7. Security
We use industry-standard technical and organisational measures to protect personal data, including encryption of data in transit (HTTPS/TLS across the Service), access controls, and secure hosting via reputable infrastructure providers. No system is perfectly secure, and we will notify affected individuals and, where required, the ICO, in the event of a personal data breach that poses a risk to your rights and freedoms, in line with our legal obligations.
8. Cookies
See our separate Cookie Policy for full details of the cookies we use and how to manage your preferences via Cookie Settings.
9. Changes to this policy
We may update this policy from time to time; material changes will be notified to account holders by email or via a notice within the Service. The “last updated” date at the top of this page always reflects the current version.
10. Contact
Data protection queries: legal@prop-verdict.com. General queries: info@prop-verdict.com. Postal address: 44 Mallard Way, Sudbury, CO10 0YQ.