Privacy Policy

1. Who We Are

Property Assistant ("we", "us", "our") is the operator of www.property-assistant.ai and the associated web application at app.property-assistant.ai.

We are a UK-based business providing an AI-powered property investment platform. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller of any personal data you provide to us.

2. Data We Collect

2.1 Data you give us directly

• Account registration: name, email address, password (hashed).
• Subscription & billing: payment information processed via our third-party payment provider (we do not store card details).
• Support requests: name, email, and the content of any message you send to us or via the Sol chatbot.
• Newsletter sign-up: email address.
• Deal data: property addresses, prices, financial figures and notes you enter into the platform.

2.2 Data we collect automatically

• Usage data: pages visited, features used, time on site, clicks and interactions.
• Device & browser data: IP address, browser type and version, operating system, screen resolution.
• Cookies and similar technologies: see Section 6.

2.3 Data from third parties

• Property data and market information sourced from publicly available datasets and licensed third-party providers.
• If you sign up via a referral link, we may receive limited information about the referral source.

3. How We Use Your Data

4. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

• Contract performance — to deliver the services you have signed up for.
• Legitimate interests — to improve our platform, prevent fraud, and send relevant product updates (where this does not override your interests).
• Consent — for marketing emails and non-essential cookies. You may withdraw consent at any time.
• Legal obligation — where we are required to process data to comply with the law.

5. Sharing Your Data

We do not sell your personal data. We may share it with:

• Service providers acting as data processors on our behalf (e.g. cloud hosting, email delivery, payment processing, analytics). These providers are bound by data processing agreements and may only use your data for the specific purpose we instruct.
• AI service providers — conversation data may be sent to AI model providers (e.g. Microsoft Azure OpenAI) to power platform features. No personally identifiable deal data is sent without your knowledge.
• Legal authorities — if required by law, court order, or to protect the rights and safety of users or others.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you in advance.

6. Cookies

We use cookies and similar tracking technologies on our website and platform. These fall into the following categories:

You can manage or withdraw your cookie consent at any time through your browser settings. Note that disabling certain cookies may affect platform functionality.

7. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations:

• Account data: retained while your account is active and for up to 2 years after closure.
• Billing records: retained for 7 years to comply with UK tax and accounting requirements.
• Support correspondence: retained for 2 years.
• Analytics data: typically retained for 14 months before aggregation or deletion.

When retention periods expire, data is securely deleted or anonymised.

8. Your Rights

Under UK GDPR you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") — ask us to delete your data in certain circumstances.
• Right to restrict processing — ask us to pause processing your data in certain circumstances.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests or for direct marketing.
• Rights relating to automated decision-making — not be subject to solely automated decisions that have a significant effect on you.

To exercise any of these rights, email us at team@property-assistant.ai. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include:

• Encryption of data in transit (TLS/HTTPS)
• Encryption of data at rest
• Access controls and authentication requirements
• Regular security reviews

No transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately at team@property-assistant.ai.

10. Children

Our services are not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email.

We encourage you to review this page periodically.

12. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or your personal data, please contact us:

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters.