Privacy Policy
1. Information We Collect
Personal Information: Email address, name, and account preferences when you register.
Usage Data: Search criteria, properties viewed, and service usage patterns to improve our platform.
Technical Data: IP address, browser type, device information, and cookies for security and functionality.
2. How We Use Your Information
Service Delivery: To provide property analysis, AI insights, and personalized investment recommendations.
Account Management: To manage your subscription, send service updates, and provide customer support.
Improvement: To analyze usage patterns and enhance our AI models and service features.
Communication: To send important service notifications and, with your consent, marketing communications.
3. Data Sharing and Disclosure
We do not sell your personal data. Your information may be shared only in the following circumstances:
Service Providers: With trusted third-party services (PropertyData API, Supabase, Vercel) necessary for platform operation.
Legal Requirements: When required by law, court order, or to protect our legal rights.
Business Transfers: In the event of a merger, acquisition, or sale of assets, with advance notice.
4. Data Security
We implement industry-standard security measures including encryption, secure authentication through Supabase, and regular security audits. All data is stored in secure, UK-based servers with appropriate access controls and monitoring.
5. Your Rights (UK GDPR)
Access: Request a copy of your personal data we hold.
Rectification: Request correction of inaccurate personal data.
Erasure: Request deletion of your personal data ("right to be forgotten").
Portability: Request transfer of your data in a structured format.
Objection: Object to processing based on legitimate interests.
Restriction: Request limitation of processing in certain circumstances.
6. Data Retention
We retain your personal data only as long as necessary to provide our services and comply with legal obligations. Account data is deleted within 30 days of account closure. Usage analytics are retained for up to 2 years to improve our services.
7. Cookies and Tracking
We use essential cookies for authentication and functionality, and analytics cookies (with your consent) to understand how you use our service. You can manage cookie preferences in your browser settings.
8. Third-Party Services
PropertyData API: For property listings and market data (see PropertyData privacy policy).
Supabase: For authentication and database services (see Supabase privacy policy).
Vercel: For hosting and deployment (see Vercel privacy policy).
9. Children's Privacy
Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information immediately.
10. International Transfers
Your data is primarily stored within the UK. Any international transfers are conducted with appropriate safeguards and in compliance with UK GDPR requirements.
11. Changes to This Policy
We may update this privacy policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or through our platform.
12. Contact Us
For any privacy-related questions or to exercise your rights, contact us:
Email: privacy@dealflowai.co.uk
Data Protection Officer: dpo@dealflowai.co.uk
Address: [Company Address to be added]
Last updated: 10/09/2025