Privacy Policy

1. Who we are

DeedSight (deedsight.com) is an AI-powered property intelligence platform based in England. For the purposes of data protection law, DeedSight is the data controller.

Contact: info@deedsight.com

2. What data we collect

Account information:When you register, we collect your name, email address, and password (stored as a hash — we never store your actual password). If you choose a paid plan, Stripe (our payment processor) collects your payment details directly. We do not store your card number.

Property searches: When you scan a property, we store the address or URL you searched, the analysis results, and any reports you generate. This is necessary to provide the service and allow you to access your history.

Usage data: We collect information about how you use the platform, including pages visited, features used, and scan counts. This helps us enforce plan limits and improve the service.

Technical data: We automatically collect your IP address, browser type, device information, and referring URL. This is used for security, troubleshooting, and analytics.

Communications: If you contact us by email, we keep a record of the correspondence.

3. How we use your data

We use your data to:

• Provide and maintain the DeedSight service, including property analysis and report generation
• Process payments and manage your subscription via Stripe
• Enforce usage limits based on your plan tier
• Send transactional emails (account confirmation, password reset, billing notifications)
• Improve the platform based on aggregate usage patterns
• Comply with legal obligations

We do not use your data for advertising. We do not sell your personal data to third parties.

4. Lawful basis for processing

Under UK GDPR, we process your data on these bases:

• Contract: Processing your account data and property searches is necessary to provide the service you signed up for.
• Legitimate interest: Usage analytics and security monitoring help us maintain and improve the platform.
• Legal obligation: We retain certain records (such as transaction history) to comply with UK tax and financial regulations.
• Consent: Where we send optional communications (such as product updates), we rely on your consent, which you can withdraw at any time.

5. Who we share data with

We share data only with the following service providers, all of whom process data on our behalf under appropriate agreements:

• Supabase (database hosting — servers in EU)
• Vercel (website hosting)
• Stripe (payment processing)
• Resend (transactional email delivery)
• AI model providers(for generating property analysis — we send property data, not your personal details, to AI services)

We do not share your personal data with other users. Your property searches and reports are private to your account, protected by row-level security.

We may disclose data if required by law, regulation, or court order.

6. Property data sources

DeedSight analyses properties using publicly available government and open records, including transaction, energy performance, environmental risk, and related public datasets. We do not access private property records. All data used in our reports is sourced from legitimate public datasets.

7. Data retention

• Account data: Retained for as long as your account is active, plus 12 months after deletion to allow for reactivation.
• Property searches and reports: Retained for as long as your account is active. You can delete individual reports from your dashboard.
• Payment records: Retained for 7 years after the transaction date, as required by UK tax law.
• Technical logs: Retained for 90 days, then automatically deleted.

8. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Object to processing based on legitimate interest
• Restrict processing in certain circumstances
• Withdraw consent where processing is based on consent

To exercise any of these rights, email info@deedsight.com. We will respond within 30 days.

9. International transfers

Your data is primarily stored in the EU (Supabase). Some processing may occur outside the UK through our service providers (Vercel, AI model providers). Where this happens, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK ICO.

10. Security

We protect your data with:

• Encryption in transit (TLS/HTTPS) and at rest
• Row-level security ensuring users can only access their own data
• Secure password hashing
• Regular security reviews

No system is perfectly secure. If you discover a security vulnerability, please report it to info@deedsight.com.

11. Cookies

DeedSight uses essential cookies required for the service to function (authentication, session management). We do not use advertising cookies or third-party tracking cookies.

12. Children

DeedSight is not intended for use by anyone under the age of 18. We do not knowingly collect data from children.

13. Changes to this policy

We may update this policy from time to time. We will notify registered users of material changes by email. The “last updated” date at the top of this page indicates the most recent revision.

14. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

15. Contact

For any questions: info@deedsight.com

DeedSight
England