Privacy Policy

Last updated: April 2026

Note: This is a template. Replace this with a solicitor-drafted Privacy Policy before accepting paying users. You will also need a GDPR-compliant cookie consent mechanism.

1. Who we are

PropScout Limited operates the PropScout platform. We are the data controller for personal data collected through propscout.co.uk and our mobile application. Contact: noreply@propscout.co.uk.

2. Data we collect

  • Account data: email address, name, and authentication details (managed by Clerk)
  • Billing data: subscription status and payment history (processed by Stripe — we never see your card number)
  • Usage data: saved searches, watchlisted deals, portfolio properties, and session behaviour
  • Onboarding preferences: investment strategy, target areas, budget range, and experience level
  • Technical data: IP address, browser type, device information, and access logs
  • Push notification subscriptions (if you opt in): endpoint URL and encryption keys

3. How we use your data

  • To provide the PropScout service and personalise your deal feed
  • To process subscription payments and manage your account
  • To send deal alerts and digest emails based on your saved searches
  • To send transactional emails (welcome, trial ending, payment receipts)
  • To monitor service health, diagnose issues, and improve the platform
  • To comply with legal obligations (GDPR, anti-money laundering)

4. Legal basis for processing

We process data on the basis of contract performance (to provide the service you've subscribed to), legitimate interests (platform security and improvement), and consent where required (marketing emails, push notifications). You can withdraw consent at any time.

5. Third-party services

ClerkAuthentication and identity management
Neon / PostgreSQLDatabase hosting (EU region)
StripePayment processing (PCI DSS Level 1 certified)
ResendTransactional email delivery
VercelApplication hosting and CDN
PropertyData APIProperty data sourcing
Upstash RedisCaching layer

6. Data retention

We retain account data for the duration of your subscription plus 2 years for legal and accounting purposes. You can request deletion at any time — we will delete your data within 30 days subject to legal retention obligations.

7. Your rights (UK GDPR)

You have the right to:

  • Access your personal data (Subject Access Request)
  • Rectify inaccurate data
  • Erasure ('right to be forgotten')
  • Data portability
  • Object to processing
  • Withdraw consent at any time

To exercise any of these rights, contact noreply@propscout.co.uk. You also have the right to lodge a complaint with the ICO (ico.org.uk).

8. Cookies

We use essential cookies required for authentication (Clerk session cookies) and a small number of analytics cookies. A cookie consent banner will be implemented before public launch. You can manage cookies in your browser settings.