Privacy Policy
Effective date: 12 May 2026 · Last updated: 12 May 2026
1. Who We Are
Homescanner ("we", "us", "our") is a UK-based property analytics platform operated by Homescanner Ltd, registered in England & Wales.
Registered address: [REGISTERED ADDRESS]
Contact email: hello@homescanner.co.uk
Website: https://homescanner.co.uk
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Homescanner Ltd is the data controller.
2. What Data We Collect
We collect and process the following categories of personal data:
2.1 Account & Profile Data
- Email address, full name, and profile picture (provided via Auth0 authentication, including social login with Google, Apple, or Facebook)
- Display name, phone number, and primary postcode (optionally provided by you)
- Account preferences and settings
2.2 Property Data
- Property details you add or import (addresses, prices, descriptions, images, floor plans, energy ratings)
- Property data retrieved from third-party sources (Rightmove, Zoopla) when you request an import
- Saved searches, property comparisons, and map markers
2.3 Financial & Calculation Data
- Mortgage calculations, stamp duty calculations, and rental yield estimates
- Bills and expense tracking data (council tax, utilities, insurance amounts)
- Rental income records (tenant details, monthly rent, deposit amounts)
2.4 Payment Data
- Subscription tier and billing status
- Stripe customer and subscription identifiers
- We do not store your full card details. Payment card information is processed and held exclusively by Stripe, our PCI DSS-compliant payment processor. We only receive your card brand and last four digits for display purposes.
2.5 Usage & Analytics Data
- Page views and session data collected via Vercel Analytics
- Feature usage patterns (e.g., AI analyses used per month)
2.6 Location Data
- Postcodes and geographic coordinates associated with properties you track
- Map interaction data processed via Mapbox
2.7 Local Browser Storage
- UI preferences (e.g., sidebar state, selected user mode) stored in your browser's localStorage
- Temporary calculation data stored locally for your convenience
2.8 Waitlist Data
- If you join our waitlist: your email, name, interest type (buyer/renter/owner/landlord), and referral source
3. How We Use Your Data
We process your personal data for the following purposes and lawful bases under UK GDPR:
| Purpose | Lawful Basis |
|---|---|
| Providing and maintaining our service | Contract performance (Art. 6(1)(b)) |
| Processing subscription payments via Stripe | Contract performance (Art. 6(1)(b)) |
| AI-powered property analysis via OpenAI | Contract performance (Art. 6(1)(b)) |
| Authenticating your identity via Auth0 | Contract performance (Art. 6(1)(b)) |
| Displaying property locations on maps via Mapbox | Contract performance (Art. 6(1)(b)) |
| Sending service-related communications | Legitimate interests (Art. 6(1)(f)) |
| Analysing usage to improve our service (Vercel Analytics) | Legitimate interests (Art. 6(1)(f)) |
| Fraud prevention and security | Legitimate interests (Art. 6(1)(f)) |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
4. Third-Party Processors
We share personal data with the following third-party service providers who process data on our behalf:
| Provider | Purpose | Data Shared |
|---|---|---|
| Auth0 (Okta) | Authentication & identity management | Email, name, profile picture, login credentials |
| Supabase | Database hosting (PostgreSQL) | All account and property data |
| Stripe | Payment processing & subscription management | Email, payment card details, billing address |
| OpenAI | AI-powered property analysis | Property details submitted for analysis (addresses, prices, features) |
| Vercel | Website hosting & analytics | Page view and session analytics, IP addresses |
| Mapbox | Interactive maps & geocoding | Property postcodes and geographic coordinates |
Each processor is contractually bound to process your data only on our instructions and in compliance with applicable data protection law. We do not sell your personal data to any third party.
5. International Data Transfers
Some of our third-party processors (Auth0, OpenAI, Stripe, Vercel, Mapbox) may process data outside the United Kingdom. Where data is transferred internationally, we ensure appropriate safeguards are in place, including:
- Transfers to countries with an adequacy decision from the UK Secretary of State
- Standard Contractual Clauses (SCCs) approved by the ICO
- The processor's participation in recognised certification mechanisms
6. Data Retention
- Account data: retained for as long as your account is active, and deleted within 30 days of account deletion
- Property & calculation data: retained for as long as your account is active
- Payment records: retained for 7 years to comply with UK tax and accounting obligations
- Analytics data: retained according to Vercel's data retention policies
- Waitlist data: retained until the service launches or you request removal
- Local storage data: remains in your browser until you clear it; we do not access or control it server-side
7. Your Rights
Under UK GDPR, you have the following rights:
- Right of access — request a copy of your personal data
- Right to rectification — correct inaccurate or incomplete data
- Right to erasure — request deletion of your data ("right to be forgotten")
- Right to restrict processing — limit how we use your data
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — where processing is based on consent
You can exercise many of these rights directly from your account settings, where you can update your profile, export your data, and delete your account.
For any data rights request, contact us at hello@homescanner.co.uk. We will respond within one month as required by law.
8. Cookies & Local Storage
We use essential cookies required for authentication (Auth0 session cookies) and core functionality. We use Vercel Analytics for aggregated, privacy-friendly website analytics.
We also use your browser's localStorage to save UI preferences (such as sidebar state and selected user mode) and temporary calculation data. This data never leaves your device unless you explicitly save it to your account.
We do not use advertising cookies or third-party tracking cookies.
9. Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encryption in transit (TLS/HTTPS) for all data transfers
- Row-Level Security (RLS) on our database to ensure users can only access their own data
- Authentication managed by Auth0 with industry-standard security practices
- Payment data handled exclusively by PCI DSS-compliant Stripe infrastructure
- Regular security reviews of our codebase and infrastructure
10. Children
Our service is not directed at anyone under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected data from someone under 16, please contact us at hello@homescanner.co.uk and we will promptly delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email.
12. Complaints
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website: https://ico.org.uk
- Telephone: 0303 123 1113
We would appreciate the chance to address your concerns before you approach the ICO, so please contact us first at hello@homescanner.co.uk.