← Home
Legal

Privacy Policy

Last updated 31 July 2026 · How we handle personal data under UK GDPR.

MH196 2026 Ltd, a company registered in England and Wales (company number 16447992), is the data controller for the personal data described here. Contact us about anything on this page at privacy@propertypredator.com.

The short version. To run your account we hold your email address, a secure hash of your password, and your plan and usage. Payments go through Stripe, who handle your card details — we never see them. Floorplans and documents you upload are sent to an AI provider so they can be read. We do not sell your data.

1. What we collect

DataWhere it comes from
Email addressYou, at sign-up
Password (stored only as a secure one-way hash — we cannot read it)You, at sign-up
Plan, subscription status and a Stripe customer referenceCreated when you subscribe
Marketing and partner-contact preferencesYour choices at sign-up or in your account
Usage of paid features (which analyses you ran, and when)Generated as you use the product, to meter allowances
Saved searches, saved deals, pipeline notes and shortlistsYou, as you use the product
Floorplans and documents you uploadYou
Support and feedback messages, including any screenshot you attachYou
Basic technical information such as approximate network and browser typeAutomatically, to detect shared logins and abuse

Property information is not the same thing

Most of what the product displays — ownership records, sold prices, planning history, certificates — comes from public registers such as HM Land Registry, Companies House, EPC registers and local authority planning portals. Some of that is personal data about other people. We present it as published, for the legitimate purpose of property research and due diligence. If information about you appears in one of those registers, the register holder is the place to correct it at source; contact us as well and we will help where we can.

2. Why we use it, and our lawful basis

PurposeLawful basis
Creating and running your account; providing the features you ask forPerformance of a contract
Taking payment and preventing payment fraudContract, and legal obligation
Metering paid usage against your planContract
Service emails — password resets, receipts, alerts you switched onContract
Keeping the service secure, and identifying shared or abusive accountsLegitimate interests (protecting the service and paying customers)
Improving the product and fixing faultsLegitimate interests
Marketing emails about PropertyPredatorConsent, or the soft opt-in for existing customers — withdraw at any time
Sharing relevant partner offersConsent, given separately at sign-up

You can withdraw consent at any time without affecting anything done before you withdrew it. Every marketing email carries an unsubscribe link.

3. Who we share it with

We use a small number of processors to run the service. They act on our instructions and are not permitted to use your data for their own purposes.

ProcessorWhat they doWhere
StripeTakes payments and holds card details. Stripe is a controller in its own right for payment data.US / EU
AnthropicAI analysis — reads floorplans and documents you upload, and writes the narrative parts of reportsUS
PostmarkSends service and marketing emailUS
RenderApplication hostingUS
NeonDatabase hostingUK (London)
NotionWhere enquiries and leads are recorded, if you submit oneUS

We also disclose data where the law requires it, and we may transfer it as part of a sale or reorganisation of the business — in which case this policy continues to apply until you are told otherwise.

We do not sell your personal data, and we do not share it with advertisers.

Uploads and AI

When you upload a floorplan or document for analysis, the file is sent to Anthropic to be read. Do not upload material containing personal data unless you need to and are entitled to. If you would rather not have a document processed this way, do not upload it — the address-based analysis works without any upload.

4. International transfers

Several processors above are in the United States. Where personal data leaves the UK we rely on the UK's International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK Addendum, together with the provider's own safeguards.

5. How long we keep it

Ask us to delete your account and we remove it and its associated records, other than anything we must keep by law.

6. Your rights

Under UK GDPR you can ask us to:

Email privacy@propertypredator.com and we will respond within one month. There is no charge for a reasonable request.

7. Security

Passwords are stored only as one-way hashes. Traffic is encrypted in transit. Sessions use short-lived access tokens with rotating refresh tokens, and completing a password reset signs every other device out. Administrative access is restricted and separately authenticated.

No system is perfectly secure. If a breach affects your rights we will tell you and the ICO as the law requires.

8. Children

The service is for business and investment use and is not intended for anyone under 18. We do not knowingly collect data about children.

9. Complaints

Please raise anything with us first — we would rather fix it. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk or on 0303 123 1113.

10. Changes

We will update this policy as the product and the law change, and the date at the top will always show the current version. We will tell you about significant changes by email or in the app.

TermsCookiesRefundsDPA

MH196 2026 Ltd · Registered in England and Wales, company number 16447992 · privacy@propertypredator.com