Privacy Policy

Last updated: June 2026

Waterside Technology LTD (“we”, “us”, or “our”) operates the Deal Analyser at prop-ai.tech/deal-analyser. This Privacy Policy explains how we collect, use, and protect your personal data when you use the tool.

1. Information We Collect

Account Data

When you create an account or log in, we collect:

• Email address (used for magic link authentication)
• Name (if provided during signup)
• Subscription and billing information (processed by Stripe)

Property Analysis Data

When you use the calculator, you may enter:

• Property details (address, price, type, condition)
• Financial inputs (purchase price, renovation costs, rental income)
• Investment strategy preferences

This data is stored locally in your browser (localStorage) and synced to our cloud infrastructure (AWS DynamoDB) so you can access it across devices.

Automatically Collected Data

• Anonymised product-usage analytics and session replay (via Microsoft Clarity) — how pages are used, clicks, scrolls and navigation. Text and form inputs are masked by default. We capture this anonymously without cookies by default; only if you accept analytics cookies do we use cookies to recognise your visits over time
• Cookie consent preferences (via CookieYes)

Waiting List Data

If you join our beta waiting list, we collect:

• Your name and email address
• The date you registered for the waiting list
• Separately, and only if you tick the optional marketing box, your consent to receive product updates about the beta and the date you gave it

We use these details only to operate the waiting list, never sell or rent them, and you can remove yourself at any time using the unsubscribe link in any waiting-list email — which deletes your details.

2. How We Use Your Data

• Authenticate your account and manage sessions
• Store and sync your property analysis data across devices
• Process AI-powered deal analysis (via OpenAI)
• Process subscription payments (via Stripe)
• Send transactional emails — magic link login and notifications (via Resend)
• Send marketing communications (with your consent)
• Run the beta waiting list — send your confirmation and, when a place becomes available, your early-access invitation, and (only if you opted in) broader updates about the beta
• Improve the calculator and fix issues

3. Legal Basis for Processing

We process your personal data based on:

• Contract: To provide the calculator service you signed up for
• Consent: For marketing communications and for cookie-based analytics (recognising your visits over time)
• Legitimate interests: To maintain security; to understand and improve the service through anonymised, cookieless usage analytics; and to operate the beta waiting list you asked to join — including sending your confirmation and early-access invitation. You can object to this at any time (see Your Rights)
• Legal obligation: To comply with financial record-keeping requirements

4. AI Data Processing

When you use AI-powered features (refurb estimation, GDV estimation, deal structure analysis, deal verdict), relevant property data from your current analysis is sent to OpenAI for processing. This includes property details, financial inputs, and questionnaire answers.

We do not send your email address or account details to OpenAI. The AI provider's own data processing terms also apply. OpenAI does not use API data to train its models.

5. Third-Party Services

Processors (bound by data processing agreements)

We use the following processors, each bound by a data processing agreement in accordance with UK GDPR:

• Amazon Web Services (AWS) — cloud hosting, data storage, and authentication (EU-West-2, London region)
• Stripe — subscription billing and payment processing (PCI Level 1 certified)
• OpenAI — AI-powered deal analysis features
• Resend — transactional and waiting-list email delivery (magic link authentication, notifications, beta confirmations)
• Microsoft Clarity — anonymised product analytics, session replay and heatmaps (text/inputs masked)
• CookieYes — cookie consent management

Public data services

When you use the optional map, location or crime features, your browser contacts the following public UK services directly to look up a property's location or its area crime statistics. We send only what is needed to locate the property — its postcode, map coordinates, or the place name you entered for it — never your name, email, or account details. They are public services that act as independent controllers of any request they receive, not our processors, so they are not covered by the data processing agreements above:

• Postcodes.io — UK postcode and geocoding lookups
• UK Police data (data.police.uk) — street-level crime statistics for an area

6. International Data Transfers

We host your account and property analysis data in the United Kingdom — our cloud infrastructure (AWS) runs in the London (EU-West-2) region, so your core data is not routinely transferred outside the UK.

Some of the third-party services above are based in, or process data in, the United States — currently OpenAI (AI features), Microsoft (Clarity analytics), Stripe (payments), and Resend (email). Where using these services involves transferring personal data outside the UK, we rely — depending on the provider — on one or more of the safeguards UK GDPR requires for international transfers:

• the UK Extension to the EU–US Data Privacy Framework, where the provider is certified under it;
• the UK International Data Transfer Agreement (IDTA); or
• the EU Standard Contractual Clauses together with the UK Addendum.

You can ask us which safeguard applies to a particular service, or for a copy of the relevant transfer terms, by emailing hello@prop-ai.tech.

7. Data Retention

• Account data: Retained for the duration of your account. Deleted within 30 days of account closure.
• Property analysis data: Retained while your account is active. You can delete individual properties at any time.
• Financial/billing data: Retained for 7 years to comply with HMRC requirements.
• Analytics data: Anonymised usage analytics and session-replay data are retained by Microsoft Clarity for up to 13 months.
• Marketing consent records: Retained while consent is valid, plus 1 year after withdrawal.
• Waiting-list data: Retained until you unsubscribe (which deletes it) or until we close the beta waiting list, whichever is sooner.

8. Data Security

We implement appropriate technical and organisational measures to protect your data, including encrypted data transfer (TLS), encrypted storage, JWT-based authentication with auto-expiry, and access controls on all cloud resources.

9. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing of your data
• Request restriction of processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with the Information Commissioner's Office (ICO)

You can contact the ICO at ico.org.uk, telephone 0303 123 1113, or write to Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

10. Cookies

The calculator uses essential cookies for authentication and theme preferences. Our analytics provider (Microsoft Clarity) runs without cookies by default, collecting only anonymised, aggregated usage data. Analytics cookies — which let us recognise your visits over time — are only set with your consent via the cookie banner. You can manage or withdraw your preferences at any time; withdrawing consent deletes the analytics cookies and returns analytics to the cookieless mode.

11. Contact Us

If you have questions about this Privacy Policy, contact us:

Email: hello@prop-ai.tech

ICO registration number: ZC120782