PropPack.ai ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform for property transactions and Property Information Pack (PIP) generation.

1. Information We Collect

1.1 Property Data

• Property addresses and Unique Property Reference Numbers (UPRNs)
• Land Registry title information
• Energy Performance Certificate (EPC) data
• Local authority search results
• Property images and descriptions
• Transaction history and pricing information

1.2 Personal Information

• Name, email address, and phone number
• Company name and professional credentials (for agents and solicitors)
• Account credentials and authentication data
• Communication preferences

1.3 Payment Information

• Billing address and payment method details (processed securely via Stripe)
• Transaction history and invoices
• Subscription and pricing plan information

1.4 Usage Data

• IP address, browser type, and device information
• Pages visited, features used, and time spent on platform
• Search queries and PIP generation requests
• Cookies and similar tracking technologies

2. How We Use Your Information

We use the collected information for the following purposes:

• PIP Generation: To compile comprehensive Property Information Packs from multiple data sources
• Service Delivery: To provide, maintain, and improve our platform functionality
• Communications: To send service updates, transaction notifications, and marketing communications (with your consent)
• Payment Processing: To process transactions and manage subscriptions
• Analytics: To understand usage patterns and improve user experience
• Compliance: To meet legal obligations and prevent fraud
• Customer Support: To respond to inquiries and provide technical assistance

3. Legal Basis for Processing (GDPR)

Under UK GDPR, we process your personal data based on:

• Contract Performance: Processing necessary to fulfill our service agreement with you
• Legitimate Interests: To improve our services, prevent fraud, and ensure platform security
• Legal Obligation: To comply with UK property transaction regulations and financial laws
• Consent: For marketing communications and optional data processing (which you can withdraw at any time)

4. Data Sharing and Disclosure

4.1 Authorized Parties

We share property and personal data with:

• Estate Agents: When you authorize sharing of your PIP with agents
• Solicitors: For conveyancing and legal transaction purposes
• Buyers: When you choose to share your PIP with prospective buyers

4.2 Third-Party Service Providers

We integrate with trusted third-party APIs and services:

• HM Land Registry: For title and ownership information
• EPC Register: For energy performance data
• Local Authorities: For planning and search data
• Stripe: For secure payment processing (PCI DSS compliant)
• Cloud Hosting Providers: For data storage and platform infrastructure

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government regulation.

5. Data Retention

• Property Information Packs: Retained for 90 days after generation, unless extended by user
• Account Data: Retained for the duration of your account plus 6 years for legal compliance
• Transaction Records: Retained for 7 years to comply with UK financial regulations
• Marketing Data: Retained until you withdraw consent or request deletion

6. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Restrict Processing: Limit how we use your data
• Right to Withdraw Consent: Withdraw consent for marketing or optional processing

To exercise these rights, contact our Data Protection Officer at dpo@proppack.ai

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your session and authentication
• Remember your preferences and settings
• Analyze platform usage and performance
• Deliver personalized content and advertisements

You can control cookie preferences through your browser settings. Note that disabling cookies may affect platform functionality.

8. Data Security Measures

We implement industry-standard security measures to protect your data:

• TLS 1.3 encryption for data in transit
• AES-256 encryption for data at rest
• Multi-factor authentication (MFA) for account access
• Regular security audits and penetration testing
• Role-based access controls (RBAC)
• 24/7 security monitoring and incident response

9. International Data Transfers

Your data is primarily stored and processed within the UK and European Economic Area (EEA). If we transfer data outside the UK/EEA, we ensure adequate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO).

10. Children's Privacy

PropPack.ai is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately at privacy@proppack.ai

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes via email or prominent notice on our platform. The "Last Updated" date at the top of this page indicates when the policy was last revised.

12. Contact Information

For privacy-related inquiries, data subject requests, or concerns, please contact: