Legal

Privacy notice

Draft for legal review — it describes current platform behaviour and is not legal advice.

Status of this notice

This is a working draft prepared for legal review. It describes how the platform currently behaves. It has not been reviewed or approved by a qualified lawyer, and it is not legal advice.

Account and profile: name, email, phone, country of residence, stated interests and roles.
Property and portfolio data you enter: listings, ownership records, holdings, income and expense entries, valuations.
Location and evidence data you submit for GeoTrust: coordinates, boundaries, surveys and supporting documents.
Professional and financing data: professional profiles and licence details you provide, financing applications and the documents a lender requests.
Messages and support requests exchanged on the platform.
Billing records: invoices, payments and refunds. Card details are handled by the payment provider; we do not store card numbers or security codes.
Product analytics and operational logs, including a per-request correlation identifier used for diagnosis.
Device and notification data where you enable push or install the app.

To operate your account, listings, portfolio, applications and messages.
To verify evidence and maintain auditable verification records.
To collect platform fees and subscriptions, and to keep financial records accurate.
To protect the service: abuse prevention, rate limiting, risk signals and incident investigation.
To personalise recommendations where you have opted in, and to answer AI assistant questions using only your own records.

Data is shared with the specific counterparties a transaction requires: an organisation you belong to, a lender you apply to, a professional you assign, or a person in your conversation.
Infrastructure and service providers process data on our behalf: managed database and authentication hosting, payment processing, AI model serving, and messaging/notification delivery where configured.
Advertisers receive only the enquiry data a lead legitimately contains. They do not receive your portfolio, messages, financing records or private evidence.

The platform serves multiple countries, and infrastructure providers may process data outside your country of residence. Market-specific disclosures are applied where a market is commercially activated.

Access is enforced at the database level, per user and per organisation. Administrative and operational surfaces require a server-verified administrator role. Logs are sanitised so secrets, tokens and message contents are not written into telemetry.

Content you create can generally be removed by you. Security, audit, billing and verification records are retained longer because they must remain accurate and reviewable. Retention categories are maintained internally and reviewed before any deletion.

You can edit your profile, manage personalisation and notification preferences, and opt out of marketing messages at any time. Security and transactional messages cannot be switched off while your account is active.
You can request account closure through Support. Some records may be retained where required for security, legal, financial, fraud-prevention or regulatory purposes.
You can request a copy of your data through Support; identity is verified before anything sensitive is released.

The platform stores a session for authentication, your interface preferences, cached application assets for offline use, and push subscription details if you enable notifications. No third-party advertising or cross-site tracking technology is in use.

The assistant is advisory. It answers from your own records and clearly labels output as AI-generated. It cannot make payments, approve financing, verify a property or professional, determine fraud, or give legal or tax advice.