Privacy Policy

HomeThink (“we”, “us”, or “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our AI-powered property research service.

We are the data controller for the personal data we process. Our contact email for privacy matters is privacy@homethink.co.uk.

2.1 Account Information

• Email address (required for account creation)
• Name (if provided during registration)
• Authentication tokens (managed by Clerk)

2.2 Payment Information

• Payment card details (processed and stored by Stripe, not by us)
• Billing history and transaction records
• Subscription status and billing history

2.3 Usage Data

• Property URLs you submit for analysis
• AI-generated property analyses and chat conversations
• User preferences (budget, property types, priorities, deal-breakers)
• Saved properties, favourites, and portfolio data

2.4 Technical Data

• Browser type and version
• Device information
• IP address (collected by authentication provider)
• Session cookies for authentication

2.5 Analytics Data

We use PostHog for product analytics, routed through our own domain. There are two separate streams, and they are governed differently.

Browser analytics (consent-gated)

Only collected once you accept analytics cookies. Nothing is sent from your browser before then, and accepting is entirely optional. This stream covers:

• Page views and navigation patterns
• Feature interactions (e.g., properties added, tabs viewed, valuations requested)
• An anonymous device identifier stored on your device
• For signed-in users: user ID and email address (linked to analytics events)

Service telemetry (legitimate interests)

A small set of events is recorded on our servers when the underlying action happens, whether or not you have accepted analytics cookies. We rely on this to know that the service works, what it costs us to run, and whether payments succeed — we could not operate the product reliably without it, and consent-gated data cannot answer those questions because it undercounts by an unknown amount.

• Analyses started, completed, and failed; free daily limits reached; chatbot turns taken
• Subscription and billing lifecycle events (checkout started, started, cancelled, payment failed)
• Browser-extension usage and error signals

These records carry an internal account, session, or device identifier and factual details of the action (such as which feature ran and whether it succeeded). Where you are not signed in, that identifier may be derived from your IP address by one-way hashing so we can apply fair-use limits and spot abuse; we do not store the IP address itself alongside these events, and the hash cannot be reversed back to it. They never include your name or email address, and we do not collect the content of any property, listing, note, or message — though an error report may incidentally include the page or request that failed. This processing relies on our legitimate interests in operating, securing, and billing for the service (Article 6(1)(f) UK GDPR) rather than on consent. You have the right to object — see section 7.

See our Cookie Policy for full details of the browser stream.

We process your personal data under the following legal bases:

• Contract Performance: Processing your property research requests, delivering AI analysis, and managing your subscription
• Legitimate Interest: Improving our service, preventing fraud, ensuring platform security, and the server-side service telemetry described in section 2.5
• Consent: Marketing communications (where applicable) and optional browser analytics cookies
• Legal Obligation: Complying with UK tax and financial regulations

We use your personal data to:

• Create and manage your account
• Process property analysis requests using AI
• Facilitate payments and manage your subscription
• Provide customer support
• Send service-related notifications (e.g., subscription confirmations, renewal receipts)
• Improve our AI models and service quality
• Understand how users interact with HomeThink and improve the experience (with your consent, via analytics)
• Detect and prevent fraudulent activity
• Comply with legal obligations

We share your data with trusted third-party service providers who help us operate HomeThink. All processors are contractually bound to protect your data and use it only for the purposes we specify.

5.1 Service Providers

• Clerk (US-based): Authentication and user management. Processes email addresses and authentication tokens.
• Convex (US-based): Database and backend infrastructure. Stores all application data including properties, analyses, and user preferences.
• Stripe (US-based): Payment processing. Handles all payment card details (we never see your full card number).
• AI analysis provider (US-based): Large language model service. Receives property listing content and user preferences for generating insights.
• Firecrawl (US-based): Data retrieval service. Retrieves public property listing content on your instruction.
• PostHog (US-based): Product analytics (consent-gated). When you consent to analytics cookies, receives page views, feature interactions, and for signed-in users your user ID and email to help us understand user journeys and improve the service. No data is sent without your explicit consent.

5.2 International Transfers

Some of our service providers are located in the United States. Data transfers to the US are protected by:

• Standard Contractual Clauses (SCCs) approved by the UK ICO
• Processors' compliance with applicable data protection frameworks
• Contractual obligations requiring equivalent data protection standards

We retain your personal data for as long as necessary to provide our services:

• Account data: Retained while your account is active, plus 90 days after account closure for recovery purposes
• Property analyses and preferences: Retained while your account is active
• Transaction records: Retained for 7 years to comply with UK tax regulations
• Chat conversations: Retained while your account is active
• Analytics data: Retained by PostHog according to our project settings (currently up to 1 year). You can withdraw consent at any time, after which no new data is collected

After the retention period expires, we securely delete your personal data from our systems.

You have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal retention requirements)
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Restrict Processing: Limit how we use your data in certain circumstances

To exercise any of these rights, contact us at privacy@homethink.co.uk. We will respond within 30 days of receiving your request.

We use essential cookies to operate HomeThink and optional analytics cookies (Vercel Web Analytics and PostHog) to understand how users interact with our service. Analytics cookies are only enabled with your explicit consent and can be withdrawn at any time via the cookie consent banner or Settings → Legal & Privacy → Manage Cookie Preferences.

For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

We implement industry-standard security measures to protect your personal data, including:

• Encryption of data in transit (TLS/HTTPS)
• Encryption of sensitive data at rest
• Regular security audits and monitoring
• Access controls limiting who can view your data
• Secure authentication via Clerk

While we take reasonable precautions, no internet-based service can be 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

HomeThink is not intended for users under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately so we can delete it.

Our optional Chrome browser extension (“HomeThink — AI Property Check”) lets you run a property check on a Rightmove, Zoopla or OnTheMarket listing you are already viewing, without us re-fetching the page from the portal.

11.1 What the extension reads

When you click “Analyse this property”, the extension reads the existing HTML of the listing page open in your browser. It only runs on rightmove.co.uk, zoopla.co.uk and onthemarket.com listing pages. It does not read any other site, your browsing history, or other tabs.

11.2 What it sends to us

The extension sends that listing HTML, together with a pairing token that links the extension to your signed-in HomeThink account, to our servers so we can generate the property analysis. We do not store the portal's photos. The result returned to the page contains HomeThink-derived facts only (score, flags and a link to your report).

11.3 What it stores on your device

The extension stores your pairing token and panel display preferences (such as text size and minimised state) locally in your browser. The token is revocable at any time from Settings → Connected devices.

11.4 What it does not do

• It does not track your browsing or build an advertising profile.
• It does not collect data on sites other than the three property portals listed above.
• We do not sell extension data to anyone.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. Material changes will be communicated via email or prominent notice on our website.

Continued use of HomeThink after changes take effect constitutes acceptance of the updated policy.

If you have concerns about how we handle your personal data, please contact us first at privacy@homethink.co.uk. We will do our best to resolve the issue.

You also have the right to lodge a complaint with the UK's data protection authority:

For any questions about this Privacy Policy or how we handle your data, please contact us: