Privacy Policy

HomeThink (“we”, “us”, or “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our AI-powered property research service.

We are the data controller for the personal data we process. Our contact email for privacy matters is privacy@homethink.co.uk.

2.1 Account Information

• Email address (required for account creation)
• Name (if provided during registration)
• Authentication tokens (managed by Clerk)

2.2 Payment Information

• Payment card details (processed and stored by Stripe, not by us)
• Billing history and transaction records
• Credit balance and usage

2.3 Usage Data

• Property URLs you submit for analysis
• AI-generated property analyses and chat conversations
• User preferences (budget, property types, priorities, deal-breakers)
• Saved properties, favourites, and portfolio data

2.4 Technical Data

• Browser type and version
• Device information
• IP address (collected by authentication provider)
• Session cookies for authentication

We process your personal data under the following legal bases:

• Contract Performance: Processing your property research requests, delivering AI analysis, and managing your credit balance
• Legitimate Interest: Improving our service, preventing fraud, and ensuring platform security
• Consent: Marketing communications (where applicable) and optional analytics cookies
• Legal Obligation: Complying with UK tax and financial regulations

We use your personal data to:

• Create and manage your account
• Process property analysis requests using AI
• Facilitate payments and manage your credit balance
• Provide customer support
• Send service-related notifications (e.g., purchase confirmations, credit updates)
• Improve our AI models and service quality
• Detect and prevent fraudulent activity
• Comply with legal obligations

We share your data with trusted third-party service providers who help us operate HomeThink. All processors are contractually bound to protect your data and use it only for the purposes we specify.

5.1 Service Providers

• Clerk (US-based): Authentication and user management. Processes email addresses and authentication tokens.
• Convex (US-based): Database and backend infrastructure. Stores all application data including properties, analyses, and user preferences.
• Stripe (US-based): Payment processing. Handles all payment card details (we never see your full card number).
• Anthropic (US-based): AI analysis using Claude API. Receives property listing content and user preferences for generating insights.
• Firecrawl (US-based): Data retrieval service. Retrieves public property listing content on your instruction.

5.2 International Transfers

Some of our service providers are located in the United States. Data transfers to the US are protected by:

• Standard Contractual Clauses (SCCs) approved by the UK ICO
• Processors' compliance with applicable data protection frameworks
• Contractual obligations requiring equivalent data protection standards

We retain your personal data for as long as necessary to provide our services:

• Account data: Retained while your account is active, plus 90 days after account closure for recovery purposes
• Property analyses and preferences: Retained while your account is active
• Transaction records: Retained for 7 years to comply with UK tax regulations
• Chat conversations: Retained while your account is active

After the retention period expires, we securely delete your personal data from our systems.

You have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal retention requirements)
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Restrict Processing: Limit how we use your data in certain circumstances

To exercise any of these rights, contact us at privacy@homethink.co.uk. We will respond within 30 days of receiving your request.

We use essential cookies to operate HomeThink. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

We implement industry-standard security measures to protect your personal data, including:

• Encryption of data in transit (TLS/HTTPS)
• Encryption of sensitive data at rest
• Regular security audits and monitoring
• Access controls limiting who can view your data
• Secure authentication via Clerk

While we take reasonable precautions, no internet-based service can be 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

HomeThink is not intended for users under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately so we can delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. Material changes will be communicated via email or prominent notice on our website.

Continued use of HomeThink after changes take effect constitutes acceptance of the updated policy.

If you have concerns about how we handle your personal data, please contact us first at privacy@homethink.co.uk. We will do our best to resolve the issue.

You also have the right to lodge a complaint with the UK's data protection authority:

For any questions about this Privacy Policy or how we handle your data, please contact us: