Sub-processors
The suppliers who handle personal data on our behalf, what each one receives, and where it goes.
These are our processors under Article 28 of the UK GDPR: they act on our instructions and may not use your data for their own purposes. Each is engaged under written data processing terms — in every case so far the supplier's own, accepted when the account was opened. Where we have not yet recorded the date of that acceptance, the table says so rather than leaving the record looking complete.
This is a different list from the public registers we look things up in — HM Land Registry, the EPC register, the Environment Agency and so on. Those are not our processors, and none of them is told who you are. They are described in §5.2 of the Privacy Policy.
| Supplier | What they do | Where | What they receive | DPA recorded |
|---|---|---|---|---|
| Convex | Database and backend infrastructure | United StatesUK Addendum to the EU SCCs | All application data — properties, analyses, preferences, chat. | Not recorded |
| Clerk | Authentication and account management | United StatesUK Addendum to the EU SCCs | Email address, name, session tokens. | Not recorded |
| Anthropic | The AI behind analysis and chat | United StatesUK Addendum to the EU SCCs | Listing content, your stated preferences, your chat messages, and any text you paste into a report. Does not train models on data submitted through its business API. | Not recorded |
| Stripe | Payment processing | United StatesUK Addendum to the EU SCCs | Email address and billing details. We never see your card number. | Not recorded |
| Vercel | Website hosting and delivery | United StatesUK Addendum to the EU SCCs | The requests your browser makes, including your IP address. | Not recorded |
| Firecrawl | Retrieving the public listing page you ask us to analyse | United StatesUK Addendum to the EU SCCs | The listing web address. | Not recorded |
| Sentry | Error monitoring | European Union (Frankfurt)No third-country transfer — EU-hosted. | Technical details of errors and your account identifier. No email address or name. | Not recorded |
| PostHog | Product analytics, only if you accept analytics storage | United StatesUK Addendum to the EU SCCs | Your account identifier and which pages and features you use. | Not recorded |
| YourMail | Sending email | United KingdomNo third-country transfer — UK-based. | Your name, email address, and the content of the message. | Not recorded |
Changes to this list
If we add a sub-processor, we will update this page before they begin processing, and note the change in the Privacy Policy's version history. If a change matters to you, tell us at privacy@homethink.co.uk.
International transfers
Where a supplier processes data outside the UK, the transfer is made under the UK International Data Transfer Addendum to the EU Standard Contractual Clauses. Sentry is hosted in the European Union and YourMail in the United Kingdom, so neither involves a third-country transfer.