Privacy Policy

1. Who we are

AppraisalGPT is a service operated by CMAGPT ("we", "us", "our"). This policy explains how we collect and use personal data when you visit appraisalgpt.co.uk or use the AppraisalGPT service (the "Service"), and the rights you have under the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

For the personal data described in this policy, we are the controller. You can contact us about this policy or your personal data through the Support page on the Site.

2. The personal data we collect

• Account data: your name, email address, sign-in details, and the business details you choose to add (such as agency name, logo and contact details for your reports).
• Subscription and billing data: your plan, billing address, VAT number and payment history. Card details are collected and held by our payment processor, Stripe; we do not store your full card number.
• Usage data: the addresses and postcodes you search, the comparables you select, the reports you generate, edit and export, and messages you send to our support assistant.
• Technical data: IP address, browser and device type, pages visited and similar information collected through cookies and similar technologies (see section 7).

3. Property data and third parties

Reports are built from public property records, such as HM Land Registry sold prices and energy performance certificates. These records concern properties, not users, but some can relate to identifiable people (for example, the owner of a property you search). We use them only to produce market appraisals for property professionals. If you add personal data about a client or other person to a report (for example a seller's name in a cover letter), you are responsible for having a lawful basis to do so.

4. How we use your data and our lawful bases

• To provide the Service (create and run your account, run searches, generate and store reports, process payments): performance of our contract with you.
• To keep the Service secure and working (preventing abuse, rate limiting, fixing faults, keeping records of service delivery): our legitimate interests.
• To improve the Service (understanding which features are used and where searches fail): our legitimate interests.
• To send service messages (receipts, security notices, changes to the Service or these policies): performance of our contract and our legitimate interests.
• Marketing about our own similar products: our legitimate interests, or your consent where the law requires it. You can opt out at any time.
• To meet legal obligations (tax and accounting records, responding to lawful requests): legal obligation.

5. Artificial intelligence

Reports and support answers are drafted by AI models run by a third-party provider on our behalf. We send the provider the property and comparable data needed for a report, and the messages you send to the support assistant. The provider processes this data to return results to us and does not use it to train its models. We do not use AI to make decisions about you that have legal or similarly significant effects.

6. Who we share data with

We share personal data only as needed with:

• service providers who process it on our behalf: hosting and database, sign-in and authentication, payments, AI processing, rate limiting, file storage, email delivery, and analytics and advertising;
• public data services we query to build a report (for example postcode, energy certificate and flood map services), which receive the address or postcode searched, not your account details;
• professional advisers, a buyer or successor if our business is sold or reorganised, and authorities where the law requires it.

We do not sell your personal data.

7. Cookies

We use cookies that are strictly necessary for signing in and keeping the Service secure. We also use analytics and advertising cookies and similar technologies to understand how the Site is used and to measure our advertising. You can block or delete cookies in your browser settings; blocking the necessary cookies will stop you signing in.

8. International transfers

We and several of our service providers are based in the United States, so your personal data is transferred to and stored outside the UK. Where we do so we rely on the UK Extension to the EU-US Data Privacy Framework (the "UK-US data bridge") for certified recipients, or on the International Data Transfer Addendum to the European Commission's standard contractual clauses, or another safeguard permitted by UK data protection law.

9. How long we keep data

• Account data: for as long as you have an account, and removed after you delete it, except where we need to keep it for the reasons below.
• Search sessions: about 24 hours. Saved reports: until you delete them or your account.
• Billing records: as long as required for tax and accounting (normally six years).
• Records of service delivery and support messages: as long as needed to provide support, resolve disputes and enforce our terms.

10. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to our processing, including objecting to direct marketing at any time;
• receive your data in a portable format;
• withdraw consent, where we rely on consent.

To exercise these rights, contact us through the Support page. We will respond within one month. If you are not happy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk), though we would appreciate the chance to deal with your concern first.

11. Security

We protect personal data with encryption in transit, access controls and reputable infrastructure providers. No system is completely secure; if a breach affects your data we will notify you and the ICO where the law requires it.

12. Children

The Service is for professionals and is not intended for anyone under 18.

13. Changes to this policy

We may update this policy. We will show the date of the latest version at the top of this page and tell you about material changes before they take effect.