SurveyReady

Privacy Policy

Get Started
Back to home

Privacy Policy

Last updated: 5 April 2026

1. Introduction

SurveyReady (“we”, “our”, or “us”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our property assessment service.

We are committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Name and email address - Collected and managed by Clerk (our authentication provider)
  • Password - Securely hashed and stored by Clerk (we never see your plain text password)
  • Account creation date - For user management purposes

2.2 Property Assessment Data

When you use our assessment service, we collect:

  • Property details - Address, property type, age, number of rooms, features (e.g., loft, garage, garden)
  • Checklist observations - Notes and comments you add during property viewings
  • Photos - Images you upload during the assessment (processed temporarily and not permanently stored)
  • Generated reports - The AI-generated assessment reports saved to your account
  • Report metadata - Creation dates, property status (viewed/shortlisted/rejected), cost estimates

2.3 Payment Information

When you purchase reports:

  • Payment details - Processed and stored securely by Stripe (our payment provider). We do not store your full card details on our servers.
  • Purchase history - Transaction IDs, dates, and amounts for billing records

2.4 Technical Information

  • IP address - For security and fraud prevention
  • Browser and device information - For service optimization
  • Usage data - Pages visited, features used (via anonymous analytics)

3. How We Use Your Information

We use your personal data for the following purposes:

3.1 Service Delivery

  • To create and manage your account
  • To generate AI-powered property assessment reports
  • To save reports to your dashboard for future access
  • To enable property comparison features
  • To provide customer support

3.2 AI Processing

  • Your photos and observations are sent to Anthropic’s Claude API for analysis
  • Photos are transmitted securely and processed in real-time
  • Anthropic does not retain your data beyond the API request (see Section 6.3)

3.3 Payment Processing

  • To process payments for property assessment reports
  • To manage refunds and billing disputes
  • To maintain transaction records for legal compliance

3.4 Communication

  • To send account-related notifications (e.g., password resets, report completion)
  • To respond to support inquiries
  • To send service updates (with your consent)

4. Data Storage and Security

4.1 Where We Store Your Data

  • Supabase (PostgreSQL database) - Stores account data, property reports, and assessment metadata. Hosted in EU/UK data centers where available.
  • Clerk - Stores authentication credentials. Data centers in EU and US.
  • Stripe - Stores payment information. PCI DSS Level 1 compliant.

4.2 Security Measures

  • All data transmitted over HTTPS encryption
  • Database access restricted to authorized personnel only
  • Regular security updates and patches
  • Passwords hashed using industry-standard encryption (bcrypt)
  • Two-factor authentication available for account protection

4.3 Photo Processing

  • Photos are temporarily processed during report generation
  • Photos are not permanently stored on our servers after processing
  • Photos are transmitted to Anthropic Claude API via secure HTTPS connection
  • Anthropic processes photos in real-time and does not retain them

5. Data Retention

  • Account data - Retained until you delete your account
  • Property reports - Retained until you manually delete them or delete your account
  • Payment records - Retained for 7 years for tax and legal compliance (UK law requirement)
  • Photos - Deleted immediately after report generation (not permanently stored)
  • Support communications - Retained for 3 years

6. Third-Party Services

We use the following third-party services to operate SurveyReady:

6.1 Clerk (Authentication)

  • Purpose: User authentication and account management
  • Data shared: Name, email, password (hashed)
  • Privacy policy: clerk.com/privacy

6.2 Supabase (Database)

  • Purpose: Secure storage of property reports and user data
  • Data shared: Property assessments, user preferences, report metadata
  • Privacy policy: supabase.com/privacy

6.3 Anthropic Claude API (AI Processing)

  • Purpose: AI-powered analysis of property assessments
  • Data shared: Property details, photos, user observations (during API request only)
  • Data retention: Anthropic does not retain data sent via API requests. Data is processed in real-time and immediately discarded.
  • Privacy policy: anthropic.com/privacy

6.4 Stripe (Payments)

  • Purpose: Secure payment processing
  • Data shared: Payment card details, billing address, transaction amounts
  • Compliance: PCI DSS Level 1 certified
  • Privacy policy: stripe.com/privacy

6.5 Vercel (Hosting)

7. Cookies and Tracking

7.1 Essential Cookies

We use cookies strictly necessary for the service to function:

  • Authentication cookies - Managed by Clerk to keep you logged in
  • Session cookies - To maintain your session state during use

7.2 No Third-Party Tracking

  • We do not use Google Analytics or similar tracking services
  • We do not use advertising cookies
  • We do not sell your data to third parties

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

8.1 Right to Access

You can request a copy of all personal data we hold about you.

8.2 Right to Rectification

You can update or correct your personal information at any time via your account settings.

8.3 Right to Erasure (“Right to be Forgotten”)

You can request deletion of your account and all associated data. Note: Payment records may be retained for 7 years for legal compliance.

8.4 Right to Data Portability

You can export your property assessment reports in PDF format at any time from your dashboard.

8.5 Right to Restrict Processing

You can request that we stop processing your data (while retaining it) in certain circumstances.

8.6 Right to Object

You can object to processing of your personal data for marketing purposes.

8.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw consent at any time.

9. How to Exercise Your Rights

To exercise any of your data protection rights, please contact us:

  • Email: privacy@surveyready.co.uk
  • Subject line: “GDPR Data Request”
  • Response time: We will respond within 30 days

Please include:

  • Your full name and email address associated with your account
  • A clear description of your request
  • Proof of identity (for security purposes)

10. Children’s Privacy

SurveyReady is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or a prominent notice on our website.

The “Last updated” date at the top of this policy indicates when changes were last made.

12. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

  • Website: ico.org.uk
  • Helpline: 0303 123 1113
  • Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: