Privacy, data, and GDPR
PropertyInvestiQ is a UK-based service and operates under UK GDPR. This article summarises what we hold, why, and how to get it back or removed.
What we collect
- Account data — email address, encrypted password (or your linked Google account), the date you signed up, and your GDPR consent choices.
- Usage data — which scores and AI analyses you’ve run, with timestamps. This drives the monthly quota counter and lets us spot bugs.
- Subscription data — your plan, status, renewal date, and a Stripe customer reference. Card details are stored by Stripe, never by us.
- Saved lots — auction lots you’ve added to your watchlist.
- Support history — any message you send via the in-app contact form or email to
support@propertyinvestiq.co.uk.
We do not collect: third-party tracking cookies, advertising IDs, or your physical address.
How long we keep it
| Data | Retention |
|---|---|
| Account + usage data | While your account is active, then up to 30 days after deletion |
| Subscription records | 6 years (HMRC requirement) |
| Support tickets | 2 years |
| Email logs (welcome, day-7) | 12 months |
Your rights
Under UK GDPR you can ask us to:
- Show you everything we hold about you (a “subject access request”)
- Correct anything inaccurate
- Delete your data — we’ll keep only what we legally must (e.g. accounting records)
- Restrict how we process specific items
- Object to processing where the legal basis is “legitimate interests”
- Move your data to another service in a portable format
Export is self-serve: use Download my data in Account → Data & Privacy for a JSON copy of everything we hold. To delete your account, email support@propertyinvestiq.co.uk and we’ll process it within 30 days.
Marketing and updates
Two separate toggles in your profile dropdown:
- Marketing consent — promotional emails (offers, partnerships). Off by default. Toggling off does not affect transactional emails.
- Product updates — feature announcements and roadmap news. Off by default.
Welcome emails, billing receipts, password resets, and security alerts are transactional — they ship even with both toggles off, because they’re necessary to operate your account.
Cookies
We keep you signed in with a session token stored in your browser’s local storage, not a cookie. We measure aggregate site usage with Umami, a cookieless analytics service that collects no personal data. No advertising or tracking cookies.
Complaints
If you think we’ve mishandled your data, the UK regulator is the Information Commissioner’s Office (ico.org.uk). Their helpline is 0303 123 1113.
If you want to raise it with us first — and we’d appreciate the chance — email support@propertyinvestiq.co.uk.