Legal
Privacy Policy
Last updated: 23 May 2026
Who we are
Home Clarity is a service operated by [YOUR LEGAL NAME OR LIMITED COMPANY] of [YOUR REGISTERED OR TRADING ADDRESS]. We are the data controller for the personal data we process about you. You can contact us about this policy at support@home-clarity.co.uk.
What we collect
When you create an account, we collect your email address, name (if you provide it), and a hashed password (we never store your password in plain text).
When you upload a home survey PDF, we collect and store the file along with the AI-generated analysis we produce from it. These remain attached to your account so you can revisit them.
When you make a purchase, Stripe processes your payment. We receive only the customer reference, the price ID, and the success status. We do not see or store your card number.
We collect basic usage information through Vercel Analytics (anonymous page views, device type, country) and standard server logs (IP address, request timestamp, user agent) for security and reliability.
How we use it (lawful bases under UK GDPR)
Performance of contract: account creation, processing payments, running survey analyses, sending transactional emails (e.g. password reset, payment receipts).
Legitimate interests: detecting fraud and abuse, preventing service outages, improving the product, and contacting you about your account.
Legal obligation: keeping payment and tax records for the period required by HMRC.
Consent: where we ask for it explicitly, such as marketing emails. You can withdraw consent at any time.
Who we share it with
We use a small number of trusted sub-processors to operate the service. They process your data only on our instructions and under appropriate data protection agreements.
Supabase (authentication and database hosting). Located in the EU/US.
Stripe (payment processing). UK and US.
Resend (transactional email delivery). US.
Anthropic and / or OpenAI (the AI providers that generate the analysis from your uploaded survey). US. The contents of your uploaded survey are sent to these providers for processing. They are contractually prohibited from training on your data.
Vercel (hosting, analytics, error logs). US.
We do not sell your data. We do not share it with advertisers.
International transfers
Some of the providers above are based outside the UK. Where data is transferred internationally, we rely on UK adequacy decisions where they exist, or on the UK International Data Transfer Agreement / EU Standard Contractual Clauses with appropriate safeguards.
How long we keep it
Account data: while your account is active, plus up to 30 days after deletion to handle billing reversals or fraud investigations.
Uploaded surveys and analyses: kept for as long as your account is active, or until you delete them. Deleting a report removes both the PDF and the analysis output.
Payment records: retained for 6 years to meet HMRC requirements.
Server and analytics logs: rolling 14 months.
Your rights
Under UK GDPR you have the right to: access the data we hold about you, ask us to correct it if it is wrong, ask us to delete it, restrict or object to certain processing, request a portable copy of it, and withdraw any consent you have given.
To exercise any of these rights, email support@home-clarity.co.uk and we will respond within one calendar month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
We use a small number of cookies, all strictly necessary or analytics-related:
Authentication cookie (essential): keeps you signed in.
Stripe cookies (essential): set during checkout to detect fraud.
Vercel Analytics: a privacy-friendly, cookieless visit counter for our own product analytics. No cross-site tracking.
We do not use advertising cookies. Because we do not set non-essential tracking cookies, we do not show a cookie consent banner under the current PECR guidance.
Security
We use industry-standard practices: TLS in transit, encrypted storage at rest with our hosting providers, hashed passwords, and least-privilege access for our team. No system is perfectly secure, but we will tell you and the ICO without undue delay if a breach affects your data.
Changes to this policy
If we change this policy in a material way we will tell you by email or by a notice on the site before the change takes effect. The date at the top of this page is the date of the most recent change.
Contact
Questions about this policy or about the data we hold: support@home-clarity.co.uk.