Account details (name, email, password hash), financial information you enter into the Wallet calculator, documents you upload to your Vault, property preferences, and messages you send within the app.

To provide the mortgage affordability estimate, to match you with relevant listings and agencies, to enable secure messaging, and to maintain your Document Vault.

Documents uploaded to your Vault are encrypted at rest and are never shared with anyone unless you explicitly initiate a share action. Solicitor/professional document sharing is a feature we are still building -- initiating a share today only records your request internally and does not yet send your documents anywhere.

Agencies and agents you initiate contact with. We do not sell your personal data to third parties. We use the following service providers (data processors) to operate the app: Supabase (database and encrypted document storage, hosted in the EU), Render (application hosting), Resend (transactional email, e.g. password resets -- your email address is sent to Resend only when you request a password reset), and ip-api.com (resolves your approximate location from your IP address so we can default you to your local property market).

We retain your account and financial data for as long as your account is active. Documents uploaded to your Vault are automatically deleted after 12 months. You may request deletion of your account and associated data at any time; some records (such as messages you've sent to other users, and security/access logs) may be retained after account deletion where needed to preserve the integrity of another user's conversation history or for security auditing, even though they are no longer linked to your identifying details.

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. You can export your data or delete your account directly from the app at any time, or contact us to exercise these rights another way.

We use your approximate location (derived from your IP address, resolved via ip-api.com) to default property listings to your local market. You can browse any other supported country at any time.

Questions about this Privacy Policy can be sent to privacy@roofline.io.