Privacy Policy

1. Who we are

This Privacy Policy explains how AssetIQ Advanced Limited (“AssetIQ”, “we”, “us”) collects and uses personal information when you use the AssetIQ website and application (the “App”) and our related services.

We are the “controller” of your personal information, which means we decide how and why it is used. We are a company registered in Scotland (company number SC903987), with our registered office at 20 The Foundry, Glasgow, G41 1BN.

You can contact us at contact@assetiq.business or by post at AssetIQ Advanced Limited, 20 The Foundry, Glasgow, G41 1BN.

This policy sits alongside our Terms and Conditions, available at assetiq.business/terms.

2. What information we collect

2.1 Information you give us

• Account details: your name, email address and password. Your password is handled by our authentication provider and stored in hashed form, so we cannot see it.
• Your invite code, if you signed up with one.
• Property and portfolio information you enter: addresses and postcodes, prices, rents, mortgage and cost assumptions, portfolio entries, reminders, and the analyses you save or compare.
• Consultation requests: your name, email address and phone number, the topic and format you choose, your preferred date and time, your budget and goals, and any file you attach.
• Messages you send us, including complaints.

2.2 Information collected automatically

• Records of agreement: which version of our Terms you accepted, and when.
• Usage information: actions you take in the App, such as adding a property, submitting an enquiry, downloading a report or asking the built-in assistant a question. These are recorded against your account, sometimes with a short label — for example a property’s address, or the first part of a question — so that we can understand how the App is used and fix problems.
• Technical information: your IP address and details of your browser and device, which our hosting provider records in server logs when you use the App.
• Marketing records: if you opt in to marketing emails, a record of when and how you did so and, if you later unsubscribe, when.

2.3 Information from other sources

We use public datasets about areas, such as house price statistics from the Office for National Statistics, crime data from Police.uk and planning data from planning.data.gov.uk. These describe places, not people. We do not buy personal information about you or receive it from other organisations.

We do not knowingly collect special category information (such as health information). Please do not include it in free-text boxes or attachments.

3. How we use your information, and our legal basis

The law requires us to have a legal basis for using your personal information. These are ours:

• To create and manage your account, run your calculations, and store your portfolio, reminders and reports — because we need to do this to provide the Services to you (contract).
• To handle your consultation requests — to provide that service, or to take steps you ask for before entering into a contract (contract).
• To send you service notifications, such as account and security messages, reminders you set, confirmations, and price alerts you choose to receive — to provide the Services, and because it is in our legitimate interests to keep you informed about a service you use (contract and legitimate interests).
• To keep the App secure, prevent misuse, keep records of the Terms you accepted, and establish, exercise or defend legal claims — our legitimate interests in protecting our business and our users (legitimate interests).
• To understand how the App is used, and to fix problems and improve it — our legitimate interests in running and improving the Services (legitimate interests).
• To send you marketing emails — only with your consent, which you can withdraw at any time (consent).
• To meet legal obligations, such as keeping accounting and tax records and responding to lawful requests from authorities (legal obligation).

Where we rely on legitimate interests, we have considered whether they are outweighed by your rights and freedoms, and we keep our use of your information limited to what is needed. You can object at any time (see section 10).

4. Notifications and marketing

4.1 Service notifications

We send messages that are part of providing the Services: account and security notices, changes to our Terms or this policy, reminders you set, updates on consultation requests you make, and alerts you choose to receive. These are not marketing. Essential account, security and legal notices cannot be switched off while you have an account.

4.2 Marketing emails

We only send marketing emails — for example news about new features, market updates, and information about our consultation services — if you have separately opted in. Agreeing to our Terms does not opt you in, and you do not need to opt in to use AssetIQ.

We keep a record of your consent. You can withdraw it at any time, free of charge, using the unsubscribe link in any marketing email. We will then stop promptly, and keep only a note that you have unsubscribed so that we do not email you again.

We do not sell your email address, or share it with other companies so that they can send you their own marketing.

5. Automated calculations

AssetIQ produces yields, cash flows, Investment Scores, Deal Verdicts and indications of lender affordability automatically, from the figures you enter and public data. These are calculations to help you make your own decisions. They are not decisions with legal or similarly significant effects on you, and they do not determine whether you can use any service or product.

The built-in assistant follows rules within the App. It does not send your questions to an external AI service. (As described in section 2.2, the first part of a question is recorded as usage information.)

If you would like to talk something through with a person, you can book a consultation.

6. Who we share your information with

6.1 Service providers who process information for us

• Vercel Inc., which hosts the App and handles web requests.
• Supabase, which provides our database and sign-in (authentication).
• An email delivery provider, to send you service notifications and, if you opt in, marketing emails.
• A payment provider, if we introduce paid subscriptions. We will update this policy first. We do not store full card details.

These providers act on our instructions and are not allowed to use your information for their own purposes.

6.2 Public data services we contact to provide area information

When you add a property, our servers send its postcode to Postcodes.io to find its location, and its coordinates to Police.uk and planning.data.gov.uk to retrieve crime and planning information. We send only the location — not your name, email address or account details.

6.3 Services your browser contacts directly

When you use the App, your browser connects directly to some services, which therefore receive your IP address: Supabase (to sign you in and load your data), Google Fonts (to load typefaces) and OpenStreetMap (to show maps, if you view a property’s location).

6.4 People we introduce you to

If you ask us to contact agents or sellers for you, or to introduce you to a mortgage broker, solicitor, surveyor or other professional, we share the details needed for that with them. We only do this to carry out your request, and they will handle your information under their own privacy policies.

6.5 Others

We may share information with professional advisers such as lawyers and accountants; with regulators, courts or law enforcement where the law requires it; and with a buyer or successor if our business is sold or restructured, who would be required to protect your information in line with this policy.

We do not sell your personal information.

7. Transfers outside the UK

Our main database is hosted in London. Some of our providers, including our hosting provider Vercel Inc., are based in the United States or process information there.

When personal information is transferred outside the UK, we make sure it is protected by an approved safeguard — such as the UK’s adequacy arrangements for certified US organisations (the “UK–US data bridge”) or the UK Addendum to the EU standard contractual clauses. You can contact us for more information about these safeguards.

8. How long we keep your information

• Your account, portfolio, reminders and saved analyses: while your account is open. If you ask us to delete your account, we will delete or anonymise this information within one month, apart from anything we are required or entitled to keep.
• Consultation requests: for as long as needed to deal with your request, and then for up to two years after our last contact, in case of follow-up questions or complaints.
• Records of the Terms you accepted: while your account exists.
• Usage records: while your account exists. When an account is deleted, they are deleted or anonymised.
• Server logs: for a short period set by our hosting provider.
• Marketing consent: for as long as you receive marketing from us. If you unsubscribe, we keep a minimal record so that we do not email you again.
• Accounting and tax records, if we introduce payments: at least six years, as the law requires.
• Backups: information deleted from the App may remain in routine backups for a short time before being overwritten.

9. Cookies and similar technologies

We use only what is strictly necessary to run the App: a sign-in session, so that you stay logged in and your data stays private to you, and your browser’s local storage, to remember settings and keep your work between visits. These do not need your consent under the rules on cookies.

We do not use advertising cookies or third-party analytics cookies. If we add anything else, we will ask for your consent first and update this policy. If we start measuring whether emails are opened or links are clicked, we will tell you here first.

10. Your rights

Under UK data protection law you have the following rights:

• Access — to ask for a copy of the personal information we hold about you.
• Correction — to ask us to fix information that is wrong or incomplete.
• Erasure — to ask us to delete your information in certain circumstances.
• Restriction — to ask us to pause using your information in certain circumstances.
• Portability — to ask for the information you gave us in a portable format, where we hold it by consent or contract.
• Objection — to object to us using your information on the basis of legitimate interests. You also have an absolute right to object to direct marketing at any time.
• Withdrawing consent — at any time, where we rely on your consent, without affecting the lawfulness of what we did before.

To use any of these rights, email us at contact@assetiq.business. We may need to check your identity. We will normally reply within one month, and we do not charge a fee unless a request is clearly unfounded or excessive. These rights are not absolute in every case, and if we cannot fully agree to a request we will explain why.

11. Keeping your information secure

We take reasonable steps to protect your information, including encrypted connections (HTTPS), access controls, and database-level restrictions designed so that each account can only read its own records. No online service can be completely secure, so please use a strong, unique password.

If a security breach is likely to put you at risk, we will tell you and the Information Commissioner’s Office, as the law requires.

12. Children

AssetIQ is for people aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a child has given us information, please contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. The latest version is always available at assetiq.business/privacy, with its date at the top. If we make significant changes, we will tell you by email or in the App.

14. Contact and complaints

For questions or to use your rights:

Email: contact@assetiq.business

Post: AssetIQ Advanced Limited, 20 The Foundry, Glasgow, G41 1BN

You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk/make-a-complaint or on 0303 123 1113. You do not have to contact us first, but we would welcome the chance to put things right.