Privacy

We collect the minimum needed to run a subscription: an email address, a password we never see in plain text, the sentence you write describing a property, and ordinary technical logs.

Your property descriptions are not used to train any model, ours or anybody else’s. We never sell personal data. There is no way to upload an image here, so we hold no imagery of any property.

The data controller is the company named on the legal information page. Data protection questions go to support@jamesagent.shop.

• Account data — email address, hashed password, display name if you set one. Needed to give you an account, so the lawful basis is performance of a contract.
• Billing data — plan, period, renewal date, and the two cancellation consents you gave at checkout. Needed for the contract and to meet our legal obligations. Card numbers are handled entirely by our payment provider and never reach us.
• Your descriptions and routes — the sentence you write about a property, the route built from it, and any notes you add. Needed to provide the service.
• Technical data — IP address, browser, and request logs, kept to keep the service secure and working. The lawful basis is our legitimate interest in a service that is not being abused.

Your property descriptions, your routes and your notes are not used to train any model, ours or a third party’s, and they never will be under this policy.

The only place a description goes outside your browser is to a classification step that decides what kind of building it describes. That step returns a short list of building-type labels and nothing else. Where a third-party model provider is used for it, we do so under terms that prohibit training on the content we send.

We do look at anonymised, aggregated signals — how often a classification fails, how long a page takes to load — to keep the thing working. None of that identifies anybody.

• Account data: until you delete your account.
• Routes and notes: until you delete them, or until your account is deleted.
• Billing records: six years after the end of the relevant tax year, because tax law requires it.
• Technical logs: 90 days.

Only the suppliers needed to run the service: our hosting provider, our database and authentication provider, our payment provider, and the model provider used for classification. Each acts on our instructions under a written contract.

We do not sell personal data and we do not share it for advertising.

Some of our suppliers are outside the United Kingdom. Where personal data leaves the UK we rely on UK adequacy regulations where they apply, and otherwise on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with a transfer risk assessment.

Under the UK GDPR and the Data Protection Act 2018 you can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict how we use it, object to our use of it, and ask for it in a portable form. Email support@jamesagent.shop and we will answer within one month.

You also have the right to complain to the Information Commissioner’s Office (ico.org.uk), which is the UK supervisory authority for data protection. You can complain to them without coming to us first, though we would rather have the chance to put it right.

If you are in California, you may ask what personal information we have collected and ask us to delete it, and you have the right not to be discriminated against for doing so. We do not sell or share personal information as those terms are used in the CCPA, and we honour Global Privacy Control signals.

This service is for people aged 18 and over. We do not knowingly collect data from anybody under 18. If you believe a child has an account here, tell us and we will delete it.

The whole site is served over HTTPS. Passwords are stored hashed, never in plain text. Card numbers never reach our systems: they go directly to a payment provider certified to PCI DSS Level 1. Access to production data is limited to the people who need it.

We set only what is strictly necessary to keep you signed in, unless you agree to more. See the cookie policy.

We will tell registered users by email at least 14 days before any material change to this policy takes effect.