Privacy Policy

01 Who we are

OpenProperty Tech Limited is a company incorporated in England and Wales, Company No. 14882283, 116 Yardley Road, Birmingham, B27 6LG. Our contact email is contact@openproperty.io.

For UK data protection purposes, OpenProperty Tech Limited is the data controller for personal data processed through openproperty.io. This policy covers openproperty.io and all professional access services. The consumer product is operated via umovingu.io, which has a separate privacy policy.

02 The data we collect

• Identity and contact data: Name, job title, organisation, business email and telephone when you register or contact us.
• Technical and usage data: IP address, browser type, pages visited, API call logs and timestamps. Collected automatically when you access our services.
• Property data access logs: Records of which Passport records were accessed, when, and by which authorised user. An audit record — not a copy of homeowner data.
• Communications data: Content of emails or form submissions you send us.
• Account credentials: Hashed passwords and API keys associated with your professional account.

What we do not collect

We do not collect or store homeowner personal data directly. Homeowner Property Passport data is stored encrypted. We cannot access it without the homeowner's explicit consent. This is a technical constraint of the architecture, not merely a policy commitment.

03 How we use your data

• Providing the service: Processing API access requests, authenticating credentials, and returning verified results.
• Account management: Creating and managing professional accounts, issuing API keys, communicating service updates.
• Security and fraud prevention: Monitoring API usage, rate limiting, detecting unauthorised access attempts.
• Compliance and audit: Maintaining records of which professional users accessed which Passport records and when.
• Service improvement: Aggregate, anonymised analysis of how the API is used. No individual user data without further notice.
• Communications: Responding to enquiries and, where you have consented, sending service updates.

04 Legal basis for processing

• Contract performance: Processing necessary to provide the API service you have contracted for.
• Legitimate interests: Security monitoring, fraud prevention, aggregate analytics and maintaining the audit trail.
• Legal obligation: Retaining records as required by applicable law.
• Consent: Marketing communications where you have opted in. Withdraw at any time by emailing contact@openproperty.io.

05 Who we share data with

We do not sell personal data. We share only in the following circumstances:

• Technology infrastructure providers: Cloud hosting, database and security services bound by data processing agreements and UK GDPR equivalent protections.
• Legal requirements: Where required by law or regulatory authority. We will notify you where legally permitted.
• Business transfer: In the event of merger or acquisition. You will be notified and your rights protected.

06 Data retention

• Account data: Duration of your account plus 7 years following closure.
• API access logs: 7 years — part of the homeowner data access audit trail.
• Communications: 3 years from last contact, or as required by legal obligation.
• Security data: 6 months active threat detection; up to 3 years where a security incident occurred.

07 Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict, port and object to processing of your data, and to withdraw consent where applicable. Email privacy@openproperty.io. We respond within one calendar month. You also have the right to complain to the ICO at ico.org.uk.

08 Security

• Encryption in transit (TLS 1.2 minimum) and at rest for all platform data
• API key management with rotation capability and scope limiting
• Role-based access controls for internal systems
• Incident response with 72-hour ICO notification for eligible breaches

09 Contact us

• Email: privacy@openproperty.io
• Post: OpenProperty Tech Limited, 116 Yardley Road, Birmingham, B27 6LG
• Company No.: 14882283

We will acknowledge within 5 working days and respond in full within one calendar month.