Legal

Privacy Policy

Last updated: 20 April 2026

1. Who we are

Scapely ("we", "us", "our") provides AI-powered property development intelligence to UK property professionals through the scapely.io website and the Scapely browser extension. We are the data controller of any personal data described in this policy. You can reach us at mail@scapely.io.

2. What we collect

  • Account data — your email address and an encrypted password (or third-party identity token) used to create and authenticate your account.
  • Subscription data — billing status and Stripe customer/subscription identifiers. Card details are handled directly by Stripe and never reach our servers.
  • Usage data — the addresses, postcodes and listing URLs you ask Scapely to analyse, plus the resulting appraisals we generate for you.
  • Technical data — limited request logs (timestamp, endpoint, status, IP) used for security, abuse prevention and debugging.

3. How we use it

We use the data above to:

  • provide the appraisal, watchlist and extension features;
  • authenticate you, enforce your plan limits and process payments via Stripe;
  • debug, monitor and improve the service, including training internal heuristics on aggregated, non-identifying usage patterns;
  • send essential service emails (billing receipts, security notices). We do not send marketing email without your explicit opt-in.

4. Lawful bases (UK GDPR)

We rely on contract (to deliver the service you sign up for), legitimate interests (to keep the service secure and improve it) and legal obligation (e.g. to retain billing records). Where a basis isn't available, we ask for your consent.

5. Data sources we query on your behalf

When you run an appraisal we query public UK property data (HM Land Registry EPC register, planning portals, council boundary data) and third-party APIs (Anthropic for language analysis, Google Maps for geocoding). We send the minimum data necessary — typically a postcode, address line or UPRN — and never share your account identity with these providers.

6. Subprocessors

  • Supabase (authentication & primary database) — EU region.
  • Stripe (payments).
  • Anthropic (AI analysis).
  • Google Maps Platform (geocoding).
  • Cloud hosting (UK / EU region).

7. Retention

We keep your account and appraisal history for as long as your account is active. Billing records are retained for seven years to meet UK accounting requirements. Deleting your account removes your appraisal data within 30 days, except where we are legally required to retain it.

8. Your rights

Under UK GDPR you can request access to, correction of, or deletion of your personal data, restrict or object to processing, and request portability. Email mail@scapely.io and we'll respond within 30 days. You can also complain to the UK Information Commissioner's Office (ico.org.uk).

9. Cookies and local storage

The website uses a small number of strictly-necessary cookies for authentication and session security. The browser extension stores your Supabase session and your selected tier in chrome.storage.local so you don't have to sign in on every page.

10. Changes

We may update this policy from time to time. Material changes will be announced on the website and, where appropriate, by email.

11. Contact

Questions about this policy? Email mail@scapely.io.