Legal

Privacy notice

Last updated 19 October 2026

Who we are

Privett is run by Welto Limited (company number 14630258, registered office 167-169 Great Portland Street, London, England, W1W 5PF), a company registered in England and Wales. We are the controller of the personal data described here. If you have any questions, email ed@useprivett.com.

We're registered with the Information Commissioner's Office, number ZC278996.

What Privett does

Privett asks AI assistants (ChatGPT, Perplexity, Gemini, Claude) the questions people ask about estate and letting agents in a town. It records which agencies are named and suggests improvements. It's a service for businesses. Most of what we handle is information about agencies, not about individuals.

What we collect, and why

WhatExamplesWhyLawful basis
Account detailsYour email address, your name if you give it, the organisation you belong to and your roleTo create your account, sign you in and let your team work togetherContract
Branch detailsAgency and branch names, website, town, neighbourhoods, postcode, the questions you trackTo run your scansContract
Billing detailsYour plan, subscription status and a reference to your Stripe customer record. We never see or store your card detailsTo charge for your planContract; legal obligation (accounting records)
Free scan detailsThe email address you give, agency name, website and town, plus a one-way hashed version of your IP address. We never store the IP address itselfTo run the scan, show and email you the results, and limit free scans to one per agencyLegitimate interests (providing the scan you asked for and preventing abuse)
Emails we sendSign-in links, free scan results, account and billing messagesTo give you access and send what you asked forContract; legitimate interests
Scan resultsThe questions we asked, the AI assistants' answers, the agencies named and the websites they citedThis is the service. The answers are about businesses, not individualsContract
Technical dataBasic logs from our hosting providers, such as request times and errorsTo keep the service secure and workingLegitimate interests

We don't sell personal data, and we don't use it for advertising.

Marketing emails

When you run a free scan, you can tick a box to say you don't want marketing emails. If you don't tick it, we may send you occasional emails about getting named by AI assistants and about Privett. Every one has an unsubscribe link, and you can also email ed@useprivett.com to stop them. We rely on the “soft opt-in” in the Privacy and Electronic Communications Regulations, and on our legitimate interests.

The website tracking snippet

If you add our snippet to your website, it records a visit only when the visitor arrives from an AI assistant. It records which assistant it was, the page they landed on (without any query string) and the time. It sets no cookies, and stores no IP addresses, device identifiers or other personal data about your visitors.

Cookies and similar technologies

We use only what's needed to run the service:

  • Sign-in cookies, which keep you signed in (set by our authentication provider, Supabase).
  • An organisation cookie, which remembers which agency you're viewing if you belong to more than one.
  • A theme setting stored in your browser (light or dark).

We don't use analytics, advertising or tracking cookies. Because these are all strictly necessary, we don't ask for cookie consent.

Who we share data with

We use these service providers to run Privett. They process data for us under contract.

ProviderWhat for
SupabaseDatabase and sign-in
VercelHosting the website and app
RailwayRunning scans
StripePayments
ResendSending emails, from the EU (Ireland)
OpenAI, Perplexity, Google, AnthropicAnswering the questions in your scans, and (Anthropic) reading the answers
Google (Places)Reading public Google Business Profile ratings for agencies

What we send to the AI providers is the questions (for example, “best estate agent in Farnham”) and, for reading answers, the answer text. We don't send your email address, name or account details to them. We use their business APIs.

International transfers

Some of these providers are based in, or store data in, the United States. Where personal data leaves the UK, we rely on appropriate safeguards, such as the UK–US data bridge for certified companies, or the UK International Data Transfer Agreement or Addendum.

How long we keep data

  • Free scans: if you don't create an account with the same email address, we automatically delete your email address, hashed IP address, the scan and its results 90 days after you ran it. If you do create an account, the scan becomes part of your account data.
  • Account and branch data: kept while your account is open. When you delete your account in Settings, we delete it straight away, and it leaves our backups within 30 days.
  • Billing records: Stripe keeps your invoices and payment records, and we keep references to them, for six years, as accounting law requires.
  • Technical logs: kept by our hosting providers for a short period, then deleted.
  • Scan results: these are about businesses, not people. We keep them to show trends over time and may use them in aggregated or anonymised form (see below).

Aggregated and anonymised data

We use scan results across all agencies, which are about businesses rather than people, to improve our recommendations and to produce town league tables: how often AI assistants name each agency in a town. These don't contain personal data.

Your rights

You can ask us to:

  • give you a copy of your personal data;
  • correct it;
  • delete it;
  • restrict or object to how we use it;
  • move it to another service.

Email ed@useprivett.com and we'll respond within a month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

Changes

If we change this notice, we'll update the date at the top. If the changes are significant, we'll tell account holders by email. See also our terms.