Privacy Policy

Terravo operates the Terravo service.

If you have any privacy questions or want to exercise your data rights, email hello@terravo.co.uk.

We are the data controller for personal data collected through the Terravo service under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We may collect account details such as your name, email address, password login details handled through Supabase Auth, plan type, billing status, and profile details you add to your account.

If you are a buyer or user, we may collect saved properties, search alerts, recent searches, viewing or offer notes you store in your account, and property enquiries you send through the platform.

If you are an agent, we may collect listing content you upload or generate, including addresses, descriptions, images, EPC-related details, AI-generated tags, and listing management information. We also collect information you enter into agent tools such as the CMA valuation tool, including property addresses, grid references, uploaded images and documents, and brochure URLs you submit for analysis.

If you are a landlord using the Landlord Suite, we may collect portfolio addresses, tenancy details you enter, maintenance records, and financial data you record within the tool. This data is processed to provide the landlord management service you have requested.

We also process technical and usage information needed to run the site, including IP address, browser or device information, authentication events, server logs, and browser storage data used to remember saved searches, alerts, and account activity.

If you contact us via the contact form or email, we collect the details you provide including name, agency, email, phone, and message content in order to respond to your enquiry.

We use personal data to provide the Terravo service, including account creation, login, saved properties, search alerts, agent listing tools, subscription billing, customer support, and platform security.

We also use data to generate search results, match scores, property reports, renovation estimates, photo intelligence, CMA valuations, planning data summaries, and other AI-assisted product features requested by users or agents.

Where appropriate, we use data to send service messages, alert emails, billing communications, and critical updates about your account or listings.

We do not use personal data to train AI models. When you use AI-assisted features, data may be passed to our AI processor (Anthropic) to generate outputs, but this is subject to Anthropic's enterprise data handling commitments which prohibit using API inputs to train models.

We process personal data where it is necessary to perform a contract with you, for example to provide an account, subscription, saved properties, alerts, listings, reports, or other requested features.

We also process data where it is necessary for our legitimate interests, including improving the platform, defending legal claims, preventing abuse, securing the service, and understanding how core product features are used.

Where we send transactional communications such as alert emails, we rely on the legitimate interest in keeping users informed about activity on their accounts. Where we send any optional marketing communications, we will seek consent where required under the Privacy and Electronic Communications Regulations (PECR).

If we ever introduce non-essential analytics, advertising, or optional marketing cookies, we will rely on consent where required.

We use third-party processors to run the service. The following are our current third-party processors and the purpose for which data is shared:

Supabase — authentication, database, and storage. Hosts your account data, listings, saved properties, alerts, and other user-generated content.

Vercel — web hosting, CDN, and serverless function execution. Processes requests and delivers page content.

Stripe — subscription billing and payment processing. We share your billing details with Stripe; we do not store full card details ourselves.

Resend — transactional email delivery for alert emails, account notifications, and contact form confirmations.

Anthropic — AI text and vision processing for features including Quick List, CMA valuation, photo intelligence, and the AI Chat Advisor. Images and text you submit to AI-assisted features are processed by Anthropic under their API terms. Anthropic does not use API inputs to train models.

Google Fonts — web font delivery. Your browser may make requests to Google's servers to load fonts.

Postcodes.io — postcode-based geographic lookups used in search and property tools.

OpenStreetMap / Nominatim — address geocoding used in the CMA valuation tool to resolve property addresses to geographic coordinates. Only the address or location string you enter is sent; no account information is included.

HM Land Registry — price paid data API used in the CMA valuation tool to retrieve comparable sales data. Only geographic search parameters (postcode, district) are sent; no personal data is transmitted.

planning.data.gov.uk — UK government planning datasets API used in the CMA tool to check planning designations (including Ancient Woodland, AONB, National Parks, Green Belt, conservation areas, and listed buildings) at a given location. Only coordinate data is sent.

Environment Agency — flood risk monitoring data API used in the CMA tool to check flood risk at a given location. Only coordinate data is sent.

We share only the data reasonably needed for those services to operate. We do not sell personal data.

Some of our providers may process data outside the UK. Where that happens, we expect appropriate safeguards such as UK adequacy decisions, standard contractual clauses, or other recognised transfer mechanisms to be in place.

Anthropic processes data in the United States. Their enterprise API terms include data processing commitments appropriate for business use.

We keep personal data only for as long as reasonably necessary for the purposes described in this policy, including account administration, legal record keeping, billing, fraud prevention, dispute handling, and service continuity.

You can ask us to delete your account data, subject to any legal or operational retention requirements. Some data may need to be retained for a period for billing record purposes even after account closure.

Under UK GDPR and the Data Protection Act 2018, depending on the circumstances you may have the right to:

— Access the personal data we hold about you

— Correct inaccurate personal data

— Erase personal data (“right to be forgotten”), subject to legal retention requirements

— Object to processing based on legitimate interests

— Restrict processing in certain circumstances

— Data portability where processing is automated and based on consent or contract

— Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email hello@terravo.co.uk. We will respond within one month.

You also have the right to complain to the UK Information Commissioner's Office (ICO) if you believe your data has been handled unlawfully. The ICO can be reached at ico.org.uk or on 0303 123 1113.

We use reasonable technical and organisational measures to protect personal data, including database row-level security through Supabase, TLS encryption in transit, and restricted access to production systems.

No internet service can guarantee absolute security. If you become aware of any security concern related to your account, please contact us immediately.

Terravo is intended for adults using property search, listing, landlord management, and related services. The service is not designed for or directed at children under 18. We do not knowingly collect data from children.

We may update this policy from time to time. When we make material changes, we will update the date at the top of the page and, where appropriate, provide additional notice to registered users.

Contact us first at hello@terravo.co.uk if you have a privacy concern, wish to exercise your rights, or want to make a complaint.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.