Last updated: 4 July 2026
PropertyBrief (estatebrief.com) is operated by Two Cores Operations Ltd, registered in England and Wales. We are the data controller for the personal data described in this policy. You can reach us any time through the contact page.
Account data. When you create an account we store your email address and authentication records so you can sign in.
Portfolio data. The property information you upload (addresses, rents, values, tenancy details, and similar) is stored so we can generate your reports. It is your data. We process it only to run the service for you and never sell it or use it to build products for anyone else.
Billing data. Payments are handled by Stripe. Your card details go directly to Stripe and never touch our servers. We keep a reference to your Stripe customer record and your subscription status.
Usage data. We use Google Analytics 4 to understand how the site is used (pages visited, approximate location, device type). This is aggregated and not used to identify you.
Messages and signups. If you use the contact form or join the newsletter, we store what you submit (handled by Netlify Forms) so we can reply and send you the newsletter you asked for.
We process account and portfolio data to perform our contract with you, billing data to take payment, and usage data under our legitimate interest in improving the product. Newsletter emails are sent only with your consent, and every email includes a way to unsubscribe.
Supabase (authentication and database hosting), Stripe (payments), Netlify (hosting and form handling), and Google Analytics (usage statistics). Each processes data on our behalf under their own security and data processing terms. We do not sell personal data to anyone.
We keep your account and portfolio data while your account is active. If you delete your account, or ask us to, we delete your personal data within 30 days except where we must keep records for tax or accounting law. Contact form messages are kept only as long as needed to handle your enquiry.
Under UK GDPR you can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we process it. Email us via the contact page and we will respond within one month. You also have the right to complain to the ICO (ico.org.uk) if you think we have handled your data badly.
If we change this policy we will update this page and the date at the top. Material changes will be flagged to account holders by email.