Privacy Policy
Last updated: March 2026
Who we are
DepositAdvisor is a UK tenancy deposit dispute advisory service operated by Chris Knight. Contact: hello@depositadvisor.co.uk
What we collect and why
1. Account information
If you create an account, we collect your email address and a hashed password. This is necessary to provide the service.
Legal basis: contract.
2. Usage data
We collect anonymised data about how you use the service. This includes:
- – Which tool you used (item appraisal or letter assessment)
- – Which claim category you selected
- – The amount being claimed
- – The assessment verdict (fair, questionable, or unlikely to stand)
- – How long the assessment took
- – Whether you clicked the upgrade prompt
- – Whether you created an account
- – Errors that occurred during your session
This data is used to improve the product. It does not include the text of any letter you paste, the description of any item you enter, or any question you ask.
Legal basis: legitimate interest — disclosed at sign-up and via the beta notice.
3. IP address (rate limiting)
We record your IP address temporarily to prevent abuse of the free tier. IP addresses are held for a rolling 24-hour window only.
Legal basis: legitimate interest — necessary for service integrity.
4. Marketing consent
If you opted in to marketing communications at sign-up, we store a record of that consent.
Legal basis: consent.
What we do not collect
- ✗ The text of any letter you paste into the tool
- ✗ The description of any item you enter
- ✗ Any question you ask via the Q&A tool
- ✗ Your name, address, or phone number
- ✗ Payment information (handled directly by Stripe — not stored by us)
Third parties
We use the following third-party services to operate DepositAdvisor:
- –Supabase — database and authentication (EU data processing)
- –Anthropic — AI generation (your inputs are sent to Anthropic's API to generate responses)
- –OpenAI — embedding generation for search (query text is sent to OpenAI's API)
- –Railway — backend hosting
- –Vercel — frontend hosting
- –Stripe — payment processing (Sprint 3, not yet active)
Your letter content, item descriptions, and questions are sent to Anthropic and OpenAI as part of generating your assessment. These providers process data under their own terms. We do not store this content ourselves.
Data retention
- –Account data: retained until you delete your account
- –Usage analytics: reviewed and anonymised or deleted at end of beta period
- –IP rate limit records: rolling 24-hour window
- –Error logs: 90 days
Your rights
Under UK GDPR you have the right to:
- – Access the personal data we hold about you
- – Request correction of inaccurate data
- – Request deletion of your account and associated data
- – Object to processing based on legitimate interest
- – Lodge a complaint with the ICO (ico.org.uk)
To exercise any of these rights, email hello@depositadvisor.co.uk
Cookies
We use one cookie: a session cookie set by Supabase to keep you signed in. We do not use tracking cookies or third-party analytics cookies.
Changes to this policy
We will update this page if our data practices change. The date at the top of this page shows when it was last revised.