Privacy Policy

What we collect

• Account details — name, email address, and a securely hashed password. We never store your password in plain text.
• Project & application details — the answers you give in our wizard, including applicant and site details, and dimensioned information about each elevation of your property (heights, widths, materials, etc.), so we can prepare your planning application.
• Documents you upload — site plans, elevation drawings or photos, floor plans, and other supporting documents needed for your council submission.
• Payment information — records of what was paid, when, and for which package. Your card details are entered directly into Stripe's secure checkout page and never pass through or get stored on our servers.
• Builder account data — if you sign up as, or are invited by, a builder, we hold your company/tenant details and, for payouts, information from Stripe Connect about your connected account (not your bank details, which Stripe holds directly).
• Technical data — standard server access logs (IP address, browser user-agent, timestamps) generated automatically when you use the site.

Why we process it

• To perform our contract with you — creating your account, running the wizard, preparing and (for the Fully Managed package) submitting your planning application, and taking payment.
• Legitimate interests — keeping the service secure and reliable, preventing fraud, and improving how the site works.
• Legal obligation — keeping financial records (including VAT invoices) for as long as required by law.
• Consent — optional analytics, only if you opt in via the cookie banner. See our Cookie Policy.

Who we share it with

• Your builder, if one set up your account or you're working with one — they can see your project details and documents in order to help prepare and submit your application.
• Stripe, our payment processor, to take payment and (for builders) to pay out commission via Stripe Connect. See Stripe's privacy policy.
• The relevant local council, where your package includes us submitting your application on your behalf, or where you or your builder submit it using the documents we prepare.
• Hosting and infrastructure providers who store data and run this service on our behalf, under contract, and only as needed to provide the service.

We do not sell your personal data to third parties.

How long we keep it

We keep account and project data for as long as your account is active, and for a reasonable period afterwards to meet our legal and regulatory obligations (typically up to 7 years for financial and project records, in line with standard UK record-keeping requirements). You can ask us to delete your data sooner — see "Your rights" below.

Your rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Ask us to delete your data ("right to be forgotten"), subject to legal retention requirements
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent at any time for anything based on consent (e.g. analytics cookies)
• Complain to the Information Commissioner's Office (ICO) if you think we've mishandled your data

To exercise any of these rights, email support@supadupaai.com.

Changes to this policy

We may update this policy from time to time. We'll update the "last updated" date above when we do.