Privacy Policy

Verixad ("we", "us") provides a property operations platform for UK letting agents and landlords. This policy explains what personal data we collect through verixad.com and the Verixad application, why we collect it, and the rights you have over it. We are the data controller for the account and billing information described in Section 2, and a data processor for the property, tenant, and document data our customers store in the Service on their own behalf — see Section 5.

We collect the following categories of information:

• Account information — name, email address, and password (stored encrypted, never in plain text) when you register.
• Organisation information — your agency or business name, and any contact details you add to your organisation profile.
• Billing information — your subscription plan and billing history. Card details are collected and stored directly by our payment processor, Stripe — we never receive or store your full card number.
• Content you upload — properties, tenancies, contacts, documents, and other records you or your team add to the Service. See Section 5 for how this category is handled differently.
• Usage and technical information — basic technical logs (such as IP address and browser type) generated automatically by our hosting infrastructure for security and reliability purposes.
• Contact form and enquiry submissions — anything you send us through the contact form, enterprise enquiry form, or by email.

We use the information above to:

• Provide, operate, and maintain the Service, including your account and your organisation's workspace;
• Process subscription payments and manage billing, via Stripe;
• Send account-related emails — sign-up verification, password resets, and service notifications;
• Respond to enquiries sent through our contact or enterprise forms;
• Maintain the security, integrity, and proper functioning of the Service;
• Meet our own legal and accounting obligations.

We do not use your data to serve you advertising, and we do not sell your data to third parties. We do not currently run any analytics or tracking scripts on verixad.com.

We rely on the following lawful bases under UK GDPR:

• Contract — processing your account and organisation data is necessary to provide the Service you've subscribed to;
• Legitimate interests — for technical logs and security monitoring, balanced against your right to privacy;
• Consent — where you explicitly opt in, such as submitting a contact form;
• Legal obligation — for billing and tax records we're required to keep.

When you or your team use Verixad to manage properties, tenancies, contacts, and documents, you are the data controller for that information, and Verixad acts as a data processor on your instructions. This is standard for B2B software: your organisation decides what data to enter, who on your team can see it, and how long to keep it — we process it only to provide the Service to you, and we do not access it except where necessary to provide support you've requested, investigate a security issue, or comply with the law.

Each organisation's data is isolated from every other organisation's data at the database level — one customer can never see another customer's properties, documents, or contacts.

We use a small number of trusted subprocessors to run the Service. We don't sell or rent your data to anyone, and we only share it with the providers below to the extent necessary to operate Verixad:

• Supabase — our database, authentication, and file storage provider. Your account data and everything you upload is hosted on Supabase's infrastructure within the EU.
• Stripe — our payment processor, for subscription billing. Stripe is PCI-DSS compliant and handles your payment details directly.
• Resend — our transactional email provider, used to send account verification, password reset, and service-related emails.

We may also disclose information where required by law, to protect our legal rights, or in connection with a merger, acquisition, or sale of assets — in which case we'd notify you before your data becomes subject to a different privacy policy.

Verixad uses only the technologies strictly necessary to run the Service: a session cookie / local storage token from Supabase Auth to keep you signed in, and a local storage entry to remember your light/dark theme preference. Neither is used for tracking or advertising, and neither requires consent under UK PECR because both are strictly necessary for the Service to function. We do not currently use any analytics, marketing, or advertising cookies. If that changes, we'll update this section and add a consent mechanism before any non-essential technology is enabled.

We keep account and billing information for as long as your account is active, and for a limited period afterwards to meet our legal and accounting obligations (typically up to six years for financial records, in line with UK requirements). If you close your account, we delete or anonymise your organisation's data within a reasonable period, except where we're required to retain it for legal reasons.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate data;
• Request deletion of your data, subject to our legal retention obligations;
• Request a portable copy of your data;
• Restrict or object to certain processing;
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email us at support@verixad.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe we haven't handled your data properly.

We use industry-standard security practices to protect your data, including encryption in transit and at rest, private per-organisation storage for uploaded documents, and strict access controls that isolate every customer's data from every other customer's. No system can be guaranteed 100% secure, but we take reasonable technical and organisational steps to protect your information against unauthorised access, loss, or misuse.

Verixad is a business tool intended for use by adults working in the property and letting industry. We do not knowingly collect personal data from anyone under 18.

We may update this Privacy Policy from time to time. If we make material changes, we'll notify active subscribers by email or through the Service before the changes take effect.

Questions about this policy or how we handle your data can be sent to support@verixad.com.