YOUR INFORMATION

Privacy, in plain English.

Last updated 14 November 2026. OpenRoof is in early access. Use the in-app Help form or email info@openroofdata.co.uk for support and privacy enquiries.

What we collect

If you create an account, we store your email address, your chosen display name, your acceptance of the terms, and your saved landlords. Supabase manages your password as a secure hash. We store only a hash of your recovery code, not the code itself. Support messages are stored when you submit them.

Operational security logs may include IP addresses, request timing, status codes and browser information. Passwords, recovery codes and session tokens must never appear in application logs.

Why we use it

We use account data to provide the account and saved features you request, handle support requests, and secure the service. Our basis for providing requested account features is performance of the account agreement. Our legitimate interests in running a reliable, secure service cover proportionate abuse prevention and operational logging. We do not sell personal data, run advertising trackers, or sign you up to marketing.

Account emails

Resend delivers email confirmations, password-reset links and support notifications. We use your email for account recovery only after you confirm ownership. Existing early-access accounts can confirm their email in Account; their recovery codes keep working. We do not send marketing emails or enable email open/click tracking.

Where it is processed

Railway hosts the website and request processing. Supabase provides authentication and the account database, with the project configured in London. Resend processes account emails and the info@openroofdata.co.uk inbox. Support enquiries and their attachments are copied to the operator’s Gmail inbox so we can respond. PostHog’s EU service receives operational measurements: route names, response times, status codes and sanitised server errors. These measurements exclude email addresses, request bodies, passwords and session tokens. We do not enable session recording or track individual visitors. Diagnostic measurements are retained for up to one year. These providers may use their own operational infrastructure and subprocessors. Housing information shown in the app is separate from your account data.

Cookies and browser storage

We use essential secure session cookies to keep you signed in and a request-security cookie to protect forms. The app remembers display preferences, recent landlords and your selected landlord in your browser. There are no optional advertising or analytics cookies in this release. Signing out clears the app’s local storage on supported browsers.

Retention and your choices

Your account data remains while your account is active. You can export it and delete your account in Account. Deletion removes the live account, saved landlords, recovery record and account-linked support messages. Copies of support emails in Resend and Gmail can be removed on request; deleting your account does not automatically remove those copies. Provider backups and operational logs follow the providers’ retention periods and are not instantly erased by live deletion.

Requests and concerns

You can request access, correction, deletion, restriction or portability through the in-app Help form. Account export and deletion are self-service. Do not send sensitive tenancy, health, payment or identity documents. Replies to OpenRoof account emails go to the operator. Formal operator contact details will be added before the full public launch.

You can object to processing based on legitimate interests through Help. We do not make automated decisions about your housing eligibility or other decisions with legal or similarly significant effects. Joining is optional; without account details you can still use the Overview, Housing Map and Learn sections.

UK users can raise data-protection concerns with the Information Commissioner’s Office.