Privacy Policy | AI for Mortgage Brokers

1. Who we are

AI for Mortgage Brokers is operated by [Company Name Ltd], registered in England and Wales (Company No. [XXXXXX]), with registered address at [Your Address]. We are the data controller for the personal information described in this policy.

For any privacy-related queries, contact us at privacy@aiformortgagebrokers.co.uk.

2. What data we collect

We collect the following personal data when you apply to join or use our community:

Full name — for your community profile and communications
Email address — for account access, notifications, and communications
Phone number — optional, for account verification if required
Company / brokerage name — to verify you are a mortgage industry professional
Usage data — pages visited, features used, and time spent on the platform (anonymised analytics only)

We do not collect payment card information directly. Any paid services are processed by third-party payment providers (Stripe) under their own privacy policies.

3. Why we collect it

We use your personal data for the following purposes:

Community access: to verify your eligibility and provide access to the platform
Communication: to send you account-related emails (approval, notifications, digest)
Security: to protect the community from abuse and ensure members are genuine mortgage professionals
Service improvement: to understand how the platform is used and make it better

Our lawful basis for processing is legitimate interests (operating a private professional community) and contractual necessity (providing the service you applied for).

4. How we store your data

Your data is stored securely in Supabase (a PostgreSQL database hosted on AWS infrastructure in the EU). All data is encrypted in transit (TLS) and at rest. We use industry-standard security practices including row-level security policies that restrict data access by user role.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. How long we keep it

We retain your personal data for as long as your membership is active, plus a further 12 months after account closure or deactivation — to comply with any outstanding legal obligations and to handle potential disputes.

After this period, your data is permanently deleted from our systems. You can request earlier deletion at any time (see “Your rights” below).

6. Your rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access: request a copy of the data we hold about you
Right of correction: request that inaccurate data is corrected
Right of erasure: request that your data is permanently deleted
Right to object: object to processing based on legitimate interests
Right to portability: receive your data in a machine-readable format

To exercise any of these rights, email privacy@aiformortgagebrokers.co.uk. We will respond within 30 days.

7. Cookies

We use essential cookies only. These are required to keep you logged in and maintain your session. We do not use advertising cookies, tracking cookies, or any third-party analytics cookies that identify you personally.

You can decline non-essential cookies via the banner when you first visit the site. Declining cookies will not prevent you from using the platform, but you will need to log in on each visit.

8. Third-party services

We use the following third-party services that may process your data:

Supabase — database and authentication (EU servers)
AWS Amplify — hosting
Google OAuth — optional “Sign in with Google” (only if you choose to use it)

9. GDPR compliance

We are committed to full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you have a concern about how we handle your data that we cannot resolve, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

10. Changes to this policy

We may update this policy from time to time. When we do, we will update the “Last updated” date at the top of this page and notify members by email of any material changes.