Privacy Policy
Last updated: 07 August 2026
1. Who we are
PropAuto.ai is a trading name of Wentworth Standard Ltd, a company registered in England & Wales (company number 13628086), registered office 20 Wenlock Road, London, N1 7GU ("PropAuto", "we", "us", "our"). We provide YieldStream™SA, a software platform for UK serviced-accommodation operators. For any privacy matter, contact us at privacy@propauto.ai. We are registered with the Information Commissioner's Office (ICO), registration number ZC166855.
2. What this policy covers
This policy explains how we handle the personal data of: (a) operators who hold or trial a YieldStream™SA account; (b) prospective operators who run a demonstration valuation or contact us; and (c) visitors to propauto.ai and app.propauto.ai. If you are a landlord who has submitted your details through an operator's valuation form, a separate notice applies to you — the Landlord Privacy Notice — available from that form.
3. The personal data we collect
- Account & identity data: your name, business/trading name, email address, and login credentials (we use magic-link authentication, so we do not store a password).
- Subscription & billing data: your plan, billing status, transaction history and billing references. Card payments are processed by Stripe; we do not store your full card details.
- Demonstration & enquiry data: if you run a demo valuation or contact us, your name, email and business name.
- Communications: messages you send us and our correspondence with you (including WhatsApp during founding-pilot onboarding, where you choose to use it).
- Technical & usage data: information needed to operate the portal securely, such as session data and basic activity within your account.
4. How we use your data and our lawful bases
- To provide the service and your account — basis: performance of our contract with you.
- To take payment and manage your subscription — basis: performance of our contract.
- To respond to enquiries and demos, and to provide support — basis: our legitimate interests in operating and supporting the business, or steps prior to a contract.
- To send service messages (e.g. account, billing, security) — basis: performance of our contract / legitimate interests.
- To send marketing about YieldStream products — basis: your consent, or our legitimate interests for existing business customers, and you can opt out at any time.
- To meet legal and accounting obligations — basis: legal obligation.
- To secure, maintain and improve the platform — basis: legitimate interests.
5. Who we share your data with (our processors)
We use trusted service providers to run the platform. The providers that handle operator/account data are listed below. (A fuller list of providers in the valuation pipeline, including those that handle landlord data, appears in the Landlord Privacy Notice.)
| Provider | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Supabase | Operator login & account database | UK (AWS London) | None needed (UK) |
| Stripe | Payments & subscription billing | USA | UK IDTA; PCI-DSS Level 1 |
| Lovable | Hosting of site & portal (data in transit) | USA | Provider safeguards |
| HubSpot | CRM for prospective-operator demo leads | USA | UK IDTA; EU residency option |
| Resend | Authentication emails (planned) | USA | SCCs / UK addendum |
| Google Workspace | Email and internal notifications | USA | SCCs / UK addendum |
We may also disclose data where required by law, to protect our rights, or in connection with a sale or reorganisation of the business.
6. International transfers
Some providers are outside the UK. Where personal data is transferred outside the UK, we rely on UK 'adequacy' regulations where they apply, or on the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, together with appropriate additional safeguards. You can ask us for more detail at privacy@propauto.ai.
7. How long we keep your data
- Account data: for as long as your account is open, and then up to 6 years after closure to meet legal, tax and limitation requirements.
- Billing records: 6 years, as required for tax/accounting.
- Demo/enquiry data: up to 24 months from your last contact, then deleted or reviewed.
- Marketing data: until you withdraw consent or object.
8. Your rights
Under UK data protection law you have the right to access your data; to have inaccurate data corrected; to erasure; to restrict or object to processing; to data portability; and to withdraw consent at any time where we rely on it. To exercise any right, email privacy@propauto.ai. We will respond within the statutory time limit (usually one month).
9. If you are unhappy with how we have handled your information
Tell us first if you can — email privacy@propauto.ai or use our complaints form at https://form.jotform.com/261656811059057. We will acknowledge your complaint within 30 days, look into it, and tell you the outcome. This is a duty we have under the Data Protection Act 2018.
You can also complain to the Information Commissioner's Office at any time, whether or not you have come to us first. ICO helpline 0303 123 1113, or ico.org.uk/make-a-complaint.
10. Security
We use appropriate technical and organisational measures to protect personal data, including encrypted connections, access controls and reputable infrastructure providers. No system is perfectly secure, but we work to protect your information and to notify you and the ICO of any qualifying breach as required by law.
11. Cookies
Our sites use a small number of essential cookies. See our Cookie Policy for detail.
12. Changes
We may update this policy. We will post the updated version here and, for material changes, notify account holders. The "last updated" date shows the current version.
13. Contact
Wentworth Standard Ltd (t/a PropAuto.ai), 20 Wenlock Road, London, N1 7GU. privacy@propauto.ai
