Privacy Policy
Last updated: 05 June 2026
1. Who we are
PropAuto.ai is a trading name of Wentworth Standard Ltd, a company registered in England & Wales (company number 13628086), registered office 20 Wenlock Road, London, N1 7GU ("PropAuto", "we", "us", "our"). We provide YieldStream®SA, a software platform for UK serviced-accommodation operators. For any privacy matter, contact us at privacy@propauto.ai. We are registered with the Information Commissioner's Office (ICO) — registration pending; number to be confirmed.
2. What this policy covers
This policy explains how we handle the personal data of: (a) operators who hold or trial a YieldStream®SA account; (b) prospective operators who run a demonstration valuation or contact us; and (c) visitors to propauto.ai and app.propauto.ai. If you are a landlord who has submitted your details through an operator's valuation form, a separate notice applies to you — the Landlord Privacy Notice — available from that form.
3. The personal data we collect
- Account & identity data: your name, business/trading name, email address, and login credentials (we use magic-link authentication, so we do not store a password).
- Subscription & billing data: your plan, billing status, transaction history and billing references. Card payments are processed by Stripe; we do not store your full card details.
- Demonstration & enquiry data: if you run a demo valuation or contact us, your name, email and business name.
- Communications: messages you send us and our correspondence with you (including WhatsApp during founding-pilot onboarding, where you choose to use it).
- Technical & usage data: information needed to operate the portal securely, such as session data and basic activity within your account.
4. How we use your data and our lawful bases
- To provide the service and your account — basis: performance of our contract with you.
- To take payment and manage your subscription — basis: performance of our contract.
- To respond to enquiries and demos, and to provide support — basis: our legitimate interests in operating and supporting the business, or steps prior to a contract.
- To send service messages (e.g. account, billing, security) — basis: performance of our contract / legitimate interests.
- To send marketing about YieldStream products — basis: your consent, or our legitimate interests for existing business customers, and you can opt out at any time.
- To meet legal and accounting obligations — basis: legal obligation.
- To secure, maintain and improve the platform — basis: legitimate interests.
5. Who we share your data with (our processors)
We use trusted service providers to run the platform. The providers that handle operator/account data are listed below. (A fuller list of providers in the valuation pipeline, including those that handle landlord data, appears in the Landlord Privacy Notice.)
| Provider | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Supabase | Operator login & account database | UK (AWS London) | None needed (UK) |
| Stripe | Payments & subscription billing | USA | UK IDTA; PCI-DSS Level 1 |
| Lovable | Hosting of site & portal (data in transit) | USA | Provider safeguards |
| HubSpot | CRM for prospective-operator demo leads | USA | UK IDTA; EU residency option |
| Resend | Authentication emails (planned) | USA | SCCs / UK addendum |
| Google Workspace | Email and internal notifications | USA | SCCs / UK addendum |
We may also disclose data where required by law, to protect our rights, or in connection with a sale or reorganisation of the business.
6. International transfers
Some providers are outside the UK. Where personal data is transferred outside the UK, we rely on UK 'adequacy' regulations where they apply, or on the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, together with appropriate additional safeguards. You can ask us for more detail at privacy@propauto.ai.
7. How long we keep your data
- Account data: for as long as your account is open, and then up to 6 years after closure to meet legal, tax and limitation requirements.
- Billing records: 6 years, as required for tax/accounting.
- Demo/enquiry data: up to 24 months from your last contact, then deleted or reviewed.
- Marketing data: until you withdraw consent or object.
8. Your rights
Under UK data protection law you have the right to access your data; to have inaccurate data corrected; to erasure; to restrict or object to processing; to data portability; and to withdraw consent at any time where we rely on it. To exercise any right, email privacy@propauto.ai. We will respond within the statutory time limit (usually one month).
How to complain about how we handle your data
If you're unhappy with how we've handled your personal data, please tell us so we can put it right. Email privacy@propauto.ai, use our online data-protection complaints form, or write to Data Protection, Wentworth Standard Ltd, 20 Wenlock Road, London N1 7GU. We'll acknowledge your complaint within 30 days and keep you informed as we look into it.
You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, though we'd welcome the chance to resolve your concern first.
9. How to raise a concern or complain
If you are unhappy with how we have handled your data, please tell us first at privacy@propauto.ai. We will acknowledge your complaint within 30 days and work to resolve it. You also have the right to complain to the ICO (ico.org.uk; helpline 0303 123 1113), though we would ask you to raise it with us first.
10. Security
We use appropriate technical and organisational measures to protect personal data, including encrypted connections, access controls and reputable infrastructure providers. No system is perfectly secure, but we work to protect your information and to notify you and the ICO of any qualifying breach as required by law.
11. Cookies
Our sites use a small number of essential cookies. See our Cookie Policy for detail.
12. Changes
We may update this policy. We will post the updated version here and, for material changes, notify account holders. The "last updated" date shows the current version.
13. Contact
Wentworth Standard Ltd (t/a PropAuto.ai), 20 Wenlock Road, London, N1 7GU. privacy@propauto.ai
