Privacy Notice

TenantSafe is a product of ThinkTribal Ltd, registered in England and Wales.ThinkTribal Ltd is the data controller for personal data processed through this service.

Contact: privacy@thinktribal.co.uk

We collect and process the following categories of personal data:

• Account information: name, email address, password (hashed)
• Address data: your home address is collected at account setup. It is included in complaint correspondence (generated letters) and in any provider submissions you choose to share with your housing provider.
• Housing information: housing provider name, tenancy type
• Complaint data: descriptions, dates, timeline events, generated letters
• Evidence files and metadata (EXIF/GPS): photographs you upload may contain embedded metadata including GPS location, capture timestamp, and device information. This metadata is retained as part of the evidence record for its evidential value. If you share evidence with your housing provider, embedded metadata is included in that submission. You can delete individual evidence items at any time; however, an audit record of the deletion is retained permanently.
• Session metadata: login timestamps, chatbot session start/end times

Conversation transcripts are never stored. TenantSafe records only the structured complaint data you choose to save — not the full text of your chat conversation.

• To provide the TenantSafe service and generate complaint letters
• To show your complaint data to your linked housing provider (only when you explicitly share a submission)
• To send transactional emails (deadline alerts, letter delivery) when activated
• To display contextually relevant advertisements to tenants who are not linked to a housing provider. Advertisements are not targeted using your personal data.

We rely on the following UK GDPR lawful bases:

• Contract (Art. 6(1)(b)): account data, address, complaint records, and generated letters — necessary to provide the TenantSafe service you signed up to.
• Legitimate interests (Art. 6(1)(f)):evidence-file metadata (EXIF / GPS / timestamp) retained for evidential integrity of complaints; security logging; audit trails of deletions. A Legitimate Interests Assessment (LIA) is held by ThinkTribal's DPA and available on request.
• Consent (Art. 6(1)(a)): non-essential cookies (e.g. Google AdSense advertising cookies). You can withdraw consent at any time via the cookie banner.
• Legal obligation (Art. 6(1)(c)): retention of complaint records to comply with statutory limitation periods for housing disputes (see Retention below).

We share your data with the following third parties:

• Supabase — database and authentication (EU region, eur3/eu-west-2)
• Anthropic — AI processing of your complaint information to generate letters (data processed under Anthropic's API terms)
• Vercel — application hosting
• Resend — transactional email delivery (when activated)
• Google AdSense — advertising (only if you accept advertising cookies)

Provider submissions. When you choose to share a complaint submission with your housing provider through TenantSafe, ThinkTribal Ltd acts as a data processor on your behalf for the purpose of transmitting that submission. Once received, your housing provider becomes the data controllerfor the submitted content and is responsible for handling it in accordance with their own privacy notice and UK GDPR obligations. The full submission record (including any evidence files and metadata) is retained by TenantSafe. You may request retraction at any time; retraction removes the provider's active access but does not delete the submission record.

We retain personal data for the following periods, after which it is deleted or anonymised:

• Account data(name, email, hashed password, address): for the lifetime of the account. On account closure, account data is deleted within 30 days, except where it forms part of a retained complaint record (see below).
• Complaint records, generated letters, and provider-submission records: retained for 6 yearsfrom the date the complaint is closed, in line with the limitation period under the Limitation Act 1980 for contractual housing-disrepair claims. After 6 years the records are deleted or anonymised for aggregate reporting only.
• Evidence files (photos, documents) and embedded metadata: retained with the parent complaint record (6 years). You can delete individual evidence items at any time; an audit record of the deletion is retained for the same 6-year period.
• Session metadata, login timestamps, chatbot session start/end times: retained for 12 months for security, abuse detection, and statistical analysis.
• Anonymous aggregated statistics (e.g. counts by housing provider used to power transparency pages): retained indefinitely. These do not identify individual tenants.

Under UK GDPR you have the right to:

• Access your data (Subject Access Request, free of charge in most cases)
• Correct inaccurate or incomplete data
• Erase your data (subject to the retention obligations above — complaint records in active limitation periods may not be erasable)
• Restrict or object to processing
• Data portability — receive a copy of your data in a portable format
• Withdraw consent for any processing based on consent (e.g. advertising cookies)
• Lodge a complaint with the ICO (see Section 9)

To exercise any right, contact privacy@thinktribal.co.uk. We respond within one month, in line with UK GDPR.

We use strictly necessary cookies to maintain your session. With your consent, we also use Google AdSense cookies for advertising. You can withdraw consent at any time by clicking "Decline" in the cookie banner or clearing your browser's localStorage.

To raise a data protection concern, email privacy@thinktribal.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO).