Privacy Policy
Effective: 20 May 2026 · Controller: Alunio Ltd, Prime Central London · Contact: legal@alunio.ai
What We Collect
We collect the following personal and transactional data when you use Alunio:
- Full name, email address, and agency name (account registration)
- Property transaction data you enter: addresses, sale prices, milestone dates, and details of parties involved in each transaction
How We Use It
- Providing the Alunio deal progression service, including milestone tracking and chain risk scoring
- Generating AI chase email drafts — transaction data is sent to Anthropic's Claude API for processing. Anthropic processes this data solely to fulfil your request and does not use it to train their models.
- Error monitoring via Sentry to detect and resolve service issues
Legal Basis
- Contract performance (Art 6(1)(b) UK GDPR) — processing your account and transaction data to deliver the service you have contracted for
- Legitimate interests (Art 6(1)(f) UK GDPR) — product analytics (PostHog) and error monitoring (Sentry), where our interest in maintaining a reliable, improving service does not override your rights
Third-Party Processors
We share data with the following sub-processors under data processing agreements:
| Processor | Purpose | Location / Transfer Mechanism |
|---|---|---|
| Supabase | PostgreSQL database | EU-hosted |
| Anthropic | AI processing (Claude) | US — Standard Contractual Clauses |
| Resend | Transactional email | US — Standard Contractual Clauses |
| Vercel | Hosting & CDN | US — Standard Contractual Clauses |
| Upstash | Redis rate-limiting | US — Standard Contractual Clauses |
| Sentry | Error monitoring | US — Standard Contractual Clauses |
| PostHog | Product analytics | US/EU — Standard Contractual Clauses, consent-gated |
Retention
- Account data is retained while your account is active and for 3 years following termination
- Transaction data is retained for 7 years to comply with UK financial records requirements
Your Rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Rectification of inaccurate data
- Erasure (“right to be forgotten”) where no overriding legal obligation applies
- Restriction of processing in certain circumstances
- Data portability in a machine-readable format
- Object to processing based on legitimate interests
To exercise any of these rights, email legal@alunio.ai. We will respond within 30 days.
Cookies
For full details of what we store in your browser, see our Cookie Policy.
Changes to This Policy
We will notify you by email at least 30 days before making any material changes to this Privacy Policy. Continued use of the service after the effective date of any changes constitutes acceptance of the updated policy.