Privacy

Last updated: 31 May 2026

Who we are

PropertySignal is operated by Nuthatch LLC (“Nuthatch”), the data controller for the personal data described in this notice. Contact: hello@propertysignal.ai.

What we collect

• Property addresses and assumptions you enter while analyzing a deal. Addresses are sent to RentCast to retrieve property data.
• Account information (email, name, profile image) if you create an account. Authentication is handled by Clerk.
• Saved deals you choose to keep in your portfolio (address, assumptions, computed results, optional tags).
• Product-usage events (page views, actions, errors) via PostHog. Used to understand which features help.
• Standard server logs (IP address, user-agent, timestamp) from our hosting provider, retained for security and abuse prevention.
• Anonymous quota trackingif you use the free tier without an account. We store a one-way salted SHA-256 hash of your IP address (never the raw IP) alongside a count of free analyses used, so the 5-free limit can't be reset by clearing cookies. The hash is one-way and used only for this rate limit — it isn't linked to any account or used for any other purpose.

What we don't collect

We don't collect government IDs, banking credentials, or precise device location. We don't run advertising trackers. We don't sell personal data.

Legal basis for processing (EU / UK users)

Under the EU and UK General Data Protection Regulation (GDPR), we rely on the following legal bases:

• Contract (Art. 6(1)(b)): to provide the analysis tool you asked for, including the address lookup, account creation, and saved-deal storage.
• Legitimate interest (Art. 6(1)(f)): for security logging, abuse prevention, and aggregate, pseudonymized product analytics that help us improve the tool.
• Consent (Art. 6(1)(a)): for any non-essential cookies or analytics requiring explicit opt-in under the ePrivacy Directive. You can withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)): where applicable law requires us to retain or disclose data.

Who we share data with

Only the third-party processors we need to run the product. Each is bound by a data-processing agreement that limits use to the purposes below.

• RentCast (United States): property data lookups. Receives the address you enter.
• Clerk (United States): authentication and account management.
• PostHog (United States): product analytics (pseudonymized event data).
• Vercel (United States): hosting and edge delivery.
• Neon (United States): managed Postgres database for saved deals.
• Google Maps (United States): optional Street View imagery (address only, when enabled).

International data transfers

Our infrastructure and the processors above are based in the United States. When data about EU, UK, or Swiss users is transferred to the United States, we rely on the European Commission's Standard Contractual Clauses and, where applicable, our processors' certifications under the EU–U.S. Data Privacy Framework, the UK Extension to the DPF, and the Swiss–U.S. DPF.

How long we keep data

Saved deals are kept for as long as your account is active. Server logs are retained for up to 90 days for security and abuse prevention. Product-analytics events are retained for up to 12 months. If you delete your account, we delete the associated deals and personal data within 30 days, except where retention is required by law.

Your rights

If you are in the EU, UK, or Switzerland (and, where applicable, under California, Colorado, Virginia, and similar US state laws), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data (“right to be forgotten”).
• Restrict or object to certain processing.
• Receive a portable copy of your data in a machine-readable format.
• Withdraw consent for any processing based on consent.
• Lodge a complaint with your local data-protection supervisory authority.

To exercise any of these rights, email hello@propertysignal.ai. We respond within 30 days.

Cookies

We use a session cookie from Clerk for authentication (strictly necessary), a first-party ps_anoncookie that holds an opaque identifier for free-tier usage tracking (also strictly necessary — without it the 5-free limit can't be enforced), and a PostHog cookie for product analytics. We don't use advertising or cross-site tracking cookies. EU and UK users will see a consent prompt before non-essential cookies are set.

Children

PropertySignal is not directed at children under 16. We don't knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this notice

Material changes will be flagged at the top of this page with a new “Last updated” date. For significant changes affecting EU or UK users, we will additionally notify account holders by email where feasible.

Contact

Privacy questions, data requests, or complaints: hello@propertysignal.ai.