Privacy Policy — MyPorta

Version: privacy-2026-11-01-v2

What changed: Our AI improvement policy now distinguishes eligible business information and genuinely anonymous learning from identifiable personal data. Existing retention, sharing choices and statutory rights remain unchanged. Previous version.

1. INTRODUCTION

This Privacy Policy explains how AI Property Intelligence Ltd (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you use MyPorta (www.myporta.ai).

We are committed to protecting your privacy and complying with UK GDPR (General Data Protection Regulation) and the Data Protection Act 2018.

Data Controller: AI Property Intelligence Ltd
Company Number: 16474737

Registered in: England and Wales

Registered office: Suite 3 The Palace Theatre, 156 High Street, Swansea, Wales, SA1 1NE

Contact: privacy@myporta.ai

This notice covers MyPorta. MyHome has its own product privacy notice. The ModelProp services are supplied separately by ModelProp Ltd under its own Privacy Notice. Shared branding does not itself permit sharing your private information.

2. WHAT DATA WE COLLECT

2.1 Account Information

When you create a MyPorta account, we collect:

Email address
Name (if provided)
Phone number (optional)
Any preferences or settings you configure

2.2 Usage Data

We automatically collect:

IP address
Device information (browser type, operating system, device type)
Pages visited and features used
Search queries and property filters
Time and date of activities
Referring website (if any)
Cookies and similar tracking technologies

2.3 User-Uploaded Content

Furniture images and property annotations you upload
Any notes or metadata associated with uploads
Timestamps of uploads

2.4 Communication Data

If you contact us:

Email messages and any attachments
Support ticket history
Chat or feedback submissions

2.5 Third-Party Data Sharing (When You Request It)

If you explicitly request to share your data with third parties (mortgage companies, removal firms, etc.):

We collect the information you authorize for sharing
We collect records of your sharing requests
Third parties will process your data separately under their privacy policies

3. HOW WE USE YOUR DATA

3.1 Service Delivery

Creating and managing your account
Providing MyPorta features and functionality
Processing your uploads and content
Responding to your requests and inquiries
Sending service updates and technical notices

3.2 AI and Analytics

AI features process the information needed for the feature you request, which can include property information, selected search requirements, questions or images. Contracted AI providers may process those inputs to return a result. This processing can involve personal data and is not necessarily anonymous. Section 7 and the saved-homes and sharing explanation below describe the distinction between operating a feature and sending information to an agent.

We may use lawfully available public business information, business content we are authorised to use, and genuinely anonymised information to develop, train, test and improve our AI, products and services across our product family. This applies to current and future services as our technology and methods evolve.

We do not use identifiable personal data about you, agency team members or clients to train or improve our own wider AI models. Public staff profiles and property information can contain personal data; public availability alone does not make them eligible for training.

Information used for anonymous learning must first be processed so that individuals cannot reasonably be identified, including by combining it with other available information. Removing names or encrypting data alone is not anonymisation. Any processing needed to anonymise personal data must itself be lawful, with an appropriate purpose, lawful basis, notices and safeguards; when acting as a processor we follow documented lawful instructions.

Products can still use authorised agency, team, property and user information to deliver the service requested. That is separate from wider model training. Private records are not made available to other customers, and confidentiality, copyright, database rights and platform conditions remain protected. Shared branding does not authorise another group company to access personal data.

These permitted improvement purposes are not tied to a particular model, supplier or technical method. Reusable models, methods and improvements we develop remain ours or our licensors’ and may continue to be used after the service ends, subject to confidentiality, third-party rights and applicable law. Required supplier notices, transfer safeguards and contract changes still apply.

We may use genuinely anonymised, aggregated information to understand usage and improve the service. Optional account analytics are subject to the choice described in Privacy & sharing. The current consumer app does not load a separate analytics provider.

3.3 Communications

Sending necessary account, security and service messages
Sending optional marketing only where permitted by law and your applicable preferences
Responding to support requests
Notifying you of changes to these policies

3.4 Legal Compliance

Complying with UK GDPR and Data Protection Act 2018
Responding to legal requests or government authorities
Preventing fraud, abuse, or illegal activity
Enforcing our Terms and Conditions

3.5 Sharing with Agents and Other Recipients

Sending an enquiry or sharing selected information with an agent or other external recipient requires your explicit request within MyPorta. Saving homes and searches does not send an enquiry
Enquiry and brief-sharing screens let you review the recipient and selected information before confirming. Later withdrawal cannot recall delivered email or erase an independent recipient’s copies
Third parties are responsible for their own privacy practices
Separately, service providers process data to operate MyPorta, as described in Sections 3.1 and 7.1. This processing is not necessarily anonymous

4. LEGAL BASES FOR PROCESSING

We process your personal data under the following UK GDPR legal bases:

4.1 Contract Performance (Article 6(1)(b))

Account creation and management
Service delivery
Processing your requests

4.2 Legal Obligation (Article 6(1)©)

Meeting applicable legal requirements, including responding to valid statutory requests and maintaining records required by law

4.3 Legitimate Interests (Article 6(1)(f))

Improving MyPorta features and functionality
Assessing service performance where personal-data processing is necessary and proportionate; genuinely anonymous statistics fall outside personal-data rules
Preventing abuse and protecting security
Customer service and support

4.4 Consent (Article 6(1)(a))

Marketing communications (if you opt in)
Optional analytics beyond basic usage tracking
Other optional processing where we specifically request valid consent. Consent can be withdrawn without affecting earlier lawful processing

5. DATA RETENTION

5.1 Account Data

We retain account information while needed to provide your account and its features. Available deletion controls remove the app-held records described below. Other deletion requests are assessed under applicable law, including whether information remains necessary for a legal obligation, security, fraud prevention or the establishment, exercise or defence of a legal claim.

We respond to rights requests within the applicable statutory period described in section 8. This is not a promise that every live record, backup or independent recipient’s copy is erased by the same date. Data that may lawfully be retained remains subject to appropriate restrictions and is deleted or anonymised when no longer needed.

5.2 Usage Data

Aggregated usage data: retained for 24 months (anonymised)
Individual log data: retained for 90 days

5.3 Uploaded Content

We retain uploads and their associated information while needed for the features you use. You may request deletion through available controls or privacy@myporta.ai. The applicable rights, lawful exceptions and handling of copies already shared with others are explained in sections 5.1 and 8 and below.

5.4 Communications

Support tickets and emails: retained for 2 years
Deleted after that period, or earlier where an applicable erasure right requires it; lawful retention exceptions may apply

6. COOKIES AND BROWSER CHOICES

Our Cookies and browser choices page describes the current storage and optional integrations. Clerk supports sign-in and session management; Cloudflare supports security and abuse prevention. Necessary functions remain available when optional features are rejected.

Google Maps, YouTube and uFurnish have separate optional browser choices. Loading them can send connection, browser and relevant content information to those suppliers. The cookie settings also support a one-time choice for an individual map or video. Browser media permissions are separate from your account’s optional analytics and recent-search preferences.

The neighbourhood map obtains map software and tiles from other providers as described on the Cookies page. Ordinary links take you to independent websites with their own privacy choices. MyPorta settings cannot remove another website’s cookies.

The current consumer app does not load a separate analytics provider.

7.1 Service Providers and AI

We use service providers for functions such as sign-in, hosting, security, storage, email delivery and AI features. Relevant inputs may be processed by AI providers to produce the results you request. Our responsibility for selecting and using providers is not removed by their own privacy policies.

Quick intro drafting uses the selected search requirements and priorities described below; generating a draft does not itself send an enquiry. Other AI features may use different inputs, such as a question or an image supplied for that feature. Avoid including personal or sensitive information that is not needed.

Providers and feature configurations can change. Contact privacy@myporta.ai for information about recipients relevant to your personal data and any applicable transfer safeguards. We provide additional information where the law requires it.

7.2 Enquiries and Sharing with External Recipients

We send enquiries and selected information to agents and other external recipients when you explicitly request it. This is separate from service-provider processing described above
When you request sharing (e.g., send my details to a mortgage company):
- You review and confirm the enquiry or sharing request before we send it; this does not supply consent for unrelated marketing
- We share only the information you authorise
- Third parties process your data under their own privacy policies
- Their privacy information explains how they handle their copy; MyPorta remains responsible for its own processing

7.3 Independent Recipients and Integrations

Agents and other businesses receiving enquiries ordinarily determine how they handle and respond to them and are responsible for their own processing. Optional maps, videos and shopping integrations can involve independent providers, as explained on our Cookies page. This is different from a supplier processing information on our behalf.

7.4 MyPorta in AI Assistants (ChatGPT and Others)

MyPorta has an app that works inside AI assistants such as ChatGPT. When you ask the assistant to use it:

The assistant sends us the request it is making for you: the place, budget, bedrooms and the wishes you described, or the home or area you asked about. We use this only to answer that request
The assistant provider may also send a random identifier for your account that does not tell us who you are, your approximate location and your language setting. We use the identifier only to limit how often the app can be called
We do not receive your name, email address or your conversation, and we do not use these requests to build a profile of you or to market to you
When you open a home found on an agent’s website, we count the click (which home, which agent, sale or let) without recording anything about you, so we can tell agents how many people we sent them
Requests are kept in our service logs only as long as needed to keep the service secure and working
The assistant provider handles your conversation under its own privacy policy

Your saved homes and named searches are private to your account. You can label a search as Just browsing or Planning a move, associate homes with searches, amend those associations and delete them in your account. Changing a search to Planning a move does not contact an agent. Saving does not enrol you in new alerts or marketing.

If you enable recent-search memory, we retain your most recent search separately from named searches. Turning memory off removes that recent history. Privacy & sharing also records your optional analytics choice and lets you stop earlier search alerts. Essential sign-in and security functions remain available.

Contact agent and Share my brief show the named recipient and the information you are choosing to share. These details are sent to that agency by email and made available in its partner dashboard: your contact details, message, property enquiry, and any named search or associated saved homes you explicitly choose to include. A named search includes whether you marked it Just browsing or Planning a move. Only eligible partner agents receive enquiries. A partner’s service level determines which approved details it can access; a higher level never grants access to unrelated searches or private browsing. We retain the specific brief version you approved, so later edits do not silently change an earlier enquiry. Sharing an enquiry does not give permission for unrelated marketing.

Full picture shares the selected search details and any saved homes you choose to include. Quick intro shares only the introduction you review and approve, alongside your contact details and enquiry; it does not give the agency the underlying searches or saved homes. You can write this yourself or ask MyPorta’s AI service to draft it from the selected searches. AI drafting uses their requirements and priorities, not your contact details, unrelated searches, adaptive answer history or raw conversations. Review the draft for accuracy and remove anything you do not wish to share before confirming. Draft generation itself does not contact an agent.

You can view your account’s sharing records and withdraw sharing in Privacy & sharing. Withdrawal stops future dashboard access and queued notifications. A notification already being sent may still arrive, and delivered email cannot be recalled. For an enquiry sent without signing in, contact privacy@myporta.ai with your enquiry reference to request access or withdrawal; we will verify your identity before acting.

Download my data exports your saved homes, searches, preferences and app-held sharing records. Delete MyPorta data removes those records and stops associated queued notifications; it does not remove your separate sign-in credentials. Manage sign-in account opens the account provider’s profile controls. When a sign-in account is deleted, we process its verified deletion event to erase linked MyPorta consumer data. A minimal deletion marker prevents delayed requests from recreating deleted data. Backup copies expire under our backup retention arrangements. For further deletion requests or questions, contact privacy@myporta.ai.

8. YOUR PERSONAL-DATA RIGHTS

Depending on the circumstances and legal basis, you may have rights to access and correct your personal data, request erasure or restriction, receive a portable copy, object to processing and withdraw consent. These rights have legal conditions and exceptions. You can object to use of your personal data for direct marketing at any time; that processing must stop. Withdrawal of consent does not make earlier lawful processing unlawful.

Contact privacy@myporta.ai to exercise a right or raise a privacy complaint. You do not have to use legal terminology or a particular form. We may request information reasonably necessary to verify your identity or clarify a request where the law permits this.

For rights requests, we respond without undue delay and ordinarily within one calendar month, subject to the applicable statutory rules. Where an extension or other adjustment is lawfully available, we explain it and any required reasons. A request does not automatically require every copy to be erased or every objection to be accepted; if a lawful exception applies, we explain our decision and the available complaint rights.

For a privacy complaint, email privacy@myporta.ai, write to our registered office, or use our optional privacy request and complaint form, which you can send by email or post. We acknowledge a complaint within 30 days, investigate appropriately without undue delay, keep you informed and communicate the outcome. This is separate from the response period for a rights request.

The current consumer features support property research and recommendations; they do not themselves approve a mortgage, allocate a tenancy or decide another binding eligibility outcome. Rights and safeguards relating to significant automated decisions apply where the law requires them.

You can complain to the Information Commissioner’s Office. Contacting us does not remove that right or your right to a judicial remedy.

9. SECURITY AND PERSONAL-DATA BREACHES

We protect personal data using appropriate security measures, including encryption and access controls, and apply technical and organisational safeguards appropriate to the risks. Encryption protects information in transit and storage; it does not make personal data anonymous. No system can guarantee absolute security. Keep your sign-in details secure and report suspected misuse.

We assess personal-data breaches and make notifications where required by law. A notifiable breach must be reported to the ICO without undue delay and, where feasible, within 72 hours of awareness. If a breach is likely to create a high risk to affected individuals, they must be informed without undue delay, subject to the legal exceptions.

10. INTERNATIONAL DATA TRANSFERS

MyPorta operates in the UK. However:

If you are outside the UK, your data may be transferred to UK servers
We ensure such transfers are compliant with UK GDPR
LLM providers may be based outside the UK — we ensure appropriate safeguards (Standard Contractual Clauses, etc.)

11. CHILDREN’S PRIVACY

MyPorta’s accounts are intended for people aged 18 or over. If you believe a child has provided personal data through an account or feature, contact privacy@myporta.ai. We assess the information and take the action required by applicable law.

12. YOUR RIGHTS AND OUR TERMS

The fact that MyPorta is free does not remove its data-protection obligations. Limitations in our terms do not restrict personal-data rights or remedies that cannot lawfully be excluded.

13. CHANGES TO THIS POLICY

We may update this notice to reflect changes in the service, our practices or the law. We identify material changes and provide any information or obtain any consent required before a new use of personal data begins. Reading this notice or continuing to use the service is not, by itself, consent to new processing. An update does not retrospectively supply a lawful basis or remove rights already accrued.

14. CONTACT US

Privacy contact:
AI Property Intelligence Ltd
Email: privacy@myporta.ai

Data Controller:
AI Property Intelligence Ltd
Company Number: 16474737
Registered in England and Wales

Supervisory Authority (ICO):
Information Commissioner’s Office
ico.org.uk
Telephone: 0303 123 1113

Technology suppliers

We use commercial technology suppliers under their applicable standard terms and data-use policies. Depending on the service, these permit storage, security review and improvement of their services or models, including use of de-identified or aggregated information. We explain material supplier processing and available choices for the selected feature, including a real person’s likeness or voice before creation. We remain responsible for choosing and using suppliers lawfully, protecting confidential information and respecting your rights. Our commitments about training our own models do not imply identical data-use or retention practices at every supplier.

MyPorta Privacy Policy