Privacy policy

Tatola (tatola.co.uk) is the data controller for the personal data described in this policy. For any privacy question or request, contact privacy@tatola.co.uk.

Using the free tool. Pasting a listing link and generating a report requires no account. We process the listing URL itself (to research and cache the report) and, for a short period, your IP address and basic request details — solely to prevent abuse of the service and to keep track of what it costs us to run.

Emailing or saving a report. If you use "email me this" or "save report", we collect your email address to deliver the report and, if you sign in, to create and secure your account. Sign-in uses a one-time emailed link rather than a password.

Marketing. If you tick the optional marketing box when emailing a report, we record that consent (and when you gave it) so we can contact you about Tatola in future. Leaving it unticked never affects delivery of the report you asked for.

Feedback. If you rate a report or leave a comment, we store the rating, the comment, the listing it relates to, and your IP address, so we can improve report quality and investigate abuse of the feedback form.

We use a small number of service providers to run Tatola, each acting as a data processor on our instructions:

• Anthropic — generates report content. It receives the listing URL only, never your email or account details.
• Supabase — hosts our database and handles sign-in. It processes everything described above.
• Resend — delivers report and sign-in emails, and so processes your email address and the report content you're sent.
• Vercel — hosts the website and provides aggregated, cookie-free visit analytics (page views, referrers, device type) that can't be tied back to an individual.

We don't sell personal data, and we don't share it for advertising.

Account and saved-report data is kept for as long as your account is active, or until you ask us to delete it. Operational data used for abuse prevention and cost monitoring (IP addresses, request logs) is kept only as long as it's useful for that purpose, then removed.

Under UK GDPR, you can ask us to: give you a copy of what we hold about you; correct it; delete it; restrict or object to how we use it; or hand it to you in a portable format. Email privacy@tatola.co.uk and we'll action it. If you're unhappy with how we've handled your data, you can also complain to the Information Commissioner's Office.

Signing in sets a strictly-necessary cookie to keep you logged in — this isn't optional, since it's how the site remembers who you are, and it's not used for tracking or advertising. Our visit-analytics tool (Vercel Analytics) doesn't use cookies at all.

Tatola is intended for adults researching a property purchase, not for children.

If this policy changes materially, we'll update the date at the top of this page.