Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Account information: email address, display name, password (hashed). If you sign up via Google, we also receive your Google profile name, email address, and profile picture.
• Report data: locations, budgets, investment goals, and generated reports
• Payment information: processed by Stripe — we never store card details
• Usage data: pages visited, features used, report generation history
• Contact form data: name, email address, and message content when you contact us

2. How We Use Your Information

We process your data on the following legal bases:

• Contract performance: to provide and maintain our property research service, process payments, manage credits, and generate and deliver AI-powered reports
• Legitimate interest: to communicate about your account and reports, improve our service, develop new features, and detect fraud or abuse
• Consent: to send marketing emails (you can opt out at any time)
• Legal obligation: to comply with applicable laws and regulations

3. Cookies and Tracking

We use essential cookies to maintain your authenticated session via Supabase Auth. These cookies are necessary for the service to function and cannot be disabled. We do not use third-party advertising cookies or tracking pixels.

If we introduce analytics or non-essential cookies in the future, we will update this section and seek your consent where required by law.

4. IP Addresses and Geolocation

When you use our service, we may collect your IP address to detect your country and default currency. This is done either through your hosting provider's geolocation headers or, if unavailable, via the ipapi.co lookup service. We do not store your IP address beyond the duration of the request.

5. Data Storage and Retention

Your data is stored in Supabase (PostgreSQL) hosted in the EU/US. Report PDFs are stored in Supabase Storage. All data is encrypted in transit (TLS) and at rest.

We retain your account data and reports for as long as your account is active. If you delete your account, we permanently remove your personal data, reports, and associated files within 30 days. We may retain anonymized, aggregated data that cannot identify you indefinitely for analytics purposes. Transaction records required for legal or accounting purposes may be retained for up to 7 years.

6. Third-Party Services

• Supabase — database, authentication (including Google OAuth), file storage
• Stripe — payment processing (card data never touches our servers)
• Perplexity AI — report generation via API. Your report inputs (location, budget, goals) are sent to Perplexity to generate reports. We do not send personally identifiable information to Perplexity.
• Resend — transactional email delivery
• ipapi.co — IP-to-country lookup for currency detection (IP address only, no personal data sent)
• Google — OAuth authentication provider if you choose to sign in with Google. Google's own privacy policy applies to data they process.
• Google reCAPTCHA — bot detection on our signup form. This service may collect your IP address and browser data to assess risk. See Google's Privacy Policy and Terms of Service.

7. AI-Generated Content

Reports are generated by artificial intelligence (Perplexity AI). We do not use automated decision-making that produces legal effects concerning you. AI is used solely to generate informational property research reports based on the inputs you provide.

8. Your Rights

Depending on your jurisdiction, you have the right to:

• Access: view and download all your data from your account settings
• Rectification: update or correct your account information at any time
• Erasure: request deletion of your account and all associated data via account settings or by contacting us
• Data portability: export all generated reports as PDFs
• Restriction: request that we limit how we process your data in certain circumstances
• Objection: object to processing based on legitimate interest, including marketing
• Withdraw consent: opt out of marketing emails at any time via email preferences or by contacting us

To exercise any of these rights, use your account settings or contact us at the email below. We will respond within 30 days.

9. Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a person under 18, we will delete it promptly.

10. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, in accordance with applicable law.

11. International Transfers

Your data may be processed outside your country of residence. By using our service, you consent to the transfer of your data to the countries where our third-party providers operate. We ensure appropriate safeguards are in place, including Standard Contractual Clauses where required.

12. Changes to This Policy

We may update this privacy policy periodically. We will notify you of material changes via email or a prominent notice on our website. Continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact

For privacy-related inquiries, to exercise your data rights, or to lodge a complaint, contact us at support@try-pie.com

If you are in the EU/EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority.