Privacy Policy

Last updated 11 July 2026

This policy explains what we do with your personal data when you use Veto. The controller is Tenfold Ltd, trading as Simple Genius, which operates Veto, of c/o 23 Rectory Road, West Bridgford, Nottingham, NG2 6BG. We are registered with the Information Commissioner’s Office, registration number ZA370502. For any privacy question, or to exercise your rights, contact support@simplegenius.co.uk.

1. What we collect, and why

We collect only what we need to run your account and your reports:

• Account details: your email address and a securely hashed password (we cannot read your password). Legal basis: performance of our contract with you.
• Saved reports: for each report you save, we store the address you chose to check, the verdict, and the report’s findings (the public-record facts). Legal basis: performance of our contract with you.
• Payment reference: when you buy an allowance, we store a reference to the Stripe transaction (not your card). Legal basis: performance of our contract, and our legal obligation to keep tax records.
• An essential session cookie: a single cookie that keeps you signed in. It is strictly necessary, so it does not need consent. We use no advertising or analytics trackers.
• Minimal server logs: standard technical logs (such as timestamps and error traces) kept briefly to keep the service secure and working. Legal basis: our legitimate interest in a secure, reliable service.

Marketing emails

We will always email you about your account and your reports (confirming your email, resetting a password, a receipt). Separately, you can choose to receive occasional property tips and offers from us by email. That is off unless you tick the box at signup or switch it on in your account, and it is never a condition of using Veto or of getting your free report. Legal basis: your consent. You can withdraw it at any time, in your account under Data & privacy, or with the one-click unsubscribe link in every marketing email. We keep a record of when you opted in or out and which wording you saw, as evidence of your choice. We do not sell your email address or share it with anyone for their own marketing.

2. What we deliberately do not store

To generate a report you tell us what matters to you, your “brief”: for example whether you have children and their school stages, how you get around, or what you want to be near. We use that brief in the moment to decide which checks to run and how to word the result. We do not save it. A saved report keeps only the findings and the verdict, never the personal answers behind them. This is built into the product, not just a promise: the brief is stripped before anything is written to our database.

The full written report is different: it is the personalised read you paid for, and it refers to what you told us. It is therefore saved to your account with that report, visible only to you, so that reopening a report never loses it. It is never part of a shared link or a stored finding, and it is deleted when you delete the report or your account.

If you choose “save as my search”, your answers are kept in your own browser, on your own device, so you don’t have to answer again for the next property. That copy never reaches our servers except, each time you run a report, to build it, and it is deleted from our side straight afterwards. You can remove it at any time with “Forget it” on the intake, or by clearing your browser data.

3. Who processes it for us

We use a small number of trusted providers, who act on our instructions:

• Vercel, hosting the application.
• Railway, hosting the database that holds your account and saved reports.
• Stripe, taking payments. Stripe handles your card details directly under its own privacy policy; we never receive them.
• Anthropic (Anthropic PBC), our AI provider, used only if you use Veto’s optional AI features: the conversational intake and the AI-written report summary. When you use them, the text of that conversation, which can include the personal details you choose to share, is sent to Anthropic to generate those features under its own privacy policy. [Confirm Anthropic’s processing terms, retention, training-use and UK-transfer basis (DPA) before publishing, and before enabling the AI features for the public.]

When Veto looks up public records to build a report, it sends only a postcode or map coordinates to those public data sources, never your identity or your brief. (The optional AI features above are the one exception, they send your conversation to Anthropic as described.) Some of our providers process data outside the UK; where they do, that transfer is covered by UK ‘adequacy’ rules or standard contractual clauses. [Confirm your processors’ transfer basis before publishing.]

4. How long we keep it

• Your account and saved reports are kept until you delete them or close your account.
• When you close your account, your account details and saved reports are deleted.
• We keep payment and VAT records for as long as tax law requires (currently six years).
• Technical logs are kept only briefly.

5. Your rights

Under UK data protection law you can ask us to:

• give you a copy of the personal data we hold about you;
• correct anything that is wrong;
• delete your data (you can do this yourself by closing your account);
• ask for a copy of your saved reports;
• restrict or object to certain processing; and
• withdraw any consent you have given.

To exercise any of these, email support@simplegenius.co.uk. If you think we have mishandled your data you can complain to the Information Commissioner’s Office at ico.org.uk, though we would appreciate the chance to put things right first.

6. Security

Passwords are stored only as a salted scrypt hash, never in plain text. Access to our systems is restricted, and we send data over encrypted connections. No service can promise perfect security, but we keep the amount of personal data we hold deliberately small so there is little to lose.

7. Children

Veto is for adults making property decisions and is not intended for anyone under 18.

8. Changes

We may update this policy; the “last updated” date shows the current version, and we will flag material changes in the app or by email.

See also our Terms of Service, data sources and contact details.