How Nestor handles personal data

Who is responsible

Controller/operator: Nestor (operator details pending).

Privacy contact: Not yet configured.

Postal address: Not yet configured.

Information the service handles

• Property inputs: listing URLs, addresses or search text, and screenshots a user chooses to upload.
• Generated research: matched listing details, evidence links, scores, reports, questions, and AI chat messages.
• Account and saved-work data: name, email address, password hash or Google account identifier, authentication state, saved-report status, private notes, and a random browser identifier used to associate records.
• Technical and security data: IP-derived rate-limit identifiers, timestamps, request status, logs, browser/device information, and error diagnostics.
• Usage data: after consent, production analytics about page and product use. Query strings are removed and API routes are excluded before analytics events are sent. Raw property addresses, report text, notes, chat text, or email addresses should not be sent as analytics events.

Where information comes from

Most information comes directly from the user. Property evidence also comes from the listing publisher, official public records, public websites, and service-provider responses. Public records may concern a property or transaction and can still be personal data in context.

Why information is used and lawful basis

• Provide the requested analysis and saved features: steps requested by the user and, where a service contract applies, performance of that contract.
• Protect and operate the service: legitimate interests in security, abuse prevention, debugging, and service reliability, balanced against user rights.
• Understand aggregate product performance: consent. Analytics remains disabled unless the user accepts it.
• Meet legal duties and handle rights or disputes: legal obligation or legitimate interests, depending on the task.

The operator must document its final lawful-basis assessment before public launch. Nestor does not currently use report scores to make a solely automated decision with legal or similarly significant effect about a user.

Cookies and analytics choices

Nestor stores one strictly necessary first-party cookie named nestor_consent for up to 180 days. It records whether optional analytics was accepted or rejected so the service can respect that choice. It is not used for advertising or cross-site tracking.

Vercel Web Analytics is cookieless, but it is still treated as optional here. Its code is not loaded until analytics is accepted. The service removes query strings and fragments from analytics URLs and excludes API routes. Use Privacy choices in the site footer at any time to change or withdraw consent; withdrawing reloads the page to remove already-loaded analytics code.

Processors and recipients

The current service uses OpenAI for AI processing and web research, Neon for hosted database storage, and Vercel for hosting and production analytics. Listing publishers, official-data services, and other websites receive ordinary requests when their pages or APIs are retrieved. These providers may process data in countries outside the UK; the operator must document applicable transfer mechanisms and provider terms before launch.

Retention

Browser-only data remains until the user clears site storage. Database-backed reports, notes, authentication records, security logs, and provider records must receive documented retention periods before public launch. Until those periods and deletion tooling are configured, avoid submitting personal information or private documents.

Your rights

Depending on the processing and applicable law, rights may include access, correction, erasure, restriction, objection, portability, withdrawal of consent, and a complaint to the UK Information Commissioner's Office. Rights are not absolute and depend on the lawful basis. Use the private contact above; never put identity documents or private property information in a public GitHub issue.

Children, security, and changes

The prototype is intended for adults researching a property and is not designed for children. Reasonable safeguards reduce risk, but no internet service is completely secure. Material changes to purposes, providers, sharing, or rights information require an updated notice before the new processing begins.