Legal
Privacy Policy
Last updated: 26 March 2026
Operated by Lost Property One Limited · hello@planiverse.uk
01Who we are
Planiverse (planiverse.uk) is a planning intelligence service operated by Lost Property One Limited, a company registered in England and Wales.
For any privacy-related queries, contact us at hello@planiverse.uk.
02What data we collect
- Account information — your name, email address, and professional role (provided during registration)
- Usage data — search queries, AI questions asked, pages visited, and features used within the app
- Newsletter signups — email address and requested planning authority area
- Feedback responses — answers to beta feedback questions we ask you
- Feature requests and votes — suggestions you submit and votes on the public roadmap
- Authority coverage requests — email address and council name submitted via the authorities page
03Why we collect it
- To provide the Planiverse service and personalise your experience
- To improve the product based on usage patterns and feedback
- To send service communications (account verification, password resets)
- To send product updates and new feature notifications — only with your consent, and you can unsubscribe at any time
04Legal basis (GDPR)
- Contract — processing necessary to provide the service you signed up for
- Legitimate interest — usage analytics to improve the product
- Consent — marketing emails and newsletters (opt-in only)
05Who we share data with
We do not sell your data to third parties. We do not share your data with advertisers.
We work with the following trusted service providers:
- Anthropic (Claude AI) — your AI advisor questions are processed by Anthropic's API to generate responses. Anthropic's privacy policy applies to this processing. We do not send your personal details (name, email) to Anthropic — only the planning question and relevant application data.
- Resend — for sending transactional and marketing emails
- Mapbox — for map rendering. Your browser connects to Mapbox directly to load map tiles. Mapbox's privacy policy applies to this connection.
- Vercel — our hosting and infrastructure provider. All data is processed within Vercel's infrastructure.
- PDFShift — used to generate PDF reports. Only the content of the requested report is sent, not your personal details.
06Cookies
- We use essential cookies for authentication — to keep you logged in between sessions
- We do not currently use analytics cookies or tracking cookies
- If we add analytics in future, we will update this policy and request your consent before setting any non-essential cookies
07Your rights
Under GDPR, you have the following rights regarding your personal data:
- Access — request a copy of the data we hold about you
- Rectification — ask us to correct any inaccurate data
- Erasure — request deletion of your account and associated data
- Portability — receive your data in a structured, machine-readable format
- Object — opt out of marketing communications at any time using the unsubscribe link in any email, or by contacting us
To exercise any of these rights, email hello@planiverse.uk. We will respond within 30 days.
08Data retention
- Account data — retained while your account is active. Deleted within 30 days of account deletion.
- Usage data — retained for up to 24 months for product improvement purposes, then anonymised or deleted.
- Email subscriptions — retained until you unsubscribe.
09Security
- All data is transmitted over HTTPS
- Passwords are hashed using bcrypt — they are never stored in plain text
- Database access is restricted to authorised systems only
10Changes to this policy
We may update this policy from time to time to reflect changes to our services or legal requirements. Significant changes will be communicated via email to registered users. The "last updated" date at the top of this page will always reflect the most recent revision.