Privacy notice

Who is responsible

Data controller: Armen Sarkisian, Komitas 57, 0032 Yerevan, Armenia. Questions about your data: privacy@vitersoft.com.

What we collect

What you type into the check — the property postcode and address, the tenancy dates, the deposit amount and when it was paid, the landlord's or agent's name, your surname and your email address — and the files you choose to upload: screenshots of the scheme searches, your tenancy agreement, proof that you paid the deposit, and anything your landlord sends you. When you ask for a letter we also store your full name and address, because they have to appear on it.

We do not store your IP address. Where we need to stop abuse we store a one-way hash of it, which cannot be turned back into an address.

Why we are allowed to hold it

We process your own details to give you the service you asked for (performance of a contract, UK GDPR Article 6(1)(b)). The landlord's or agent's name and address are someone else's personal data; we process them because you cannot pursue a deposit claim without naming the other side, which is a legitimate interest of yours and ours (Article 6(1)(f)).

How long we keep it

Uploaded files are deleted 30 days after they are uploaded, and the case itself 60 days after it is created. You can delete everything sooner at any time, with the link in every email we send you or the button on your case page — that deletes the files and the record straight away.

Who else sees it

• Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) — serves the website and runs the code. Requests are handled in the EU.
• Supabase — the database and the private file store, hosted in the EU (Frankfurt).
• Sendinblue SAS, trading as Brevo, 9–17 rue Salneuve, 75017 Paris, France — sends the emails with your case link.
• PostHog (EU cloud, Germany) — counts how the tool is used. No cookies, no profile, and the events carry no personal data: no name, email, address or postcode ever reaches it.
• A partner solicitor — only if you tick the box asking us to send them your case file, and only the firm named on that screen.

Where data reaches the United States (Cloudflare), the transfer is covered by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

Cookies

None. Deposit Checker sets no cookies and stores nothing in your browser, which is why there is no cookie banner. Your case is identified only by the link in your email.

Your rights

You can ask for a copy of what we hold, ask us to correct it, or delete it. Deleting is immediate and needs no request: use the link in your email. You can also complain to the Information Commissioner's Office (ico.org.uk).