Privacy Policy

This Privacy Policy explains how Habio (operated by Habio Ltd) collects, uses, and protects your personal data when you use habio.ai.

1. Who we are

Habio Ltd, a company registered in England and Wales (company number 17420351) with its registered office at Studio 19, 113 Liverpool Road, Liverpool, United Kingdom, L23 5TD, is the data controller for personal data collected through the Service. You can reach us at [email protected].

2. What we collect

• Enquiry details — name, email, phone (optional), message, and the listing you enquired about.
• Search context — the natural-language queries and filters you use, so we can improve matching.
• Technical data — IP address, browser, device, and pages viewed, via cookies and standard server logs.

3. How we use it

• To pass enquiries to the relevant listing agent or owner so they can respond.
• To operate, secure, and improve the Service, including AI features such as intent parsing and lifestyle matching.
• To produce aggregated, anonymous analytics about how the Service is used.
• To comply with our legal obligations.

4. Legal bases (UK GDPR)

We rely on legitimate interests to operate and improve the Service, performance of a contract to handle enquiries you send, and consent for non-essential cookies where required.

5. Sharing

• Listing agents and owners — they receive the enquiries you submit to them.
• Service providers — including Supabase (database and auth), Vercel (hosting), and OpenAI (AI features). They process data on our behalf under contract.
• Legal — where required by law or to protect our rights.

We do not sell your personal data.

6. International transfers

Some of our providers process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.

7. Retention

We keep enquiry data for as long as needed to handle your enquiry and our records, and technical logs for a limited period for security and debugging. We delete or anonymise data when it is no longer needed.

8. Your rights

Under UK GDPR you can request access to, correction of, or deletion of your personal data, and object to or restrict certain processing. Email [email protected]to exercise any of these rights. You can also complain to the UK Information Commissioner’s Office (ico.org.uk).

9. Cookies

We use a small number of essential cookies to operate the Service, and optionally analytics cookies to understand usage. You can control cookies via your browser settings.

10. Changes

We may update this Policy from time to time. We will reflect material changes by updating the “Last updated” date above.