Privacy Policy

eSpace Property Investment Ltd ("we", "us", "our") operates Vault, a property deal management platform. We are the data controller for personal data processed through Vault.

Contact: dax@espaceproperty.com

We collect and process the following categories of personal data:

• Account data: your name, email address, and password when you register.
• Organisation data: business name, branding, and team member details.
• Deal and investor data: property details, investor names, email addresses, phone numbers, and documents you upload to Vault.
• Payment data: subscription billing is handled by Paddle. We do not store your card details. Stripe processes investor payment links — card data is handled by Stripe directly.
• Usage data: pages visited, actions taken within Vault, and device/browser information for security and improvement purposes.

We use your personal data to:

• Provide and operate the Vault platform
• Process your subscription payments via Paddle
• Send transactional emails (deal pack requests, NDA signing links, payment confirmations)
• Respond to support requests
• Improve and develop the platform
• Comply with legal obligations

We process your data on the following legal bases under UK GDPR:

• Contract: processing necessary to provide the Vault service you have subscribed to.
• Legitimate interests: improving the platform, preventing fraud, and ensuring security.
• Legal obligation: where required by applicable law.

We share personal data only with the following third parties as necessary to operate Vault:

• Supabase — database and authentication hosting (EU/US)
• Vercel — application hosting (US)
• Paddle — subscription billing and Merchant of Record
• Stripe — investor payment link processing
• Resend — transactional email delivery
• OpenAI / Anthropic — AI-generated listing content (no personal data is sent)

We do not sell your data to any third party.

We retain your account and deal data for as long as your account is active. If you close your account, we will delete your personal data within 90 days, except where we are required to retain it for legal or compliance purposes.

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability

To exercise any of these rights, contact us at dax@espaceproperty.com. We will respond within 30 days.

Vault uses essential cookies only — required for authentication and session management. We do not use advertising or tracking cookies.

We implement appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS), access controls, and regular security reviews.

We may update this policy from time to time. We will notify you by email of any material changes. Continued use of Vault after the effective date constitutes acceptance.

For any privacy questions or concerns, contact us at dax@espaceproperty.com.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.