Privacy Policy

This Privacy Policy explains how MuvMate ("we", "us", "our"), a trading name of Web Vault Pro Ltd, collects and uses your personal data when you use our app (the "Service"). We are the data controller for the purposes of the UK GDPR and the Data Protection Act 2018.

1. Who we are

Web Vault Pro Ltd, trading as MuvMate. For any privacy questions or to exercise your rights, contact us at privacy@muvmate.com.

2. What data we collect

• Account data — your email address, name (if provided) and authentication identifiers.
• Property data — properties, notes, checklist progress, offers and documents you add.
• Connected inbox data — if you connect Gmail or Outlook, message metadata and content related to your property purchase, used solely to surface relevant threads inside the app.
• Billing data — subscription status and Stripe customer identifier. We do not store your card details; these are handled by Stripe.
• Technical data — IP address, browser type and basic session logs used for security and to keep the Service running.

3. Why we use it (legal bases)

• Contract — to provide the Service you have signed up for.
• Legitimate interests — to secure the Service, prevent abuse, and improve reliability.
• Consent — where you explicitly connect a third-party inbox or opt in to a feature.
• Legal obligation — to keep records required by tax and company law.

4. AI features

Pro features such as Ask AI, survey analysis and email triage send the relevant content to our AI model providers via the Lovable AI Gateway for processing. Content is used only to generate the response you requested and is not used to train models.

5. Sharing and subprocessors

We only share data with providers that help us run the Service:

• Supabase (Lovable Cloud) — authentication, database and file storage (EU region).
• Stripe — payment processing for Pro subscriptions.
• Google and Microsoft — sign-in and, if you connect an inbox, read access to messages you authorise.
• Lovable AI Gateway and its model providers — powering AI features.

6. International transfers

Some subprocessors are based outside the UK/EEA. Where that is the case, transfers are protected by the UK International Data Transfer Addendum or Standard Contractual Clauses.

7. How long we keep it

We keep your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we are legally required to retain limited billing records.

8. Your rights

You have the right to access, correct, delete, restrict and port your personal data, and to object to certain processing. To exercise any of these rights, email privacy@muvmate.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

We use only strictly necessary cookies to keep you signed in. See our Cookie Notice for details.

10. Security

We use encryption in transit, access controls and row-level security on our database. No service can guarantee absolute security, but we take reasonable measures appropriate to the risk.

11. Changes

We may update this policy from time to time. Material changes will be highlighted in the app or notified by email.