1. Our approach

URSQUARE exists because property buyers were tired of their phone number being passed around. Privacy is not an afterthought in our product — it is the reason members pay us.

This policy explains what we collect, why we collect it, who can see it, and what you can ask us to do with it. It applies to ursquare.com and to the concierge service we operate alongside it.

2. Information you give us

• Account details: your name, email address, and profile photo, received from Google when you sign in with Google, or your email address when you sign in with a one-time passcode.
• Contact details: your phone number, which we ask for when you request a callback, site visit, or concierge assistance, because we cannot fulfil those requests without it.
• Membership application: your name, email, phone number, and any message or requirements you choose to share.
• Inquiry content: the notes you write when requesting a callback, a site visit, or assistance, including preferred timings and budget if you mention them.
• Referral details: the referral link you use when signing up, so we can credit the member who introduced you.

3. Information we generate

To operate the concierge service and understand which projects interest you, we record activity on your account:

• Properties you view, shortlist, and request brochures for.
• Inquiries you submit and their status, along with notes your relationship manager adds.
• Site visit requests and their outcome.
• Membership status, approval date, expiry date, and renewal history.
• Referral conversions, loyalty points, and reward redemptions.

Your relationship manager and our admin team can see this activity. It is what allows us to brief a manager properly instead of asking you to repeat yourself.

4. Why we process your data

• To provide the service: authenticating you, showing the inventory your tier can access, and handling your inquiries.
• To fulfil requests: passing your requirements — not a raw contact list — to a relationship manager who arranges site visits and negotiations on your behalf.
• To administer membership: reviewing applications, confirming approval, reminding you before expiry, and processing refunds on booking.
• To operate the referral programme: crediting points, verifying that a referral genuinely converted, and fulfilling redemptions.
• To improve the platform: understanding in aggregate which localities and projects members engage with.
• To meet legal obligations and to protect the platform against fraud and abuse.

5. What we do not do

We do not sell your personal data. We do not share your phone number or email address with developers, builders, brokers, or lead-generation companies. We do not add you to third-party marketing lists.

When we approach a developer on your behalf, we do so as your representative. Your identity is disclosed only to the extent needed to progress a transaction you have asked us to progress — for example, when a booking or site visit requires your name.

6. Service providers

We rely on a small number of processors to run the platform. Each handles data only on our instructions:

• Supabase — authentication and our primary database.
• Cloudflare R2 — storage of images and brochure files.
• Resend — delivery of transactional email such as membership and site visit notifications.
• Google Maps — rendering property locations. Map tiles are requested from Google when you view a map.
• Vercel — application hosting and server logs.

7. Cookies and similar technologies

We use cookies that are necessary for the platform to function: keeping you signed in, maintaining your session securely, and remembering a private access link you have been granted. We do not use advertising or cross-site tracking cookies.

Clearing these cookies will sign you out.

8. How long we keep your data

We keep your account and activity data for as long as your account is open. If your membership lapses, we retain your account, shortlists, and referral points so that you can resume without losing anything.

When you ask us to delete your account, we remove your personal data within a reasonable period, except where we must retain records to meet a legal, tax, or accounting obligation, or to resolve a dispute. Private access links and their logs expire automatically.

9. Security

Data is transmitted over encrypted connections and stored in access-controlled managed services. Administrative access is restricted by role, so staff can reach only the modules their role requires, and role changes are limited to platform superadmins.

No system is perfectly secure. If a breach affects your personal data, we will inform you and the relevant authority as required by law.

10. Your rights

You may ask us to:

• Provide a copy of the personal data we hold about you.
• Correct information that is inaccurate or out of date — you can edit most of this yourself from your profile.
• Delete your account and associated personal data.
• Stop sending you promotional communication.
• Explain how a particular piece of information is being used.

Write to hello@ursquare.com to exercise any of these. We may need to verify your identity before acting on a request.

11. Children

The platform is intended for adults evaluating property purchases. We do not knowingly collect data from anyone under 18.

12. Changes to this policy

We will update this policy as the platform changes, and the effective date above will change with it. Where a change materially affects how we use your data, we will notify you by email.

13. Contact

Questions, requests, or complaints about privacy can be sent to hello@ursquare.com and will be handled by the person responsible for data protection at URSQUARE.