Privacy Notice
Real Estate Innovation Ltd (company number 17457557), a company registered in England and Wales with its registered office at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, runs Hawalius (called MCP Everything until 27 October 2026) and is the controller of the personal data described here. Our contact for privacy questions is Jack Sibley, Director, at [email protected]. This notice says exactly what we can see about you and why.
What we can see
| What | Examples | Why | Kept for |
|---|---|---|---|
| Your account | Email address, name, organisation, what you said you'd use the Service for, sign-up and approval dates | To let you in and contact you about the Service | While your account is open, then 6 years |
| Signing in before you're approved | Your email address, confirmed by the sign-in code, the dates you first and last signed in, and a count of the requests you make while you wait | So you can look around and apply from your AI assistant, and to stop abuse (the count resets when the server restarts) | The same as your account and requests above. If you never apply, we keep the email and those two dates until you ask us to delete them, and WorkOS keeps its own record as their notice says |
| Your acceptances | Each terms version, each publisher licence, the non-commercial confirmation and any usual purpose you gave (with whether it is commercial), with the time | To show what you agreed to, if there is ever a dispute | 6 years after your account closes |
| What you ask for | Each dataset and source you request, your query details, and the purpose you state | To run the licence check, prevent misuse, see which sources are used, and keep a record of how data is used in case of a dispute | 90 days in full, then as counts with your email and purpose removed |
| What you export | Each export file you create, when, and from which data | To keep the licence trail and control download links | 90 days in full, then as counts with your email removed |
| Your usual purpose | The usual purpose you give on your account page, if you give one, used as your reason for each non-commercial or restricted dataset instead of asking you each time (openly licensed data needs no reason) | To run the licence check without asking you every time | Until you change or remove it; the acceptance record of it is kept as above |
| Changes to your reasons | Any reason you edit on your account page, with the original and the time | So the record shows both what you first said and your correction | The same as the request it belongs to |
| Your feedback | Suggestions and feedback you send, from the website or through your AI assistant (such as Claude or ChatGPT) | To improve the Service and reply to you | Until dealt with, then 2 years |
| Your use case ideas and upvotes | Ideas you add to the use case register, and which ideas you upvote | To share ways of using the Service and decide what to build next. Other users see the idea, its date and its upvote count, never who posted or upvoted it. We keep who posted each idea only to stop abuse and to delete it with your account | Until you or we delete it, or your account closes |
| Your interests, if you save them | What you say you're into (hobbies, your work or business, projects), saved only when you tick the box on the account or Ideas page or type the agreement sentence to your AI assistant | To suggest datasets for you on the Ideas page and in your AI assistant. Only you and the server see them, and we use them for nothing else. The audit trail notes that you saved or deleted them, not what they say | Until you change or delete them on your account page, or your account closes |
| Your shared prompts and votes | Prompts you share on the Ideas page, the first name you choose to show with one, and your upvotes, reports and "me too"s on prompts and on the list of data people have asked for | To share questions that work well and see which data people want most. Other users see a prompt, its date, its upvotes and the first name if you gave one, never your email or who voted. Our server checks each prompt for personal details before it is shown, and we see every one | Until you or we delete it, or your account closes |
| Your rating | The star rating and comment you give the Service | To see how the Service is doing. Only we see it | Until you change it or your account closes |
| Your API keys | Which sources you have added a key for, and the last 4 characters | To use your key for your own requests | Until you delete the key or your account |
| Your access keys | The name you gave each key, its last 4 characters, when you made it and when it was last used, and a one-way scrambled copy of the key (never the key itself) | To let an AI assistant that can't use the email sign-in, such as Hark, connect as you | Until you revoke the key, it runs out after a year, or you close your account |
| Your own energy readings, if you connect an energy account | Your smart meter readings and tariff from your own Octopus Energy account, on the key you saved | To answer your own questions about your home's energy use, because you asked us to. We fetch them only when you ask and pass them only to you. They are not cached for anyone else, not written to our logs, and can't be exported. Half-hourly readings can show when a home is occupied, so we treat them with extra care | Not kept: only while your request runs. The record that you asked is kept like any other request |
| Release emails, if you subscribe | Your email address, how you signed up, and when you subscribed and confirmed. You don't need an account | To email you about major releases of Hawalius. We send them ourselves from [email protected], with every address in BCC so no subscriber sees another | Until you unsubscribe (a link in every email, the unsubscribe page, or your account page), or 7 days if you never confirm |
What we cannot see
Your API keys are encrypted when you save them. Nobody can view them on the account or admin pages, and they never appear in logs. The server decrypts a key only at the moment it sends your request to that publisher. We cannot see your conversations with your AI assistant (such as Claude or ChatGPT): only the requests it sends to this Service reach us. If you apply, accept the terms or give a purpose by typing to your AI assistant instead of on our website, the company that runs that assistant (such as Anthropic or OpenAI) also sees what you type, under its own privacy terms. You can always do these on our website instead. We don't keep the words you search with: the server uses them to answer and logs only how long a search took. What you type in the "What are you into?" box on the Ideas page is used only to suggest datasets, then dropped, and isn't stored or logged, unless you tick the box to save it as your interests.
Who else handles it
WorkOS handles sign-in and sends the sign-in code to your email. Resend sends our automatic emails to you, such as the message that your account is approved and the link to confirm a release email sign-up. Both are based in the United States, so your email address is processed there. Our server is hosted by DigitalOcean on a server in London, UK, and reaches the internet through Cloudflare, which also protects the sign-in pages from abuse.
To answer a request, the server sends the parts of it a publisher needs, such as a postcode, a place or a company name, to that publisher's service. It sends them from our server, without your email or name. When you give an address or a maps link to find a place, the server looks it up with the OpenStreetMap Foundation's address search (Nominatim, based in the UK) or postcodes.io, and follows a Google or Apple Maps short link only to read where it points. We don't keep the address you typed, only the point found while your request runs. The "Share where you are" page reads your phone's location in your browser and sends it nowhere unless you paste it into your chat. When you use your own key, the publisher sees your request under your account. We do not sell your data or use it for advertising.
Lawful basis
Running the Service you signed up for (contract), which includes fetching your own energy readings when you connect an energy account and ask for them, and our legitimate interest in preventing misuse and keeping a licence record. Release emails are sent only with your consent, which you can withdraw at any time by unsubscribing.
Personal data in the sources
Some of the public data the Service passes on identifies people: company officers and people with significant control (Companies House), home addresses with sale prices or energy certificates (HM Land Registry Price Paid, EPC), addresses in tribunal rent decisions, names in some environmental permit and landfill records, and the names of businesses run by sole traders (for example in food hygiene ratings). Each publisher made this data public, mostly because the law requires it. We fetch it when a user asks, keep short-lived copies in a cache so that we don't overload the publisher, and pass it to the user who asked. We don't build profiles of people, and where a source carries personal names that a typical request doesn't need (CQC registered managers, Gazette notice text, tender contacts, developers in the London planning datahub, GBIF observers), we leave them out.
Public accountability records also name people in public roles: ministers and the people and organisations they met or received gifts and hospitality from (as departments publish them), former ministers and senior officials in the business appointment letters ACOBA publishes, and Members of Parliament and peers in Parliament's registers, including the all-party groups they belong to. Some of this shows a person's political role or opinions, which the law treats as special category data; we pass on only what those people or Parliament made public about their public role. Where these records name a private person, such as an individual donor, a sole trader paid by a council or awarded a contract, or someone who gave a gift, we show "an individual" instead of the name. Individuals on the UK Sanctions List are left out. Any cross-check between sources (for example companies that donated and also won contracts) joins organisations by company number, never people, and each match is shown as a lead to check, not as evidence of wrongdoing.
Our lawful basis for this is our legitimate interest, and our users' interest, in using public registers for property, planning and business research, which the publishers made available for reuse. Users must have their own lawful basis for what they do with it (see the Acceptable Use Policy). If you are named in one of these sources and want to object or ask what we hold, contact us at the address above. Usually the right place to correct a record is the publisher, and we will point you to them.
Your rights
You can ask for a copy of your data, correct it, or ask us to delete it (we may keep acceptance records for legal claims). You can see every dataset you've asked for and the reason you gave on your account page, and correct a reason there. You can delete your keys, or close your whole account, yourself on your account page. Contact [email protected]. You can also complain to the Information Commissioner's Office at ico.org.uk.
Changes
This notice is subject to change at any time. If we change it, we will publish the new version here and ask you to accept the terms again before you continue using the Service.