Legal

Privacy policy

Last updated 12 June 2026.

This policy explains what personal information Backstory collects when you use the website at backstory.homes (the “Service”), why we collect it, and the rights you have over it.

1. Who we are

Backstory (“we”, “us”) is the data controller for personal information collected through the Service. You can reach us at privacy@backstory.homes.

2. The information we collect

  • Report requests: the email address, property address, postcode and approximate geo-coordinates you submit, plus a phone number if you choose to share it.
  • Campaign source: a tag (e.g. reddit-housinguk) we read from the ?ref URL parameter so we can understand which channels people arrive from.
  • Technical: standard server logs (IP address, user-agent, timestamps) generated by our hosting provider, and signals collected by our bot-detection layer to keep the service usable.
  • Analytics: aggregated, privacy-friendly page-view data from Vercel Web Analytics. No advertising cookies are set by Backstory.

3. Why we use it

  • To build and deliver the property report you requested (contract).
  • To email you the report and any directly related follow-ups (contract / legitimate interest).
  • To improve the Service, understand which acquisition channels work, and detect abuse (legitimate interest).
  • To comply with our legal obligations where relevant (legal obligation).

We do not sell your personal information, and we do not pass your contact details to estate agents, mortgage brokers, solicitors or other property professionals.

4. How long we keep it

  • Report records (address, email, phone, draft report data) are retained for up to 30 days from creation, after which they expire automatically.
  • Waitlist sign-ups (email and the product you signed up for) are retained until you ask us to delete them.
  • Server and analytics logsare kept for the retention windows set by our infrastructure providers (typically 30–90 days).

5. Who we share it with

We share the minimum information required with carefully selected processors that help us operate the Service:

  • Vercel Inc.— hosting, edge delivery, analytics and bot detection.
  • Neon Inc.— managed Postgres database where your report request is stored.
  • Resend Inc.— transactional email delivery (used to send your confirmation and report).
  • Komoot GmbH (Photon)— address autocomplete while you type.

We do not share your information with anyone else without your consent, except where required by law.

6. International transfers

Some of these processors operate outside the United Kingdom. Where that happens, we rely on appropriate safeguards (such as the UK International Data Transfer Addendum) to make sure your information continues to receive an equivalent level of protection.

7. Your rights

You have the right to:

  • access the personal information we hold about you;
  • have inaccurate information corrected;
  • ask us to delete your information;
  • object to or restrict certain uses;
  • receive a portable copy of the information you gave us; and
  • complain to the Information Commissioner's Office (ico.org.uk) if you're unhappy with how we've handled your information.

To exercise any of these rights, email privacy@backstory.homes.

8. Cookies and local storage

We do not use advertising cookies. We use a small amount of first-party browser storage to remember the campaign source so we can measure which channels work. Our bot-detection layer also sets a small number of operational cookies that protect the Service from automated abuse.

9. Changes to this policy

We may update this policy from time to time. When we do, we'll change the “last updated” date at the top. Material changes will be flagged on the Service.

10. Contact

Questions or requests? Email privacy@backstory.homes.