Privacy Policy

1. Who we are

AFIKO is a digital audit and self-serve improvement tool for UK estate agents, currently operated as a sole trader during beta. Limited company registration with Companies House and ICO data protection fee will be in place before AFIKO accepts its first paying customer. Until then, the named data controller is the founder, contactable for all data queries (including a copy of your data or deletion) at help@afiko.co.uk. UK GDPR rights are fully honoured during the sole-trader period.

2. What data we collect

Before you subscribe (free audit):

• The website URL you enter for analysis
• Basic session data (browser type, approximate location via IP, pages visited)
• No account is created, no email is collected

When you subscribe:

• Name and email address (for account management and communications)
• Payment data — processed and stored entirely by Stripe. AFIKO never sees or stores your card details.
• Website URLs you analyse and audit results associated with your account
• Actions taken within the app (modules completed, tasks marked done)

From your website (during analysis):

• Publicly accessible content from the URL you submit (page title, meta tags, schema markup, page speed signals)
• We do not access any part of your website that requires a password or login

3. How we use your data

• To run your audit and display your results
• To send you your subscription confirmation and billing emails
• To send monthly re-scan alerts (subscribers only, opt-out available)
• To improve the AFIKO product — we may analyse aggregate, anonymised usage patterns

We do not:

• Sell your data to any third party
• Use your data to train AI models (including the AI models that power AFIKO's recommendations)
• Share your audit results with competitors or any other agent
• Display advertising or accept payment from third parties to influence our recommendations

4. How we handle your data

Audit results are private to you. Any user can run a basic public score check on any publicly accessible URL — as Google's own tools do — but your full action plan, completed tasks, savings total and account data are visible only to your account.

Data is stored on servers in the UK and European Economic Area. We use industry-standard encryption in transit and at rest.

We retain your account data for as long as your subscription is active, plus 90 days after cancellation. After that period, your data is permanently deleted unless you request earlier deletion.

5. Third-party services

• Stripe — payment processing. AFIKO never sees or stores your card details. stripe.com/gb/privacy
• Anthropic Claude API — powers the AI recommendations and the website editor. Your audit context is sent to the API to generate recommendations; per Anthropic's enterprise terms, your inputs are not used to train their models. anthropic.com/privacy
• Google PageSpeed Insights API — used to measure mobile speed of the URL you submit. Public API, analyses publicly accessible URLs only.
• Google Places API — used to read your Google Business Profile public information (rating, reviews, completeness).
• Supabase — database and storage provider. Hosts in EU (Frankfurt). supabase.com/privacy
• Resend — transactional email delivery (welcome, monthly digest, billing). resend.com/privacy
• Vercel — hosting provider for afiko.co.uk. vercel.com/privacy
• Google Tag Manager + Google Analytics 4 + Meta Pixel — used for conversion measurement (which marketing channel led to a subscription). These services use cookies. We do not use them for cross-site retargeting. See the cookies section below.

6. Your rights (GDPR)

As a UK resident, you have the right to:

• Access — request a copy of the data we hold about you
• Correction — ask us to correct inaccurate data
• Deletion — request that we delete your data
• Portability — receive your data in a machine-readable format
• Object — object to certain types of processing
• Withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, email help@afiko.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Cookies and tracking

AFIKO uses three categories of cookies and identifiers:

• Essential — required to keep you logged in and maintain your session. Always on.
• Conversion measurement — Google Tag Manager, Google Analytics 4 and the Meta Pixel record which marketing channel led you to subscribe. We use these in aggregate to evaluate channel performance, not to retarget you across the open web.
• Stripe — required by our payment processor for fraud prevention during checkout.

We do not sell your behavioural data, run remarketing ad campaigns against AFIKO visitors on third-party sites, or share identifiable cookie data with advertisers. To opt out of measurement cookies, use your browser's cookie controls or email help@afiko.co.uk and we will exclude your session from analytics.

8. Changes to this policy

If we make material changes to this policy, we will notify subscribers by email at least 14 days before the changes take effect. The updated date at the top of this page will always reflect the most recent revision.

9. Contact

For all privacy questions: help@afiko.co.uk
We aim to respond within 2 business days.