Privacy notice

1. Who we are

get me out of here is operated by Colour Dot Holdings Limited (“we”, “us”), registered in England and Wales, company number 17363337, registered office 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ. We are the data controller.

A founder of Colour Dot Holdings personally owns data protection and reads hello@getmeoutofhere.io, so a request about your data reaches a person, not a queue.

2. What we hold, and why

Your account. Email address and name, to sign you in and address you. Lawful basis: performance of contract.

Documents you upload. Leases, surveys, EPCs, mortgage offers, search results, correspondence — stored against your account, read by AI so you can ask questions about them, never used for anything else. These routinely contain your name, addresses and financial details, and occasionally things we do not ask for, like health or relationship information that happens to appear in correspondence. Lawful basis: performance of contract; for anything sensitive appearing incidentally, your explicit consent given by the act of uploading.

Emails you forward. Each account has a personal forwarding address. Mail you forward to it — body and attachments — is stored, read and treated exactly like an uploaded document. Forwards are only accepted from the address you signed up with or a mailbox you have connected.

A connected mailbox, if you connect one. We check headers only — sender, subject, dates — every couple of minutes. Full messages are fetched and stored only from senders you approve. From senders you have not decided about, we hold one thing: their email address, so we can ask you whether their mail belongs in your move. Dismiss them and it is gone. We never store the content of mail from unapproved senders, and we never download it. Connecting is optional and reversible; disconnecting stops all collection at once and destroys the mailbox credentials.

Your conversations with g. Kept so the companion has context and you have a record. Structured notes the product derives from them — key dates, flagged risks, your stage — are treated identically.

Property details. Addresses you are interested in, and details derived from links you paste from Rightmove, Zoopla or OnTheMarket — price, bedrooms, type, street. The page itself is discarded. Property photographs are linked from the portal rather than copied, which means the portal’s own servers see your device’s address when a photo is shown; that is between you and the portal, and we are not in the path.

Support and service email. What you send to us, and what we send to you.

We do not run analytics trackers, we do not sell data, and nothing you provide is used to train anyone’s AI models.

3. Other people in your documents and emails

The paperwork of a move is full of other people: your solicitor, the agent, your broker, the other side’s solicitor, a surveyor, occasionally a neighbour or a previous owner. When you bring a document or email in, their details come with it.

We hold that information only because you brought it in, only as part of your move, and only against your account. We never act on it without your confirmation, never use it for any other purpose, and never contact anyone in your documents off our own bat. Where the product helps you write to one of them, you send the message yourself.

If you have connected a mailbox, we also hold the bare email address of anyone who has written to you that you have not yet approved or dismissed — that is how we can ask you about them. Nothing else about them is stored.

If you are one of these people — someone’s solicitor, say, and you have found this page wondering what we hold about you — the honest answer is: whatever appeared in the correspondence or documents our user chose to bring in, held against their account, used for nothing beyond helping them with their move. Section 7 sets out your rights, which apply to you exactly as they do to our users. We cannot always identify every place a given person appears without searching material we have no other reason to search, and where that is the case we will tell you rather than pretend otherwise.

4. Who processes data for us

Four suppliers touch the content you bring in. Supabase stores everything, in the EU. Anthropic (US) reads documents and powers the companion; it retains API inputs for up to 7 days for abuse monitoring and does not train on them. OpenAI (US) turns text into search vectors so the companion can find the relevant passage; it retains inputs for up to 30 days and does not train on them. Resend (US company, EU processing for inbound) carries email in and out, and holds inbound messages for up to 30 days on its published terms.

Beyond content: Stripe will process payments when payments exist (none during the beta). Google provides address lookup when you type an address, and sign-in infrastructure for connected Outlook mailboxes is Microsoft’s. Property and area information comes from public sources — Land Registry, EPC registers, flood and crime data, school information — called with a postcode or address, plus PropertyData for detailed reports when those launch.

Where a supplier is outside the UK and EEA, we rely on the UK–US data bridge for suppliers certified under it, and otherwise on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, with a transfer risk assessment where one is required.

5. How long we keep things

While your account is open: everything above, so the companion keeps its context. Your move data is kept through the active move and a grace window after it closes, so a delayed completion does not wipe your records at the worst moment.

Delete your account and deletion begins at once and completes within one calendar month — documents, messages, conversations, files, the lot, including the stored files themselves and not merely the entries pointing to them. Your forwarding address stops accepting mail the moment you ask, not when deletion finishes. Mailbox credentials are destroyed immediately.

Two honest caveats. First, our AI and email suppliers hold their own short-lived copies — up to 7 days (Anthropic) and up to 30 days (OpenAI and Resend) — which expire on their schedule, not ours: we delete what we hold and instruct our processors, but we cannot promise every copy everywhere is gone the same day. Second, when payments exist, payment records will be kept for six years because tax law requires it; they live with Stripe.

6. The optional bit: learning from patterns

At signup we ask — and it is genuinely optional — whether we may learn from anonymised patterns in how people use the product: the questions people ask, what goes wrong at each stage, how moves actually feel. Before anything is looked at, it is stripped of what points back to you: names, addresses, your solicitor’s and agent’s names. Patterns are used only where enough people share them that no individual stands out. Your uploaded documents are never part of this, and nothing is ever sold, shared, or used to train anyone else’s models.

Say no and nothing changes. Switch it off later in Settings and nothing new is used from that moment; patterns already anonymised cannot be traced back to unpick. A record that you gave or withdrew consent — stripped of your identity — survives account deletion, because it is the evidence that we asked and you answered.

7. Your rights

Access, correction, deletion, restriction, portability, objection — the full set, whether you are a user or someone whose details arrived in a user’s documents. Write to hello@getmeoutofhere.io and we respond within one month.

You can also complain to the Information Commissioner’s Office at ico.org.uk at any time — you do not need our permission and do not have to come to us first, though we would appreciate the chance to put it right.

8. Children

get me out of here is for adults. You must be 18 or over, we do not knowingly hold children’s data, and the product is built on the assumption that its users are people entering property transactions.

9. Changes

If this notice changes we update the date at the top and email you where it matters. The current version always lives at getmeoutofhere.io/privacy.