Privacy Policy

Last updated: July 2026. This policy applies to Reccy (reccy.it.com).

Who we are

Reccy is a rental property review platform for tenants and landlords in the United Kingdom. For data protection queries contact: privacy@reccy.it.com.

What we collect

• Account details: name, email address, and authentication data managed through our identity provider, Clerk. Passwords are handled by Clerk; we do not store plaintext passwords.
• Email verification status: we record whether your email is verified so we can gate review submission. Clerk sends verification links on our behalf.
• Reviews: ratings, text, tenancy period, and property link.
• Location (optional): used only at review submission to check proximity to the property. We store a boolean badge, not your exact coordinates long-term.
• Landlord verification documents when submitted.
• Favourites and profile activity linked to your Reccy account.
• Technical data: authentication cookies, server logs, and basic usage analytics.

Lawful basis

• Contract: providing the review service you sign up for.
• Legitimate interests: fraud prevention, moderation, platform security, and service improvement.
• Consent: optional location verification and non-essential cookies where required.

How we use data

We display reviews according to our access model. We moderate flagged content. We do not sell personal data. Landlords cannot edit tenant reviews; they may submit structured evidence responses through moderation.

Your Reccy account is linked to your Clerk user ID. When you sign in, we sync your name, email, and verification status into our database so reviews, favourites, and moderation tools work consistently.

Third-party processors

• Clerk — sign-in, sign-up, session management, and email verification. See Clerk's privacy policy.
• Railway — application hosting and PostgreSQL database.
• Ideal Postcodes — UK address search on the review form when you search for a property.
• OpenStreetMap contributors — map tiles when you use map view (no account data is sent beyond a standard tile request).

Retention

Account data is kept while your account is active. Reviews may be retained after account deletion where needed for legal or moderation purposes, but will be anonymised where possible. Deletion requests are processed by moderators.

Your rights

UK GDPR rights include access, rectification, erasure, restriction, and portability. Contact privacy@reccy.it.com. You may complain to the ICO (ico.org.uk).

To delete your authentication account, contact us or use Clerk account management where available. Removing your Clerk account does not automatically remove published reviews; submit a deletion request from your profile if needed.

Security

Data is stored in PostgreSQL on Railway with industry-standard access controls. Uploaded documents are stored in secured object storage. Authentication and password security are handled by Clerk.