Privacy Policy

Last updated: 9 April 2026

BuyerIQ ("BuyerIQ", "we", "us") is committed to protecting your privacy. This policy explains how we collect, use, store, and share personal data when you use our website and services at buyeriq.ie (the "Service").

1. Data Controller

BuyerIQ is the data controller for personal data processed through the Service. For questions or requests, contact us at privacy@buyeriq.ie.

2. What We Collect

• Account data: email address, hashed password (managed by Supabase Auth).
• Usage data: search queries (property addresses), page views, feature usage, IP address.
• Payment data: processed by Stripe. We do not store card numbers. We receive your Stripe customer ID, subscription status, and billing email.
• Alert preferences: saved search criteria and notification settings.
• Device data: browser type, operating system, and screen size for analytics (no cookies required).

3. How We Use Your Data

• To provide and improve the Service (property valuations, comparable sales, alerts).
• To process payments and manage your subscription.
• To send transactional emails (account verification, password reset, deal alerts you opted into).
• To monitor Service health and prevent abuse (rate limiting).
• To generate aggregated, anonymised market statistics.

We do not sell your personal data. We do not use your data for advertising.

4. Legal Basis (GDPR Article 6)

• Contract: processing necessary to provide the Service you signed up for.
• Legitimate interest: analytics, fraud prevention, service improvement.
• Consent: marketing emails (you can unsubscribe at any time).

5. Data Sharing

We share data only with processors necessary to run the Service:

• Supabase (EU region) — authentication and database hosting.
• Stripe — payment processing.
• Vercel — frontend hosting and edge delivery.
• Railway — backend API hosting.
• Plausible Analytics (EU-hosted) — privacy-friendly, cookieless web analytics.

We do not share your data with any other third parties.

6. Data Retention

• Account data: retained while your account is active, deleted within 30 days of account deletion.
• Search history: retained for 12 months for service improvement, then anonymised.
• Payment records: retained for 7 years as required by Irish tax law.

7. Your Rights

Under GDPR, you have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Erase your data ("right to be forgotten").
• Port your data to another service.
• Object to processing based on legitimate interest.
• Restrict processing in certain circumstances.

To exercise any right, email privacy@buyeriq.ie. We will respond within 30 days.

8. Cookies

We use only essential cookies for authentication (session tokens managed by Supabase Auth). Our analytics provider (Plausible) does not use cookies. We do not use any advertising or tracking cookies.

9. Data Security

We use encryption in transit (TLS), encrypted database connections, and hashed passwords. Access to production systems is restricted to authorised personnel.

10. Property Data

Property transaction data displayed on BuyerIQ is sourced from publicly available records including the Property Price Register (Gov.ie), SEAI BER database, and CSO statistics. This data relates to properties, not individuals, and is published by government bodies for public use.

11. Chrome Browser Extension

BuyerIQ publishes a Chrome browser extension that adds a property valuation overlay to listings on Daft.ie and MyHome.ie. The extension is optional, free to install, and operates only on those two domains plus our own buyeriq.ie web app.

What the extension reads from listing pages

• The page URL of the property listing you are currently viewing on Daft.ie or MyHome.ie.
• Public listing fields shown on that page: address, asking price, number of bedrooms and bathrooms, BER rating, floor area, agent name, and listing reference number.

The extension does not read content from any other domain. The content script that performs the scraping is restricted via the manifest to daft.ie, myhome.ie, andbuyeriq.ie — you can verify this in the published manifest on the Chrome Web Store listing or by inspecting the extension package.

What the extension transmits

• The scraped listing fields above are sent over HTTPS to api.buyeriq.ie so we can return a valuation, comparable sales, and area scores for that address.
• If you are signed in, requests include your account access token so the response can be personalised (free vs Pro tier features) and counted toward your daily quota.

What the extension stores in your browser

All extension data is held in chrome.storage on your own device. It is never uploaded except where described above. The stored items are:

• Your Supabase access token and refresh token (only after you sign in via the BuyerIQ web app), so the extension can make authenticated API calls without re-prompting you.
• Your watchlist of saved properties.
• A daily counter of how many lookups you have made today (used to enforce free-tier quotas).
• Your enabled toggle and your selected API base URL.

Uninstalling the extension deletes all of this data immediately. You can also clear it manually at any time via the extension popup or via Chrome's extension settings.

Error monitoring

When the extension hits an unexpected error (e.g. a Daft.ie layout change breaks the scraper), we send a minimal error report to our error-monitoring provider (Sentry, EU region) so we can fix it. Each report contains: the error message and stack trace, the extension version, the browser context (background worker vs content script), and the domain of the page (e.g.https://www.daft.ie) — never the full URL, never the address being viewed, never any auth token, never any scraped listing fields. Sentry is contractually bound to use the data only for diagnostics on our behalf and not to retain it beyond 90 days. You can opt out by uninstalling the extension; there is no separate opt-out within the extension itself.

What the extension does NOT do

• It does not contain any analytics, telemetry, behavioural tracking, or advertising SDKs.
• It does not load remote code — all JavaScript is bundled in the published extension package, in line with Manifest V3 requirements.
• It does not read or transmit content from any website other than Daft.ie, MyHome.ie, and buyeriq.ie.
• It does not collect your name, email, browsing history, financial information, location, or any other personally identifying information beyond what you voluntarily provide by signing in to the web app.
• It does not sell, rent, or share data with any third party. The only network destinations the extension contacts are api.buyeriq.ie, buyeriq.ie, and our error-monitoring provider when something goes wrong.

The same legal basis (Article 6 contract / legitimate interest), retention rules, security controls, and GDPR rights described in sections 4–9 above apply equally to data processed via the extension.

12. Children

The Service is not directed at anyone under 18. We do not knowingly collect data from minors.

13. Changes

We may update this policy from time to time. Material changes will be communicated via email or a notice on the Service. Continued use after changes constitutes acceptance.

14. Contact & Complaints

Email: privacy@buyeriq.ie

You also have the right to lodge a complaint with the Irish Data Protection Commission at dataprotection.ie.