Privacy policy

Last updated: 19 October 2026

Controller

Fira Software Ltd, 49 Station Road, Polegate, BN26 6EA, United Kingdom, company number 07700391. Contact: support@firasoftware.com.

What we collect

• Property check: the coordinates you choose and, optionally, a description of the property. The free check is not stored.
• Purchases: payment is handled by Stripe, which passes us your name, email, country and, for businesses, VAT number and billing address. We never see your card details.
• Reports: we store the report, its coordinates, description and your email so you can reopen it.
• Enquiries: whatever you enter in the form.
• Usage statistics: only if you allow them (Google Analytics 4, with IP anonymisation).

Legal basis

Performance of a contract (purchases and reports), legal obligation (accounting records), legitimate interest (answering enquiries, security) and consent (statistics).

Processors

Stripe (payments), Supabase (database, Frankfurt, EU), Vercel (hosting), Resend (email delivery), Mapbox (maps; it receives your IP address when the map loads and stores a random telemetry identifier in your browser), OpenStreetMap Nominatim (address search, sent from our server without your IP address), Google (statistics, only with consent). The property's coordinates are sent, with no identifying details, to public data services for the calculation: the European Environment Agency (Denmark), the Copernicus DEM on AWS (Frankfurt) and public OpenStreetMap Overpass servers in Germany, Austria and Switzerland.

Cookies

Essential: lang (language), ps_report and ps_credits (access to your reports and codes). Statistics, only with consent: _ga, _ga_*. You can change your choice under “Cookie settings” at the foot of every page.

Retention

Reports and purchase records: 6 years for accounting. Enquiries: 2 years. Statistics: 14 months.

Your rights

Access, rectification, erasure, restriction, portability and objection, and withdrawal of consent at any time. Email support@firasoftware.com. You may complain to the Hellenic Data Protection Authority (dpa.gr) or the UK Information Commissioner's Office.