Privacy Policy

Last updated 18 July 2026

This policy explains what personal data FlatSignal collects, why, and what your rights are under UK data protection law (the UK GDPR and the Data Protection Act 2018).

1. Who is responsible for your data

FlatSignal is operated by Mythic Labs Ltd (company number 16731940), trading as FlatSignal. Mythic Labs Ltd is the data controller for the personal data described here.

2. What we collect

• Account details — if you create an account, the email address you sign up with.
• Search and alert preferences — the areas, filters and criteria you set so we can match and alert you to relevant listings.
• Payment details — if you buy a subscription or pass, our payment processor Stripe collects and processes your payment information. We do not receive or store your full card number; we receive limited billing details and the status of your payment.
• Technical and usage data — standard information your browser sends (such as IP address, device and browser type) and server logs generated when you use the site, used to run and secure the service.

3. How we use it, and our lawful bases

• To provide the service — matching listings to your criteria, sending the alerts you ask for, and managing your account. Lawful basis: performance of our contract with you.
• To take payment — processing subscriptions and passes. Lawful basis: performance of a contract, and compliance with our legal (e.g. accounting) obligations.
• To run, secure and improve the service — keeping the site working, preventing abuse, and understanding how it is used. Lawful basis: our legitimate interests in operating a reliable, secure service, balanced against your rights.
• To communicate with you — responding to support requests and sending service messages. Lawful basis: performance of a contract and our legitimate interests.

4. Cookies and local storage

FlatSignal uses a small amount of essential local storage in your browser to remember your theme (light or dark) preference. This is not used to track you and is not shared. We do not currently use advertising or third-party tracking cookies. If that changes, we will add a cookie-consent banner and update this section before setting any non-essential cookies.

5. Who we share it with

We do not sell your personal data. We share it only with service providers who process it on our behalf, under contract, so we can run FlatSignal:

• Vercel — website hosting and delivery.
• Stripe — payment processing.
• PostHog — privacy-focused product analytics (cookieless; no advertising use). PostHog Inc. processes this data in the United States under appropriate contractual safeguards.
• Sentry — error monitoring, so we can find and fix faults in the service (processed in the United States under appropriate contractual safeguards).
• Our email, notification and infrastructure providers — used to send the alerts and service messages you ask for and to store the data that runs the service.

We may also disclose data where we are legally required to, or to protect our rights, users, or the security of the service.

6. International transfers

Some of our providers process data outside the UK. Where they do, we rely on appropriate safeguards recognised under UK data protection law (such as UK adequacy regulations or the International Data Transfer Agreement / Addendum) to protect your data.

7. How long we keep it

We keep your account and preference data for as long as your account is active, and delete or anonymise it within a reasonable period after you close your account or ask us to, unless we need to keep certain records (for example payment and tax records) for longer to meet legal obligations. Server logs are kept only as long as needed to run and secure the service.

8. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• receive your data, or have it ported to another provider, in a portable format;
• restrict or object to certain processing, including processing based on our legitimate interests;
• withdraw any consent you have given, at any time.

To exercise any of these, email support@flatsignal.app. You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk or by calling 0303 123 1113. We would appreciate the chance to resolve your concern first.

9. Security

We take reasonable technical and organisational measures to protect your data, and we work with established providers who do the same. No service can be completely secure, but we act promptly if we become aware of a problem that affects your data.

10. Children

FlatSignal is intended for adults searching for a home to rent. It is not directed at children, and we do not knowingly collect data from anyone under 18.

11. Changes to this policy

We may update this policy from time to time. When we do, we will update the “Last updated” date above, and we will tell you about significant changes where appropriate.

12. Contact

Questions about your privacy or this policy? Email us at support@flatsignal.app. See also our Terms of Service.