Data processing information

For a homeowner using HomeRekkord for their own property, Proja AI Ltd is the controller of the account and record data.

Where a firm uses the matter workspace to work with its own clients, the firm is the controller of the matter data it enters, and Proja AI Ltd acts as processor for that data on the firm’s documented instructions.

Processing is limited to operating the service: storing property records and evidence, handling sharing and matter access, sending service notifications, and providing support. Processing lasts for the term of the agreement and the deletion window described below.

Records remain available while the account is active. When you delete a record or close an account, we remove the data from live systems within 30 days, subject to any legal retention duty. Residual copies in our infrastructure providers’ encrypted backups are not individually deletable and age out on the provider’s backup cycle, currently up to 35 days, after which they are destroyed. The privacy notice states the same position.

A full structured export is available from the product at any time, before or during an exit, at no charge.

The technical and organisational measures we operate are set out on our security overview. That page is the security schedule we will attach to an agreement — we will not represent controls we do not run.

Our current subprocessors, their purpose and processing regions are listed on the subprocessors page, which we update before any new provider begins handling customer data.

Where we act as processor, we will assist the controller in responding to access, correction, erasure and portability requests, and will pass on any request we receive directly rather than answering it ourselves.

Email privacy@homerekkord.com to request a data processing agreement, a completed supplier security questionnaire, or our standard contractual clause pack. We will tell you plainly where a requirement is one we cannot yet meet.