Privacy Policy

WHO WE ARE

Cornerstone Pro is a service of Cornerstone Pro UK Ltd, 76 St. Johns Road, Tunbridge Wells, Kent, TN4 9PH. Privacy and data protection queries are handled personally by our founder, Mark Nicholson: email support@cornerstonepro.uk. We provide a shared, permanent record for property projects. This policy explains what personal data we collect, why, and the rights you have over it.

THE SHORT VERSION

We collect what we need to run your account and your projects, we store it with established providers in the UK and Europe, we do not sell it, we do not run advertising or tracking, and we do not read the contents of the documents you file. Your record is yours: you can download a complete copy free at any time, and you can ask us to delete your data.

WHAT WE COLLECT

Account data. Your name, email address and password when you create an account (passwords are stored only in securely hashed form by our authentication provider), plus a display name if you set one.

Project data. What you and your project members put into a project: project names and details, property addresses, documents and their titles and categories, photographs, checklist entries and renewal dates, notes on activity, and the audit trail of actions taken. Documents you file are stored privately and are shared only according to the sharing controls inside your project.

Payment data. Payments are handled by Stripe. We never see or store your card number. We keep records of your subscription status, invoices and payment history.

Communications. Emails we send you about your account and service (for example confirmations, receipts, payment issues and renewal reminders you have set), and any correspondence you send us.

Technical data. Standard server logs (such as IP address and browser type) generated when you use the service, used for security and to keep the service running.

WHAT WE DO NOT DO

We do not read the contents of the documents you file. Our staff access is limited to what is needed to operate the service, for example investigating a fault or acting on your own support request. We do not sell personal data. We do not run third-party advertising or marketing trackers on the service.

WHY WE PROCESS YOUR DATA (OUR LAWFUL BASES)

To provide the service you have signed up for (performance of a contract): your account, your projects, your subscriptions, your emails about the service. For our legitimate interests in running a secure, reliable service: security logging, fraud prevention, service improvement. To meet legal obligations: keeping financial records for tax purposes. With your consent, where we ask for it: we do not currently send marketing email, and if we ever do, it will be opt-in and easy to leave.

WHO WE SHARE DATA WITH

Your project members. Data you place in a project is visible to the people in that project according to its sharing controls. The project owner controls membership and can mark individual documents private.

Our service providers, who process data on our instructions: Supabase (database and authentication, hosted in London, United Kingdom), Stripe (payment processing), Resend (email delivery, hosted in Ireland), Vercel (application hosting), and Microsoft 365 (our own business email). Some of these providers are US companies; where data leaves the UK or the European Economic Area, it does so under UK-approved safeguards such as the UK International Data Transfer Agreement or the UK extension to the EU-US Data Privacy Framework.

Nobody else, unless the law requires it of us.

HOW LONG WE KEEP DATA

Cornerstone Pro is a record-keeping service, and its value is that records last. While your account or subscription is active, or while a purchased dossier exists, we keep your project records so the record can do its job. If you close your account, we will delete your personal data within a reasonable period, except what we must keep to meet legal obligations (for example financial records). You can download a complete copy of your record, free, at any time.

YOUR RIGHTS

You have the right to access your data, to correct it, to have it deleted, to restrict or object to our processing of it, and to data portability. The free export inside every project is portability built in: your complete record, in plain files, whenever you want it. To exercise any right, email support@cornerstonepro.uk. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

COOKIES

We use only first-party cookies the service needs: the cookies that keep you signed in, and, if you arrive through a referral link, a short-lived cookie that remembers the referral code so your signup can credit it. Payments happen on Stripe's own checkout pages, where Stripe sets the cookies it uses to prevent fraud during payment; no Stripe cookies are set on our pages. We use no analytics cookies, no advertising cookies and no tracking cookies, which is why we do not show you a cookie banner. If that ever changes, we will ask you first.

CHILDREN

Cornerstone Pro is a service for property projects and is intended for adults. It is not directed at anyone under 18.

CHANGES TO THIS POLICY

If we change this policy, we will update this page and the date at the top. If a change is significant, we will tell you by email.