Privacy Notice
Last updated: 28 October 2026
This notice explains what personal data Aeya collects, why we collect it, who we share it with, how long we keep it, and the choices you have. We have written it in plain English.
If anything is unclear, or you want to use any of your rights, email us at hello@aeya.co.uk.
1. Who we are
Aeya is a UK property platform that helps people buy, sell and look after their homes. Aeya is operated by Casa Vista Ltd, registered in England and Wales (company number 15800686). Registered office: 3rd Floor, 86-90 Paul Street, London, EC2A 4NE.
Casa Vista Ltd is the data controller for the personal data described in this notice. That means we decide how and why your data is used. Contact for anything privacy related: hello@aeya.co.uk.
2. What personal data we collect
If you joined our waitlist before the beta opened:
- your name and email address
- whether you were looking to buy, already owned your home, managed several properties or rented
When you create an account:
- your name, email address and profile picture, from the sign-in provider you use. Your password is held by that provider, never by Aeya
- the role you choose when you sign up, and details you add to your profile, such as your phone number or professional details if you work in property
- your account settings and preferences
When you use Aeya to buy, sell or manage a home:
- property details you enter or save, such as address, property type, tenure, bedrooms and bathrooms, and your saved properties and searches
- your search criteria and budget
- your journey progress, including the steps you have started or completed, viewing notes you write and dates you add to your calendar
- figures you enter into calculators, such as income, outgoings, deposit and sale price
- information about your transaction, such as the agent, broker or solicitor you are working with and the contact details you give us for them
- home records, such as warranties, certificates, insurance, maintenance and tenancy details
- vehicle registrations you add, so we can look up MOT and tax dates
- the email addresses of people you invite to share a property
- messages you send to our AI assistant, MAISON
Documents you upload or forward to us by email:
You choose what to upload. Typical uploads include proof of identity, bank statements, payslips, mortgage documents, survey reports, contracts, property information forms and certificates. These documents can contain sensitive financial details and details about other people, so please upload only what you need. We also read useful details from them, such as dates and amounts.
When you contact us:
- your messages, anything you choose to give us such as a phone number or company name, and our replies
Technical information, when you visit:
- the device and browser you use, your IP address, the pages you visit and what you click, approximate location derived from your IP address, and basic performance information
- recordings of how you move around the site, used to find and fix problems. Anything you type into a form field is hidden in these recordings
- cookie and similar identifiers, as explained in section 10
We do not set out to collect special category data (such as health or ethnicity). Documents you upload may contain some. If they do, we handle them only to store them securely for you and to provide the feature you have asked for.
3. How we use your data and our lawful bases
UK data protection law requires us to have a lawful basis for each use of your data. We rely on contract, legitimate interests, consent and legal obligation, as set out here.
- To tell you about Aeya if you joined the waitlist before the beta opened. Data: name, email, homeowner status. Lawful basis: your consent. You can withdraw consent at any time with the unsubscribe link in any email or by emailing hello@aeya.co.uk.
- To create and run your account and provide the Aeya service, including reminders you have set. Data: account, property, journey, calendar and document data. Lawful basis: performing our contract with you (our terms of use).
- To store your documents and share them when you ask us to. Data: uploaded documents and the contact details of the people you share them with. Lawful basis: performing our contract with you.
- To provide AI features, such as MAISON answers based on your properties, documents and journey progress, and summaries of documents you upload. Data: the content you choose to run through the feature. Lawful basis: performing our contract with you. See section 4.
- To keep Aeya secure, prevent fraud and misuse, and fix problems. Data: account, usage and technical data. Lawful basis: our legitimate interests in running a secure and reliable service.
- To understand how Aeya is used and improve it. Data: usage and technical data. Lawful basis: your consent for analytics cookies, and our legitimate interests for anonymised or aggregated analysis.
- To know whether Aeya is useful to new members. Data: the time you create your account and the role you choose, and the time you add each document and its category, recorded against your account by our server, with no cookie. Lawful basis: our legitimate interests in knowing whether Aeya works for the people who join. You can object by emailing hello@aeya.co.uk.
- To send you news and updates about Aeya. Lawful basis: your consent, or where the law allows, our legitimate interests in keeping existing users informed. You can opt out at any time.
- To answer your questions and requests. Lawful basis: our legitimate interests in answering you, or performing our contract with you where you are a user.
- To meet legal obligations, such as keeping accounting records and responding to lawful requests from authorities. Lawful basis: legal obligation.
- To contact estate agents, mortgage brokers, solicitors and conveyancers about working with Aeya, using publicly available business contact details. Lawful basis: our legitimate interests in developing partnerships. Each message includes a way to opt out.
We do not sell your personal data. We do not use it for advertising profiles.
4. AI features
Some Aeya features use AI models to answer your questions, summarise documents, organise correspondence into checklists or draft text. When you use one of these features, the content you submit is sent to our AI provider, currently OpenAI, to produce the result.
- Outputs help you see and organise information. They are not legal, financial or mortgage advice. Read the original documents and speak to a qualified professional before you make a decision.
- We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.
- Our AI provider acts as our processor under a written contract. Content sent through its business API is not used to train its models.
6. Transfers outside the UK
We aim to host your data in the UK or European Economic Area: our database is in Ireland and our analytics are hosted in the EU. Some of our providers process data in other countries, for example the United States. Where that happens we make sure the transfer is protected, using UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework where the provider is certified), or the ICO's International Data Transfer Agreement or UK Addendum to the EU standard contractual clauses. You can ask us for details of the safeguards by emailing hello@aeya.co.uk.
7. How long we keep your data
We keep your account information for as long as you have an account. When you delete your account from your profile settings, we delete your Aeya profile and the records stored with it, including your properties, journeys, vehicles and home records, and the files you uploaded, including documents in your property files, files attached to surveys, viewing notes and seller enquiries, and documents you forwarded to us by email. Before you delete your account, you can download each home's records and documents from Settings. Some things are not removed automatically: your sign-in account with our login provider, analytics data, and any waitlist or contact form submissions. Email hello@aeya.co.uk and we will delete those too. Removing files is best effort: if one cannot be removed at that moment, we log the failure, and you can email us to have it removed. Copies may remain in backups until they are replaced.
- Waitlist details: until you join Aeya, unsubscribe or ask us to delete them. If you never join, we delete them 24 months after your last contact with us.
- Support messages: we delete them 24 months after the matter is closed.
- Accounting and financial records: 6 years, as the law requires.
- Security logs: we delete them 12 months after they are created.
- Marketing contacts: until you opt out, plus a minimal suppression record so we do not contact you again.
We may keep anonymised or aggregated data that no longer identifies you.
8. How we protect your data
We use encryption in transit and at rest, access limited to the people who need it, multi-factor authentication on administrative accounts, regular backups, and logging and monitoring of our systems. If a personal data breach is likely to put you at risk, we will tell you and the ICO as the law requires.
No online service can promise perfect security. Please use a strong, unique password with your sign-in provider, and tell us straight away at hello@aeya.co.uk if you suspect anything is wrong with your account.
9. Your rights
Under UK data protection law you have the right to:
- be informed about how we use your data (this notice)
- access the personal data we hold about you
- have inaccurate or incomplete data corrected
- have your data deleted in certain circumstances
- restrict or object to how we use your data, including objecting to direct marketing at any time
- receive the data you gave us in a portable format. You can download each home's records from Settings yourself
- withdraw consent at any time where we rely on it. This does not affect anything we did before you withdrew it
- not be subject to solely automated decisions with legal or similarly significant effects
You can delete your account from your profile settings. For anything else, email hello@aeya.co.uk. We may need to confirm who you are first. We aim to reply within one month, and there is normally no charge.
11. Marketing preferences
We only send marketing emails if you have agreed to receive them, or if the law allows us to contact you about similar services you already use. Every message has an unsubscribe link, and you can also email hello@aeya.co.uk.
12. Children
Aeya is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you think a child has given us their data, email hello@aeya.co.uk and we will delete it.
13. If you are a professional using Aeya
Estate agents, mortgage brokers, solicitors and conveyancers who use Aeya under a professional account are bound by a separate agreement. Where we handle client data on your behalf, that agreement includes a data processing agreement. This notice covers the personal data of the professionals themselves, such as name, work email, firm and role, which we use to set up and manage your account and to communicate with you about it.
14. Other people's data
If you enter or upload information about someone else, for example a joint buyer, a family member or a named contact at your solicitor's firm, please make sure you are entitled to share it. Where appropriate, let them know how Aeya uses it.
15. Complaints
We would like the chance to put things right first, so please contact us at hello@aeya.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at any time: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Website: ico.org.uk. Helpline: 0303 123 1113.
16. Changes to this notice
We may update this notice from time to time. We will post the new version on this page with a new date, and tell you directly if the changes are significant.