VANTAR
Privacy Notice
How VANTAR handles your data. Last updated: June 2026.
Who we are
VANTAR is a product of JP Property Consultancy. For privacy questions or data requests contact us at jon@jppropertyconsultancy.com.
Public beta
VANTAR is currently in public beta. Features, pricing, and data practices may evolve. We will update this page when they do.
What we collect and why
Your questions to VANTAR
When you ask VANTAR a question, your message and limited session context is sent to OpenAI to generate a response. We do not store the text of your questions on our servers — they pass through to OpenAI and the response is returned to your device. Do not enter sensitive personal, medical, legal, or financial details you would not want processed for this purpose.
Usage counting
To enforce the free tier limit of 5 asks per day, we record a usage event on our servers each time you ask a question. Before you sign in, we identify your device using your IP address or an anonymous device ID stored in your browser (key: vanta_anon_session). After sign-in, usage is linked to your account. This data is used solely to manage the free tier — not for advertising or profiling.
Account and authentication
If you create an account, we store your email address and a unique user ID. Authentication is handled via Supabase using email magic link sign-in or optionally Google OAuth. A session cookie is set in your browser to keep you signed in.
Subscriptions and billing
If you subscribe to a paid plan (Pro or Lifetime), payment is processed by Stripe. We store your email address, subscription status, and plan type. We do not handle your card details — these are processed entirely by Stripe on their hosted checkout page. Your email may be used to restore access to a previous subscription.
Your browser storage
We store the following locally in your browser:
| Key | Purpose |
|---|---|
vanta_anon_session | Anonymous device ID used before sign-in |
vanta_memory | Session continuity and preferences you set within VANTAR |
vanta_commitments | Commitments saved during your session |
vanta_analytics | Local usage telemetry — visible only to you, never leaves your device |
vanta_debug_snapshot | Local debug data — never leaves your device |
vanta_pwa_dismissed | Whether you dismissed the app install prompt |
| Supabase session cookies | Keeps you signed in — managed by Supabase Auth |
Clearing your browser data removes all locally stored history and session data.
Third-party processors
| Processor | Purpose | Privacy Policy |
|---|---|---|
| Supabase | Authentication and database | supabase.com/privacy |
| Stripe | Payment processing | stripe.com/en-pl/privacy |
| OpenAI | AI response generation | openai.com/privacy |
| Netlify | Hosting and infrastructure | netlify.com/privacy |
| OAuth sign-in (optional) | policies.google.com/privacy |
Lawful basis for processing
- Contract — processing your email, usage data, and subscription status is necessary to provide the service you signed up for
- Legitimate interest — recording usage counts per device to prevent abuse of the free tier
- Consent — where you choose to use optional features such as Google OAuth sign-in
Data retention
- Usage event records are retained while your account is active
- Subscription records are retained for the duration of your subscription and for a reasonable period after to handle billing disputes
- Anonymous usage records (IP and device ID) are retained for 30 days
- Local browser storage persists until you clear it manually
International transfers
Our processors — Supabase, Stripe, OpenAI, and Netlify — may process data outside the UK and EEA. Each operates under appropriate safeguards including Standard Contractual Clauses approved by the European Commission. See each processor's privacy policy for details.
Your rights
Under UK GDPR and EU GDPR you have the right to:
- Access — request a copy of the data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — request deletion of your personal data
- Portability — receive your data in a portable format
- Objection — object to processing based on legitimate interest
- Restriction — ask us to limit how we process your data
- Withdraw consent — where processing is based on consent
To exercise any of these rights email jon@jppropertyconsultancy.com. We will respond within 30 days.
You also have the right to lodge a complaint with the UK Information Commissioner's Office at ico.org.uk or with the Polish data protection authority (UODO) at uodo.gov.pl.
Account and data deletion
To request deletion of your account and all associated data, email jon@jppropertyconsultancy.com with the subject line "Delete my VANTAR account". We will process your request within 30 days. Note that Stripe may retain billing records as required by financial law.
Automated decision-making
VANTAR uses AI to generate responses to your questions. This is a generative process — AI responses are not used to make legally significant automated decisions about you.
Children
VANTAR is not directed at children under 13. We do not knowingly collect data from children under 13.
We do not sell your data
We do not sell personal data to third parties.
Changes to this notice
We will update this page when our data practices change. The date at the top of this page reflects when it was last revised.