← Back to Relocation Lens

Privacy Policy

Last updated: October 24, 2026

1. What we collect

We collect the information you provide when you register (name, email, password) and the questionnaire answers you submit to generate relocation reports. We also collect standard server logs (IP addresses, timestamps) for security and debugging purposes.

2. How we use it

Your questionnaire data is used to generate your personalized relocation report, using the AI models, search, and data-verification sub-processors listed in Section 3 below, and, in aggregated, de-identified form, to understand usage and improve the service (legal basis: legitimate interest). These aggregates contain no identifier and are kept after the report itself is deleted. We do not sell your personal data, and we do not share it with third parties for marketing purposes.

Relocation Lens staff may open your generated report and the questionnaire answers behind it when you ask for support, when we are debugging a problem with your report, or at your request. Every such access is recorded in an access log (which staff member, which report, when, and why) that administrators can review. The log is retained for accountability and is no longer linked to your identity once you delete your account.

3. Sub-processors we use

We share data with the following sub-processors to operate Relocation Lens. Each is used only for the purpose described, and only to the extent needed to deliver your account, report, or purchase.

  • Supabase – Hosts our PostgreSQL database (account and report data), in the EU (eu-central-1 region). Legal basis: contract performance.
  • Anthropic – Claude AI models always perform housing, tuition, and tax-research data extraction in every report, and generate the full report itself only when our Claude fallback is active. Legal basis: contract performance.
  • Google (Gemini API) – Gemini AI models generate your relocation report from your questionnaire answers by default. Legal basis: contract performance.
  • Tavily – Web search that gathers up-to-date context on housing, schools, cost of living, and tax rules referenced in your report. Legal basis: contract performance.
  • Serper – Google search-result discovery used to locate current rental listings for the housing cost analysis, and schools for the school research, in your report. Legal basis: contract performance.
  • Zyte – Fetches and renders the rental listing and school pages discovered during housing and school research, so pricing and school details can be verified. Legal basis: contract performance.
  • Firecrawl – An alternate page-fetching and content-extraction provider used for the same housing rent-verification research described above. Legal basis: contract performance.
  • PayPal – Processes credit purchases. We never see or store your card or PayPal login credentials. Legal basis: contract performance.
  • Resend – Sends transactional email: account verification, purchase receipts, and service alerts. Legal basis: contract performance / legitimate interest (service communications).
  • Google (Sign-in) – Optional "Sign in with Google" OAuth login, only used if you choose it instead of a password. Legal basis: consent.
  • Cloudflare – Cookieless page-view analytics on relocationlens.com: page address (path only, no query string), referrer, browser/device type and country derived from your IP address, aggregated; sets no cookie, does no cross-site tracking and builds no personal profile. Legal basis: legitimate interest (understanding how the site is used).

4. Data retention

Generated reports — including the questionnaire answers embedded in them — are automatically deleted 12 months after the report is generated. This is enforced by an automated deletion sweep; you do not need to request it, and there is no way to extend the retention window.

Your account (profile, purchase, and credit history) is retained for as long as your account remains active, and is deleted when you delete your account — see Section 5.

5. Your rights (access, correction, erasure)

You can permanently delete your account and its data yourself at any time, without contacting us, from the "Danger zone" on your Account page. This immediately and permanently erases your account, your generated reports, and your questionnaire answers, and clears any reports cached in your browser's local storage. Purchase and credit-ledger records are retained but disassociated from your identity (no longer linked to you), as required for accounting and anti-fraud records. This action cannot be undone.

For any other access, correction, or erasure request — or if you'd rather not use the self-service tool — email us at relocationlens@gmail.com.

6. International data transfers

Our database is hosted by Supabase in the EU (eu-central-1 / Frankfurt region). Some of the sub-processors listed in Section 3 operate outside the EU/EEA — including Anthropic, Google, PayPal, Resend, and Cloudflare, which are US-based. Where personal data is transferred outside the EU/EEA, we rely on the safeguards those providers offer under their own data processing terms (such as Standard Contractual Clauses), consistent with GDPR Chapter V.

7. Cookies and sessions

We use a single session cookie to keep you signed in (JWT-based, HttpOnly). We do not use tracking or advertising cookies. Our analytics (Cloudflare Web Analytics) is cookieless and stores nothing in your browser.

8. Security

Passwords are hashed with bcrypt. Verification and reset tokens are single-use and expire within 24 hours. We use HTTPS for all communication.

9. Contact

Questions about this policy? Email relocationlens@gmail.com.