Towerview AI Ltd (“Towerview”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, disclose and safeguard personal data when you visit towerview.ai (the “Website”), use the Towerview platform (the “Platform”), including the mailboxes and cloud drives you connect to it, or use Towerview for Gmail, Towerview for Outlook or Towerview for Office.
Where your organisation has a Towerview account, it decides why the content it adds to the Platform is processed, and we process that content on its behalf under our Terms of Service and, where applicable, a Data Processing Agreement. Your organisation’s own privacy notice applies to that processing; this policy describes it in general terms.
1. Who We Are
Towerview AI Ltd is a company registered in England and Wales. We provide AI-powered software tools for real estate professionals, including underwriting automation, financial modelling and portfolio intelligence solutions.
For the purposes of the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, Towerview AI Ltd is the data controller for personal data collected through the Website and for the account information described below.
2. Scope of This Policy
This Privacy Policy applies where you:
- Visit or browse our Website
- Submit a contact or “Request Access” form, or book or attend a demo
- Subscribe to updates or communications, or communicate with us by email or other channels
- Create an account and use the Platform
- Connect a mailbox, its calendar or a cloud drive to the Platform
- Take part in a meeting that a Towerview user’s note taker joins
- Use Towerview for Gmail, Towerview for Outlook or Towerview for Office
3. Personal Data We Collect
Information You Provide
- Your name, business email address, company name and job title
- Business telephone number (if provided)
- Any information you include in communications with us
- When you use the Platform: your account details, and the documents, deals, notes and chats you and your colleagues add
Information From Accounts You Connect
When you connect a mailbox, a cloud drive or one of our extensions, we receive the information described in Sections 13 to 16.
Information Collected Automatically
- IP address, browser type and version, device type and operating system, and time zone setting
- Referring URLs, pages viewed and time spent
- How you use the Platform, such as pages visited, clicks and errors, and for some sessions a recording of your use of the Platform
This information helps us maintain security, analyse performance and improve the Website and the Platform.
4. Cookies and Similar Technologies
- Strictly necessary cookies enable core functionality such as security, sign-in and session management.
- Analytics cookies help us understand how visitors and users interact with the Website and the Platform. On the Website, where required by law, these are only set with your consent.
You may manage or disable cookies through your browser settings. Disabling certain cookies may affect functionality.
5. How We Use Personal Data
- Provide, secure and support the Platform and the features you use
- Respond to enquiries and demo requests, and assess suitability for platform access
- Communicate with prospective and existing customers
- Improve and optimise the Website and the Platform
- Monitor and maintain security, and prevent fraud or misuse
- Comply with legal or regulatory obligations
Where permitted by applicable law, we may also send relevant updates about Towerview. You may opt out of marketing communications at any time.
We do not sell personal data, use content from the Platform for advertising, or use it to train generalised AI models. Access to your content by our staff is limited to what is needed to provide support, keep the service secure or comply with the law.
6. Legal Basis for Processing
Where UK data protection law applies, we rely on one or more of the following lawful bases:
- Contractual necessity, to provide the Platform under our agreement, or to take steps at your request before entering into one (for example, booking a demo or requesting access).
- Legitimate interests, including operating, securing and improving our Website and services, managing business operations, and communicating with prospective customers. We ensure these interests are not overridden by your rights and freedoms.
- Consent, where required, including for non-essential cookies on the Website and optional marketing communications. You may withdraw consent at any time.
- Legal obligation, where processing is necessary to comply with applicable law.
7. Special Categories of Personal Data
We do not intentionally request or collect special categories of personal data, such as information relating to health, race or ethnicity, political opinions, religious beliefs, trade union membership, genetic or biometric data, or criminal convictions.
If you voluntarily provide such information, we will process it only to the extent necessary and in accordance with applicable law.
8. Disclosure of Personal Data
We share personal data only with providers who help us run Towerview, each processing it only on our instructions and subject to appropriate security and confidentiality measures:
- Cloud hosting and database providers, which host our service and its data.
- AI model providers, which run the AI that reads, writes and answers on your behalf, under terms that prohibit training their models on your content.
- An email and calendar integration provider, which connects your mailbox and calendar to Towerview and runs the meeting note taker (Sections 14 and 15).
- Product analytics and error-monitoring providers, for the Website and the Platform.
- The toolkit our Gmail extension is built on (Section 16).
- Search and data providers, which receive the queries Towerview makes when it researches on your behalf.
- Speech-to-text providers, when you use voice dictation.
- Payment processors, for subscriptions and billing.
- Email and communications providers, and professional advisers.
A current list of the providers that process personal data on our behalf is available on request.
We may also disclose personal data where required by law or in connection with a corporate transaction such as a merger or acquisition, subject to appropriate safeguards.
9. International Data Transfers
Towerview is based in the United Kingdom. In certain circumstances, personal data may be transferred outside the UK, including to service providers located in other jurisdictions.
Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place in accordance with UK data protection law. These may include:
- The UK International Data Transfer Agreement (IDTA)
- The UK Addendum to Standard Contractual Clauses
- Transfers to jurisdictions deemed adequate by the UK Government
Further information regarding transfer safeguards can be provided upon request.
10. Data Security
We implement appropriate technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, alteration, disclosure or destruction. These measures include secure hosting environments, encryption in transit and at rest, and access controls.
While we take reasonable steps to protect personal data, no method of transmission over the internet is entirely secure.
11. Data Retention
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy. Content in the Platform is kept while your organisation’s account is active and then as our agreement with your organisation sets out. Sections 13 to 16 describe additional rules for connected accounts. Where we no longer have a legitimate business need to process personal data, we will delete or anonymise it, unless retention is required or permitted by law.
12. Your Rights
Under UK data protection law, you may have the right to:
- Request access to your personal data
- Request rectification of inaccurate data
- Request erasure
- Object to processing
- Request restriction of processing
- Request data portability
- Withdraw consent where processing is based on consent
To exercise your rights, please contact us using the details below. Where we process content on behalf of your organisation, we may refer your request to it. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
13. Cloud Storage Integrations
The Platform allows you to connect Google Drive, Microsoft OneDrive and Dropbox to import documents for analysis. When you connect an account, we access:
- Your account identifier (name and email address), to label the connection
- Folder and file listings, so you can choose what to import
- The contents of the files and folders you explicitly select for import or synchronisation
Imported files are copied into the Platform to provide the analysis you request.
You can disconnect a cloud storage account at any time from the Platform’s settings, which deletes our stored authentication tokens, or revoke Towerview’s access from your provider’s own security settings. Imported copies can be removed by deleting the corresponding documents or projects.
14. Connected Mailboxes
If you connect a Gmail or Microsoft mailbox to the Platform, we access the email messages in it, including sent messages, and their metadata to provide the Platform’s email features, such as relating your email to your deals and preparing draft replies at your request.
We keep message metadata, such as sender, recipients, subject and date, and information derived from your email that is needed to provide these features. We keep a message’s content or attachments only when you choose to add them to the Platform. Records of messages that are not relevant to your deals are deleted automatically after a set period; other mailbox data is kept as described in Section 11.
Mailbox data is shared only with the service providers described in Section 8, acting on our instructions, and its use is limited as described in Section 17.
You can pause or disconnect a mailbox at any time in Settings, or remove Towerview’s access in your Google or Microsoft account.
15. Calendar and Meeting Notes
If you connect the calendar of a connected mailbox, we have read-only access to it: we never create, change or delete events. For your upcoming meetings we read the time, title, attendees, your reply and the meeting link, to brief you before meetings about your deals. We read a meeting’s description only to work out which deal it concerns, and do not keep it. Events marked private are not read.
If you choose, a note taker named after your organisation and you joins your deal meetings on Google Meet or Microsoft Teams. It asks to join like any guest, announces itself in the meeting, and anyone in the meeting can remove it. It records audio only to make a transcript; we keep the transcript, never the recording. From the transcript we prepare a summary, suggested next steps and a draft follow-up email, which is never sent without you. If you choose to file transcripts to deals, they are kept as the deal’s documents are.
If you use the note taker, you are responsible for telling the people in your meetings that it is there and for any consent the law requires where they are.
Meetings that concern none of your deals are deleted shortly after they end; other meeting data is kept as described in Section 11. You can turn meetings off in Settings at any time, which stops calendar access and cancels any booked note taker without affecting your email.
16. Towerview for Gmail, Outlook and Office
Towerview for Gmail (a Chrome extension), Towerview for Outlook and Towerview for Office (an add-in for Excel, Word and PowerPoint) show your Towerview information beside your email and files. They only work with a Towerview account.
They access the email or file you have open, and details of your account in that application such as your email address and signature, to find related information in Towerview and to do what you ask, such as inserting a draft, attaching a file or editing the open document. The Office add-ins may add a small identifier to a file so Towerview can recognise it later. Files you save from Excel, Word or PowerPoint are kept in your Towerview account.
The Gmail extension is built on InboxSDK (Streak), which receives technical error reports and basic usage statistics, but no email content. Our product analytics records how the extensions are used, as described in Section 3.
You can sign out, end your sessions in Towerview’s Settings, or uninstall an extension or add-in at any time.
17. Google User Data
Towerview’s use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements; this covers Google Drive, Gmail and Google Calendar data. The use of information received from Towerview for Gmail complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.
We do not use data received from Google Workspace APIs to develop, improve or train generalised or non-personalised AI or machine learning models.
18. Third-Party Websites
Our Website may contain links to third-party websites or services. This Privacy Policy does not apply to those sites, and we are not responsible for their privacy practices.
19. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. When we do so, we will update the “Last updated” date at the top of this page, and, where required by law, we will notify you or ask for your consent.
20. Contact Details
If you have any questions about this Privacy Policy or our data practices, please contact: