Privacy Policy

1. Data controller

Oltiva Ltd (company number 17443462), trading as Oltiva, is the data controller for personal data processed to operate this software. Registered business address: 25 Pendre Crescent, Llanharan, Pontyclun, CF72 9PP, United Kingdom. For privacy enquiries, email Oltivasup@outlook.com. See Contact & support. Paddle acts as a separate data controller for personal data relating to its role as Merchant of Record under its privacy notice.

2. Information and purposes

Account information, including email, authentication information and profile details, is used to create accounts, authenticate users and manage access. Contact details, investor criteria, property records and saved analysis are processed to provide the tools and authorised matching functions you request.

Referral attribution and any partner programme records are used to administer the referral programme. Subscription status and billing-period references are used to manage membership access. Support messages are used to respond to enquiries. Technical information such as device/browser details, page address, error messages and IP addresses may be processed for security, troubleshooting and service operation. Oltiva does not store payment-card details.

Oltiva does not use analytics, advertising or marketing tracking tools.

3. Lawful bases

Contract performance covers account operation, requested analysis, subscriptions and partner administration. Legitimate interests cover proportionate security, fraud prevention, technical diagnostics and support. Legal obligation covers records we must retain for tax, accounting or other legal duties. Where consent is required, for example for non-essential browser storage, it may be withdrawn at any time. We do not use consent as the basis for essential account operation.

4. Service providers and recipients

We use the following providers, who process personal data on our behalf or as independent controllers where stated:

• Lovable (Lovable Labs Incorporated) — application hosting, account authentication, database storage and technical error diagnostics, using its infrastructure sub-processors for cloud database and content delivery.
• Paddle (Paddle.com Market Ltd) — Merchant of Record for purchases: checkout, payments, subscription management, tax and invoicing. Paddle acts as an independent controller for that processing.
• Microsoft Outlook (Microsoft) — the support mailbox used to receive and answer emails sent to Oltivasup@outlook.com.
• Google Fonts (Google) — supplies the typefaces used on the site; your browser’s IP address and browser details are sent to Google when fonts load. No Google cookies are set by this.

Authorised Oltiva administrators may access investor and partner information for their relevant duties; ordinary membership does not grant that access. Data may also be shared with professional legal or accounting advisers and with authorities where legally required. We do not sell personal data.

5. Retention

We keep personal data only as long as needed to provide the service, meet legal duties, resolve disputes and administer legitimate records. When you close your account, we aim to delete or anonymise your account data within 30 days, subject to legal retention requirements, copies held temporarily in routine backups until they expire, and any legitimate outstanding obligations such as an unresolved dispute or payment matter.

Financial and transaction records are retained for the applicable statutory period, normally six years from the end of the relevant financial year under UK tax and company law. Records held by Paddle as Merchant of Record are retained under Paddle’s own privacy notice.

6. International transfers

Some of our providers are based in, or process data in, countries outside the UK, including the United States and the European Economic Area. Where personal data is transferred outside the UK, we rely on safeguards recognised under UK GDPR: UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework for certified providers), or the International Data Transfer Addendum to the EU Standard Contractual Clauses or the UK International Data Transfer Agreement included in the provider’s data processing terms. You can request more information about these safeguards by emailing Oltivasup@outlook.com.

7. Your rights and account closure

Subject to legal conditions, you may request access, rectification, erasure, restriction, portability or object to processing. You may withdraw consent without affecting prior lawful processing. To close your account and request deletion of your personal data, or to exercise any other right, email Oltivasup@outlook.com from the email address on your account. We respond without undue delay and normally within one month; legally permitted extensions will be explained. Closing your account does not by itself cancel a Paddle subscription; please cancel it first (see the Subscription & Cancellation Policy).

You may complain to the UK Information Commissioner’s Office, or the relevant supervisory authority where applicable.

8. Security

We use appropriate technical and organisational measures, including encrypted connections and access controls that limit each user to their own records, to protect personal information. No system can be guaranteed completely secure.

9. Cookies and browser storage

Oltiva does not use advertising or analytics cookies. It uses the following browser storage:

• Sign-in session (strictly necessary) — keeps you logged in securely.
• Saved investment criteria (strictly necessary) — remembers criteria you set so the tools you request work as expected.
• Form state (strictly necessary, cleared when the tab closes) — prevents a submitted investor form from being shown again.
• Referral code — stored only when you arrive through a partner’s referral link, so the referring partner can be credited if you subscribe.

Blocking or clearing storage may sign you out or remove saved preferences. You can manage storage through your browser settings.