Privacy notice

How we handle your information

Last updated 14 October 2026. Plain English on purpose. If anything here is unclear, email hello@getagreeable.com.

Who we are

Agreeable is run by Costart Projects Ltd ("we"), a company registered in England and Wales. We are the data controller for the information described here. We are not a law firm and do not give legal advice.

What we collect

Account details. Your first name and email address. If you choose a password, we store a one-way hash of it, never the password itself. Sign-in codes are stored as a keyed hash and expire after ten minutes.
Your financial picture. What you enter in the steps: property values and mortgages, pension values, savings, debts, incomes, how many children you have and their ages, which parent they mainly live with, and the split you're proposing. Also your answers to the first-run questions (where you live, how long you've been together, and so on).
Information about your partner. Until they join, the figures you enter about them are entered by you. You should only do this with their agreement. When they accept your invite they see everything and can change any of it. We tell them this on the invite page.
Activity. A log of who changed or confirmed which step and when, so both of you can see what happened. It holds names and step titles, not the figures.
Technical data. Your IP address is used in memory to limit sign-in attempts and is not stored in our database. Our hosting provider keeps standard request logs for security and debugging for a limited period.

We don't collect anything from the free start page unless you create an account; until then it stays in your own browser.

Why we use it, and the legal basis

To provide the service you've signed up for: building the picture, keeping both of you in sync, previewing and later preparing the documents. Legal basis: performance of a contract with you.
To keep accounts secure: rate limiting, sign-in codes, fraud prevention. Legal basis: our legitimate interest in running a secure service.
To contact you about your account: sign-in codes and service emails only. We don't send marketing unless you ask for it, and you can stop it at any time.

We don't sell your information, share it with advertisers, or use it to build profiles for anyone else. We don't use third-party analytics or tracking cookies.

Who we share it with

Cloudflare, which hosts the site, stores the database (in the EU) and sends our emails. Cloudflare acts as our processor under its data processing terms.
Your partner, once they join your shared picture. The picture is shared by design; that's the point of it.
A solicitor on our panel, only if you choose the Reviewed tier, and only what's needed for the review. We'll tell you who before anything is sent.
Nobody else, unless the law requires it.

Your data is stored in the United Kingdom and the European Union. If that changes we'll update this notice first.

How long we keep it

Sign-in codes: deleted within 24 hours of being issued.
Invite links: expire after 7 days and are deleted within 30.
Your account and shared picture: kept while you use the service. You can delete your account at any time from Settings, which removes your account details immediately. If your partner is also in the case, the shared picture stays available to them; if not, the whole case is deleted with it.
Inactive pictures: deleted 24 months after the last change, or 12 months after a final order date is entered, whichever is sooner.

Your rights

Under UK data protection law you can ask us to: give you a copy of your data (there's an export button in Settings), correct it (you can edit everything yourself), delete it (Settings, or email us), restrict or object to how we use it, and move it elsewhere. Email hello@getagreeable.com and we'll respond within a month. If you're unhappy with how we've handled your information you can complain to the Information Commissioner's Office at ico.org.uk.

Children

The service is for adults. We hold only the number and ages of your children, which you enter, so the picture is accurate. No names and nothing else about them.

Security

Everything travels over HTTPS and is encrypted at rest. Passwords and sign-in codes are hashed. Seeing a picture needs a valid session and being one of the two people on it; nobody can see anyone else's. No system is perfect, and if we ever had a breach that put you at risk we would tell you and the ICO as the law requires.

Cookies

One cookie, called ag_session, keeps you signed in. It's essential to the service, so it needs no consent. There are no analytics cookies and no third-party tags. The free start page uses your browser's local storage to remember your picture until you sign up; nothing is sent to us. Your answer to the advert question below is also kept in local storage so we don't ask again.

Advert measurement

We may run adverts on Google or Microsoft search. When you arrive from one, the link carries a click reference (a "gclid" or "msclkid"). Storing that reference counts as advert measurement, so we ask first. If you say yes, the reference is kept in your browser for up to 90 days and sent to us once, with your sign-up, so we can tell the advertising platform that the click led to an account. That is all the platform learns: a click reference and the fact of a sign-up. Nothing about your finances, your partner or your children is ever attached to it, and we don't build audiences from who visits. If you say no, or don't answer, the reference is thrown away when you close the tab. You can change your answer here at any time.

Changes

If we change this notice in a way that matters we'll put a note on the dashboard and update the date above.