1. What we collect
Account data: your email address and a securely hashed password. Usage data: the analyses you run, their status, and the finished reports stored in your account. Payment data: payments are processed by Stripe; we never see or store your card details.
2. Your uploaded documents
Documents you upload are held in private, access-controlled storage only for the duration of your analysis, and are permanently deleted as soon as it completes, whether it succeeds or fails. The extracted text is sent to our AI provider (Anthropic) to produce the analysis, and is not used to train their models under the terms of our commercial agreement. Only the finished report is retained, in your account, until you delete it.
3. Who processes your data
We use a small number of processors to run the Service: Supabase (database and authentication), Vercel (hosting), Anthropic (analysis generation) and Stripe (payments). Each processes data only to provide their service to us.
4. How long we keep it
Your account and reports are kept while your account is active. You can delete reports at any time, and you can ask us to delete your account entirely, which removes your reports and personal data except records we must keep for tax or legal reasons.
5. Your rights
Under UK data protection law you have rights of access, correction, deletion, restriction and portability over your personal data, and the right to complain to the Information Commissioner’s Office (ico.org.uk). To exercise any of these, contact us.
6. Cookies
We use only the cookies necessary to keep you signed in. We do not use advertising or cross-site tracking cookies.
7. Contact
Privacy questions or requests: see our contact page.